$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c661c3f8-2c80-3160-8e06-e8d20f9f6dae.roa File: c661c3f8-2c80-3160-8e06-e8d20f9f6dae.roa (raw, json) Hash identifier: 4BncdzuyBgnGbWGjMSR8NA6sMR2eQ5tfRw+HMJgJNT0= Subject key identifier: 08:37:96:86:49:54:5B:9E:FD:70:2B:32:46:99:E8:5E:B9:67:D4:D9 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584B110C0A7A3749B7F17B473960 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c661c3f8-2c80-3160-8e06-e8d20f9f6dae.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 137922 IP address blocks: 163.120.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:0a:7a:37:49:b7:f1:7b:47:39:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=9c7c3208-ec6a-4108-bb91-2d8613ada016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e8:fa:b5:e9:3c:b4:2c:05:a6:96:c7:60:0d: d3:ff:5f:5b:74:89:cd:35:69:d6:ee:65:4c:3f:10: 0f:49:25:2b:a3:10:1b:dc:4b:1d:50:fd:ee:24:d0: e4:e6:4d:f3:17:d4:f8:e5:f6:59:03:cf:5e:b9:da: 40:a2:3a:1c:4e:8d:c6:bb:41:76:a8:e5:e5:52:c4: 71:03:67:de:4f:d8:04:12:35:d1:69:3c:33:87:54: f1:45:81:22:b3:69:94:1e:31:6d:c0:e5:36:b3:be: 78:40:1d:bb:a3:ee:ec:0f:ce:7b:81:52:23:b1:c0: a0:73:41:d2:a0:a1:f8:83:83:d6:c7:a3:5b:fb:44: af:27:36:82:10:c6:44:c6:67:5b:d7:a6:bb:10:78: 38:96:7b:d4:bd:47:31:de:f9:bf:aa:ad:b4:87:32: 82:c8:ff:69:59:ba:c5:18:aa:18:9f:96:eb:87:46: ef:15:1c:1e:26:06:21:9d:29:0f:f5:6c:c6:2c:77: 53:41:c0:44:62:92:ef:5c:11:b5:c2:bc:4f:3e:6e: d5:48:92:bc:a7:19:e9:a1:d0:e8:c3:77:89:29:f9: 0e:49:81:ef:33:7e:11:99:a9:39:c2:8f:66:3a:21: 67:ba:93:41:19:59:93:ae:e4:09:cc:d8:23:e3:64: 53:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:37:96:86:49:54:5B:9E:FD:70:2B:32:46:99:E8:5E:B9:67:D4:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/c661c3f8-2c80-3160-8e06-e8d20f9f6dae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 163.120.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:30:5e:1c:39:4f:f9:dc:0a:32:0b:59:aa:22:26:62:c3:a7: 32:e2:84:08:5c:00:bc:8c:57:aa:3d:30:a1:eb:ff:9a:aa:28: 0c:7e:34:a8:9e:2a:96:5f:c3:72:b6:5f:21:5a:54:88:60:d8: 32:a2:65:a3:2a:0f:d8:a4:4b:e3:6f:12:db:04:10:a5:99:41: 51:7d:4b:25:2e:7c:2f:40:0c:b7:1b:a3:a1:46:eb:e1:ed:73: 42:1e:03:83:14:2f:41:e0:ee:c0:af:ab:c9:3f:6d:8b:c8:95: 0d:bc:e4:d6:d6:0a:e9:91:11:aa:43:1e:c3:ef:2b:77:76:2e: aa:fe:d6:4e:9e:52:f4:4a:64:6f:3f:25:e7:1a:68:f9:37:7e: a3:1d:f4:15:1a:63:0c:b1:81:3d:b2:ef:06:b1:e7:0e:35:d3: 83:12:b9:91:06:f2:26:2b:b1:6a:01:f8:b4:a8:8b:74:64:69: f1:2d:11:85:5b:5d:33:45:07:36:80:66:02:76:8b:62:9d:e9: 79:0b:66:72:ab:36:1c:b1:68:58:70:02:d1:95:7c:3f:24:d1: e1:ad:02:29:3a:7f:c6:64:81:70:59:96:0c:23:a8:7f:52:16: 5a:6a:ed:6e:5c:4b:dd:bf:07:bb:50:51:c0:18:79:48:04:9d: 7c:66:55:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDAp6N0m38XtHOWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk OWM3YzMyMDgtZWM2YS00MTA4LWJiOTEtMmQ4NjEzYWRhMDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuj6tek8tCwFppbHYA3T/19bdInNNWnW7mVM PxAPSSUroxAb3EsdUP3uJNDk5k3zF9T45fZZA89eudpAojocTo3Gu0F2qOXlUsRx A2feT9gEEjXRaTwzh1TxRYEis2mUHjFtwOU2s754QB27o+7sD857gVIjscCgc0HS oKH4g4PWx6Nb+0SvJzaCEMZExmdb16a7EHg4lnvUvUcx3vm/qq20hzKCyP9pWbrF GKoYn5brh0bvFRweJgYhnSkP9WzGLHdTQcBEYpLvXBG1wrxPPm7VSJK8pxnpodDo w3eJKfkOSYHvM34Rmak5wo9mOiFnupNBGVmTruQJzNgj42RTewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAg3loZJVFue/XArMkaZ6F65Z9TZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvYzY2MWMzZjgtMmM4MC0z MTYwLThlMDYtZThkMjBmOWY2ZGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3hHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkwXhw5T/ncCjILWaoiJmLDpzLihAhcALyMV6o9MKHr/5qqKAx+NKie KpZfw3K2XyFaVIhg2DKiZaMqD9ikS+NvEtsEEKWZQVF9SyUufC9ADLcbo6FG6+Ht c0IeA4MUL0Hg7sCvq8k/bYvIlQ285NbWCumREapDHsPvK3d2Lqr+1k6eUvRKZG8/ JecaaPk3fqMd9BUaYwyxgT2y7wax5w4104MSuZEG8iYrsWoB+LSoi3RkafEtEYVb XTNFBzaAZgJ2i2Kd6XkLZnKrNhyxaFhwAtGVfD8k0eGtAik6f8ZkgXBZlgwjqH9S Flpq7W5cS92/B7tQUcAYeUgEnXxmVZY= -----END CERTIFICATE-----Generated at Mon Oct 20 06:33:08 2025 by rpki-client