$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8286479d-9721-3b8f-8c5e-4a0f33f5360a.roa File: 8286479d-9721-3b8f-8c5e-4a0f33f5360a.roa (raw, json) Hash identifier: NPDDDCIZMqcVcZnVaPoO3VPz9UuJMnABMepqHNBTDoI= Subject key identifier: EA:86:54:F4:C0:20:E8:78:3F:16:38:0F:7C:2B:14:20:2B:FB:53:9B Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B0B76A5126DAFF4BF6CF0EF40 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8286479d-9721-3b8f-8c5e-4a0f33f5360a.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 396253 IP address blocks: 163.120.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a5:12:6d:af:f4:bf:6c:f0:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=a1a3bbbc-adb0-416f-9f1d-b9a52a5bb168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a9:68:cf:09:38:e4:74:92:6b:c3:4f:34:d7: 3e:ff:5d:23:dc:29:99:2b:fa:15:3d:37:c9:11:9b: 4a:0a:41:15:41:c2:da:ef:18:49:9b:33:40:57:46: 60:4d:df:3f:93:0c:8e:36:b7:0a:68:e4:a5:68:52: 2b:16:55:65:03:89:73:60:e9:71:d1:63:c7:93:42: 1f:30:4f:dc:33:1b:91:12:10:03:e5:c8:a0:7a:3f: b8:f6:18:ff:fa:af:b2:29:7c:74:f1:a1:b1:18:7b: 54:82:48:ff:30:7c:97:fb:82:38:a9:d9:20:eb:8b: 92:78:14:50:19:48:5f:f7:5b:0a:bf:31:0f:13:a3: c6:9d:23:30:98:37:e4:cb:50:fd:0c:9b:d7:fb:d6: 79:44:71:35:a7:24:0a:0b:f6:21:4f:64:cb:86:9c: 0a:15:c1:9a:1a:55:7b:25:fd:51:c7:5b:9d:a2:aa: 7d:26:ff:83:ae:6a:a7:85:fd:74:23:9e:2f:f3:a2: 34:a6:02:59:de:ce:91:3b:91:41:a6:a1:9e:48:cc: 8c:90:af:53:00:65:26:80:28:4e:4f:09:e7:6c:e7: 6c:89:a7:dc:c1:a9:fe:34:35:36:66:00:77:58:b1: 56:ce:86:61:e3:5e:05:ac:29:0b:77:80:f8:a8:fe: 8e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:86:54:F4:C0:20:E8:78:3F:16:38:0F:7C:2B:14:20:2B:FB:53:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8286479d-9721-3b8f-8c5e-4a0f33f5360a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 163.120.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:96:13:e2:69:80:57:fd:32:26:bc:05:f5:6f:5f:c8:8d:67: f2:e4:f6:67:75:f7:11:b6:45:b3:a8:01:69:30:50:2d:02:d2: 88:df:5c:31:3b:b9:c6:0f:e7:34:13:d7:16:ba:6c:1a:b0:fa: 1f:b6:bd:76:46:1f:4f:21:fe:5c:c2:d6:56:fa:72:fc:21:98: 07:b1:4e:d3:e4:c9:77:66:ba:ba:cc:9f:58:09:ad:a5:2e:bf: 03:1d:58:90:33:0b:d1:df:48:81:fe:9e:62:6a:6f:7a:a8:ec: f7:eb:59:b8:be:6b:de:8d:4f:60:02:a0:98:1d:95:1e:13:eb: 72:ab:9e:c2:86:16:6a:d0:cc:72:a5:e3:6a:3c:bf:f1:1a:ea: f7:c5:05:73:cb:ae:ed:c8:35:05:79:65:12:41:b5:6c:10:ad: 9b:cc:19:ae:ad:69:4d:8f:f6:d4:c9:c9:3c:bd:b1:cd:1c:f2: ab:82:30:2b:ee:62:c8:6b:6e:e8:9d:5e:f8:28:bd:24:31:7f: be:dd:95:a5:40:dc:14:2d:b2:95:a5:55:d5:dd:cf:91:be:00: 31:5c:31:38:eb:bc:a2:6e:98:85:ba:d4:a5:f1:a3:f5:c2:2b: 18:41:a0:8a:11:08:1f:2e:3c:99:a6:ee:a7:89:86:e3:1c:0a: b1:e0:3a:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqUSba/0v2zw70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk YTFhM2JiYmMtYWRiMC00MTZmLTlmMWQtYjlhNTJhNWJiMTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAualozwk45HSSa8NPNNc+/10j3CmZK/oVPTfJ EZtKCkEVQcLa7xhJmzNAV0ZgTd8/kwyONrcKaOSlaFIrFlVlA4lzYOlx0WPHk0If ME/cMxuREhAD5cigej+49hj/+q+yKXx08aGxGHtUgkj/MHyX+4I4qdkg64uSeBRQ GUhf91sKvzEPE6PGnSMwmDfky1D9DJvX+9Z5RHE1pyQKC/YhT2TLhpwKFcGaGlV7 Jf1Rx1udoqp9Jv+Drmqnhf10I54v86I0pgJZ3s6RO5FBpqGeSMyMkK9TAGUmgChO TwnnbOdsiafcwan+NDU2ZgB3WLFWzoZh414FrCkLd4D4qP6OrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqGVPTAIOh4PxY4D3wrFCAr+1ObMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvODI4NjQ3OWQtOTcyMS0z YjhmLThjNWUtNGEwZjMzZjUzNjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3hGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKWE+JpgFf9Mia8BfVvX8iNZ/Lk9md19xG2RbOoAWkwUC0C0ojfXDE7 ucYP5zQT1xa6bBqw+h+2vXZGH08h/lzC1lb6cvwhmAexTtPkyXdmurrMn1gJraUu vwMdWJAzC9HfSIH+nmJqb3qo7PfrWbi+a96NT2ACoJgdlR4T63KrnsKGFmrQzHKl 42o8v/Ea6vfFBXPLru3INQV5ZRJBtWwQrZvMGa6taU2P9tTJyTy9sc0c8quCMCvu YshrbuidXvgovSQxf77dlaVA3BQtspWlVdXdz5G+ADFcMTjrvKJumIW61KXxo/XC KxhBoIoRCB8uPJmm7qeJhuMcCrHgOtE= -----END CERTIFICATE-----Generated at Mon Oct 20 07:31:13 2025 by rpki-client