$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/7223b940-9558-3128-873c-80e6ed49a2d4.roa File: 7223b940-9558-3128-873c-80e6ed49a2d4.roa (raw, json) Hash identifier: iP6QvltaIWv+vcZiCfnFFWzRMKf2Quwwpmo+NbDy1hw= Subject key identifier: 4B:F9:00:8B:49:09:8C:19:AD:B4:F0:BC:51:D7:13:24:EA:59:F5:53 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584D1F4A44DC27235AE66CBE1480 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/7223b940-9558-3128-873c-80e6ed49a2d4.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396253 IP address blocks: 163.120.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:44:dc:27:23:5a:e6:6c:be:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=60d5d1d5-a46c-42f6-973f-8c9c22d9f72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:95:6f:a6:b1:51:0a:7c:f2:e8:e7:59:98:2e: 53:1b:7d:0c:37:fb:31:09:e9:0c:7f:2f:72:1f:f9: 26:54:83:20:74:65:e3:8d:5b:1e:16:ca:2a:7c:5b: 6b:f9:b5:0e:80:51:d5:e7:ab:6c:23:68:84:e8:5e: f8:9d:7f:f0:97:db:f1:18:48:9c:66:b1:a3:ae:5d: 9d:6e:23:eb:c3:82:0a:c9:93:3a:78:2e:3a:c7:07: 9c:62:1e:18:50:a1:3b:2a:81:4d:2d:48:17:7d:f1: 1f:8a:00:8d:bf:49:05:50:03:f6:57:43:ea:a8:17: 13:80:db:6b:b0:4c:b6:98:e8:7d:c2:65:e1:7e:12: 32:0d:fb:d4:2c:5a:18:08:57:4f:6a:bd:cd:89:7d: 8d:eb:7e:6b:5d:1f:67:67:b1:fa:a7:64:da:9c:09: cf:e1:92:ef:37:c7:58:e1:da:b5:a1:2b:c6:8e:e7: fd:11:f1:de:06:f4:5c:ce:2e:ef:21:6f:bd:64:90: d9:07:56:7a:cf:69:2e:06:36:cb:1b:21:e4:df:db: ff:fb:ae:6e:72:15:0b:b0:1b:92:53:71:d5:65:ce: 98:b9:00:22:ee:56:7c:94:70:f5:8e:72:6f:89:ac: 01:cf:f1:05:b6:46:35:91:01:60:bb:c7:15:49:9b: 1e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F9:00:8B:49:09:8C:19:AD:B4:F0:BC:51:D7:13:24:EA:59:F5:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/7223b940-9558-3128-873c-80e6ed49a2d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 163.120.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a0:ab:c5:9a:a2:70:8d:7f:ea:ee:78:01:51:7e:5a:07:a1: d6:81:03:2d:bd:57:bf:c3:59:33:30:92:51:a5:80:dc:29:91: 00:2e:7a:80:86:1d:2f:e2:82:d1:f6:46:55:80:b6:cb:cc:9d: 0c:d2:23:d6:2e:67:32:97:47:39:30:e7:6e:75:d1:65:ff:93: 54:d2:c9:6f:8b:86:fe:71:79:49:30:06:d3:9f:58:9e:f8:7b: ce:d3:6c:e9:81:e8:9d:c3:6c:72:5d:4d:35:8f:60:dc:be:89: 36:61:9c:5f:d3:df:8c:d9:1d:8f:4d:36:54:02:1d:ab:61:27: 56:de:bf:fc:97:6d:7a:c6:f3:ec:e2:93:2d:0b:61:4b:57:dc: b8:b4:1e:cf:34:28:72:f7:a4:7b:ee:d3:28:30:38:68:95:24: c4:8a:a4:62:8f:2b:f6:2c:c7:b9:f2:ad:9b:45:67:97:d1:b2: 2c:91:3c:af:86:75:fe:60:53:32:f3:b9:3d:60:33:09:90:9e: 55:57:ce:4b:53:54:fa:cc:70:84:a9:28:81:e0:82:09:0c:e6: 8a:00:9c:30:82:b9:f4:e3:dc:14:59:b4:6b:d6:fb:91:19:10: c0:3f:44:a9:19:a0:b4:d3:7b:4d:a3:84:8d:20:48:27:85:16: 19:58:80:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSkTcJyNa5my+FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NjBkNWQxZDUtYTQ2Yy00MmY2LTk3M2YtOGM5YzIyZDlmNzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZVvprFRCnzy6OdZmC5TG30MN/sxCekMfy9y H/kmVIMgdGXjjVseFsoqfFtr+bUOgFHV56tsI2iE6F74nX/wl9vxGEicZrGjrl2d biPrw4IKyZM6eC46xwecYh4YUKE7KoFNLUgXffEfigCNv0kFUAP2V0PqqBcTgNtr sEy2mOh9wmXhfhIyDfvULFoYCFdPar3NiX2N635rXR9nZ7H6p2TanAnP4ZLvN8dY 4dq1oSvGjuf9EfHeBvRczi7vIW+9ZJDZB1Z6z2kuBjbLGyHk39v/+65uchULsBuS U3HVZc6YuQAi7lZ8lHD1jnJviawBz/EFtkY1kQFgu8cVSZsexQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEv5AItJCYwZrbTwvFHXEyTqWfVTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNzIyM2I5NDAtOTU1OC0z MTI4LTg3M2MtODBlNmVkNDlhMmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3hZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOgq8WaonCNf+rueAFRfloHodaBAy29V7/DWTMwklGlgNwpkQAueoCG HS/igtH2RlWAtsvMnQzSI9YuZzKXRzkw52510WX/k1TSyW+Lhv5xeUkwBtOfWJ74 e87TbOmB6J3DbHJdTTWPYNy+iTZhnF/T34zZHY9NNlQCHathJ1bev/yXbXrG8+zi ky0LYUtX3Li0Hs80KHL3pHvu0ygwOGiVJMSKpGKPK/Ysx7nyrZtFZ5fRsiyRPK+G df5gUzLzuT1gMwmQnlVXzktTVPrMcISpKIHgggkM5ooAnDCCufTj3BRZtGvW+5EZ EMA/RKkZoLTTe02jhI0gSCeFFhlYgFU= -----END CERTIFICATE-----Generated at Thu Mar 26 18:08:37 2026 by rpki-client