$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8b44a220-e7e1-333d-a0ac-469647d3ca30.roa File: 8b44a220-e7e1-333d-a0ac-469647d3ca30.roa (raw, json) Hash identifier: dNLK8zIbZs00R0ArKnq7kf3KDEgP+uIZGyinLlwAmaI= Subject key identifier: C5:35:33:DC:2F:A8:7F:0D:8E:35:71:46:A1:D1:B4:41:21:69:A6:FF Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584D1F4A1B8875FF922D4E68610E Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8b44a220-e7e1-333d-a0ac-469647d3ca30.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396253 IP address blocks: 163.120.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:1b:88:75:ff:92:2d:4e:68:61:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=1254da40-80f4-4868-bd95-31c6452f0ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:95:b4:32:ee:30:f9:3d:17:73:67:75:51:50: b7:10:26:6a:ad:29:a8:85:3d:d0:76:57:76:18:30: c4:c0:9a:88:cf:9e:83:94:fb:4c:c9:e6:27:dd:41: c2:9a:f7:7a:f3:92:f8:bf:6d:04:ce:b7:04:1b:37: 74:cf:cf:7a:c9:d6:53:0f:16:35:e7:71:4c:52:01: 85:76:bf:ea:a4:74:12:34:08:94:c7:8a:e7:39:5f: 56:89:93:87:b1:43:ed:9e:2f:a4:6c:3f:ea:b7:1e: f9:6c:25:ea:6b:73:be:dc:e9:10:4f:d3:cb:99:ca: 74:09:ad:b7:33:65:01:f9:7f:09:3b:a0:81:03:aa: 5a:8e:29:23:8b:9f:4f:1c:ce:55:ab:bd:19:1a:80: d4:ae:16:e3:4b:a0:cf:06:de:2f:eb:1f:46:fc:55: 8e:fd:fe:78:4e:13:17:e8:87:67:dc:ab:e7:d0:a1: 79:1b:0c:b6:e3:0f:d2:e5:3d:99:99:6a:53:bb:d8: f7:af:3b:89:d2:eb:ff:29:c7:ae:67:50:11:48:8a: 64:56:ca:5d:69:40:59:6c:ed:47:64:c0:09:15:ec: 06:df:f6:f5:15:51:7c:c8:bf:4d:0c:fc:3a:4c:b1: 97:a5:e8:d0:cf:1e:79:2e:cf:50:0f:70:a4:e9:06: 92:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:35:33:DC:2F:A8:7F:0D:8E:35:71:46:A1:D1:B4:41:21:69:A6:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8b44a220-e7e1-333d-a0ac-469647d3ca30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 163.120.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:4c:e6:d3:c3:01:83:62:89:45:44:7e:d8:65:a8:bb:bb:9c: 5d:eb:01:76:b2:60:57:0b:e2:61:15:88:0c:97:5b:e7:b0:1d: 2b:aa:37:0e:d7:a0:4a:6c:92:65:3a:a8:53:d2:00:50:b8:e2: 71:1f:fd:93:e4:2c:a0:ff:30:c4:f2:76:78:24:06:04:37:5f: 4e:3c:53:f8:39:01:bb:e0:cb:ec:ef:56:06:34:3a:bc:d2:3c: 09:de:80:2d:ca:82:a7:a0:5d:d5:d3:f3:2d:2c:a9:b5:70:4d: b7:f5:4e:d8:61:3b:88:27:00:62:d5:70:06:33:bb:91:60:48: e5:bc:9e:11:e2:fb:37:35:5b:c3:21:aa:6d:56:15:5e:14:0c: 5d:46:89:a7:05:ad:78:d4:84:67:04:ca:bd:03:3f:41:12:45: 90:7e:9a:e7:da:e7:14:17:e8:80:40:c7:5b:06:3b:fb:91:05: 62:33:1b:97:e8:10:1c:81:7b:f6:0c:50:1d:90:53:29:5e:01: f3:da:8b:c5:fa:e6:35:20:04:26:74:63:50:57:bf:d1:a9:a8: 7d:e5:d7:59:a1:50:85:48:7c:6a:3f:6a:fe:d3:bd:f6:27:ce: 2c:ee:b1:7a:8f:55:d1:1f:cd:44:f3:fd:dc:62:f4:47:25:bd: c5:08:ba:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fShuIdf+SLU5oYQ4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MTI1NGRhNDAtODBmNC00ODY4LWJkOTUtMzFjNjQ1MmYwZWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpW0Mu4w+T0Xc2d1UVC3ECZqrSmohT3Qdld2 GDDEwJqIz56DlPtMyeYn3UHCmvd685L4v20EzrcEGzd0z896ydZTDxY153FMUgGF dr/qpHQSNAiUx4rnOV9WiZOHsUPtni+kbD/qtx75bCXqa3O+3OkQT9PLmcp0Ca23 M2UB+X8JO6CBA6pajikji59PHM5Vq70ZGoDUrhbjS6DPBt4v6x9G/FWO/f54ThMX 6Idn3Kvn0KF5Gwy24w/S5T2ZmWpTu9j3rzuJ0uv/KceuZ1ARSIpkVspdaUBZbO1H ZMAJFewG3/b1FVF8yL9NDPw6TLGXpejQzx55Ls9QD3Ck6QaSyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMU1M9wvqH8NjjVxRqHRtEEhaab/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvOGI0NGEyMjAtZTdlMS0z MzNkLWEwYWMtNDY5NjQ3ZDNjYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3hYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJM5tPDAYNiiUVEfthlqLu7nF3rAXayYFcL4mEViAyXW+ewHSuqNw7X oEpskmU6qFPSAFC44nEf/ZPkLKD/MMTydngkBgQ3X048U/g5Abvgy+zvVgY0OrzS PAnegC3KgqegXdXT8y0sqbVwTbf1TthhO4gnAGLVcAYzu5FgSOW8nhHi+zc1W8Mh qm1WFV4UDF1GiacFrXjUhGcEyr0DP0ESRZB+mufa5xQX6IBAx1sGO/uRBWIzG5fo EByBe/YMUB2QUyleAfPai8X65jUgBCZ0Y1BXv9GpqH3l11mhUIVIfGo/av7TvfYn zizusXqPVdEfzUTz/dxi9EclvcUIurs= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:29 2026 by rpki-client