$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/d36321c4-60d7-3325-9a68-8325141830bc.roa File: d36321c4-60d7-3325-9a68-8325141830bc.roa (raw, json) Hash identifier: vuvvWaHg0CbILw/ZXs74Mb/oAil2kiwJ+xDn58sn8m8= Subject key identifier: D1:A8:52:44:FA:4C:0C:9D:18:88:00:F1:C2:ED:CA:30:9B:F8:AF:50 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F43285849D164E58165665870FF45C560 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/d36321c4-60d7-3325-9a68-8325141830bc.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 137922 IP address blocks: 163.120.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:e5:81:65:66:58:70:ff:45:c5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=be6a4e16-f131-41cb-9776-71c35d08ff75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5f:44:54:da:1a:e7:38:0c:86:a2:84:ec:79: 16:27:4c:1d:38:30:1a:58:26:e1:c6:33:10:af:ad: 1c:3c:b2:01:52:aa:79:e4:f4:10:23:39:6d:d4:3c: 3a:9c:5d:66:33:b3:87:11:5d:c0:78:26:4e:b7:30: 4e:18:74:3d:4a:76:1e:47:94:69:31:c0:b2:31:af: 33:92:85:a8:f2:2a:ae:31:ef:15:0a:75:b8:a7:a4: 44:19:47:c9:d5:f4:5c:64:2a:d1:53:37:b2:f4:a8: d7:33:c5:8b:ed:b2:bb:e0:35:be:aa:bf:d1:2b:ad: 45:45:da:b9:f7:4c:26:3f:a3:24:0b:e2:ac:75:be: 4b:9d:0b:96:8d:8b:1e:c6:71:79:da:82:5d:b9:f1: 8f:0e:53:02:07:ad:4d:b1:3d:ad:d7:e9:0d:64:23: 66:a9:8a:c2:16:a9:a3:b9:80:91:ad:4f:f2:f4:fe: 8b:15:53:a4:94:08:0d:36:c0:3f:d4:fc:84:b4:b9: 3a:9a:d7:56:33:06:6c:de:a2:5e:3d:0e:88:fa:9d: 0f:fa:5c:fa:4a:1c:2c:14:00:ab:93:8d:fd:d1:34: 35:56:28:68:10:b3:ad:ca:d2:8c:38:ce:39:50:1d: 80:1f:53:35:97:d2:40:64:0d:6a:8c:a4:3d:a8:0c: 88:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A8:52:44:FA:4C:0C:9D:18:88:00:F1:C2:ED:CA:30:9B:F8:AF:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/d36321c4-60d7-3325-9a68-8325141830bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 163.120.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:63:38:3c:2a:68:0c:ec:83:ed:95:78:fc:e1:2f:22:6b:5d: 91:e9:97:e1:81:46:60:18:63:b7:3e:dd:fd:13:20:23:00:4c: f9:a0:f1:61:73:d8:e3:79:e2:95:86:0e:96:4b:27:d7:66:f6: 1c:02:f4:e4:b8:1d:22:f8:b8:98:c2:ed:24:d1:7d:11:d3:c3: 58:b4:d1:e8:a8:ec:b0:93:ab:a6:3c:96:78:ef:c6:1b:f7:f4: 22:21:f9:8c:1f:bd:2a:85:97:55:f0:60:80:3b:16:f3:27:02: 48:79:df:19:85:28:ff:c9:98:5c:b0:29:c5:f6:3f:c7:e4:c5: 19:22:05:5b:f3:51:6c:55:d3:71:34:dc:0b:13:bd:49:45:98: 99:ce:76:5c:4c:62:77:96:79:9a:8e:61:46:06:78:af:ea:87: 95:ad:e3:25:82:ab:c3:cc:5c:cf:04:d3:de:d6:1e:b9:25:77: 21:da:6e:d5:cc:37:95:26:fa:62:b6:6d:fd:64:53:cd:b5:17: e5:53:36:81:73:37:ae:58:77:50:6e:ca:b1:ee:b5:76:57:dd: 98:3e:81:91:6a:50:39:db:f0:65:5d:41:d3:49:19:94:f1:30: 3b:11:fd:d0:66:c9:56:aa:79:f3:9e:ce:36:3d:c0:bf:09:76: ae:6a:25:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZOWBZWZYcP9FxWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk YmU2YTRlMTYtZjEzMS00MWNiLTk3NzYtNzFjMzVkMDhmZjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl9EVNoa5zgMhqKE7HkWJ0wdODAaWCbhxjMQ r60cPLIBUqp55PQQIzlt1Dw6nF1mM7OHEV3AeCZOtzBOGHQ9SnYeR5RpMcCyMa8z koWo8iquMe8VCnW4p6REGUfJ1fRcZCrRUzey9KjXM8WL7bK74DW+qr/RK61FRdq5 90wmP6MkC+Ksdb5LnQuWjYsexnF52oJdufGPDlMCB61NsT2t1+kNZCNmqYrCFqmj uYCRrU/y9P6LFVOklAgNNsA/1PyEtLk6mtdWMwZs3qJePQ6I+p0P+lz6ShwsFACr k4390TQ1VihoELOtytKMOM45UB2AH1M1l9JAZA1qjKQ9qAyIVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGoUkT6TAydGIgA8cLtyjCb+K9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvZDM2MzIxYzQtNjBkNy0z MzI1LTlhNjgtODMyNTE0MTgzMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3hKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpjODwqaAzsg+2VePzhLyJrXZHpl+GBRmAYY7c+3f0TICMATPmg8WFz 2ON54pWGDpZLJ9dm9hwC9OS4HSL4uJjC7STRfRHTw1i00eio7LCTq6Y8lnjvxhv3 9CIh+YwfvSqFl1XwYIA7FvMnAkh53xmFKP/JmFywKcX2P8fkxRkiBVvzUWxV03E0 3AsTvUlFmJnOdlxMYneWeZqOYUYGeK/qh5Wt4yWCq8PMXM8E097WHrkldyHabtXM N5Um+mK2bf1kU821F+VTNoFzN65Yd1BuyrHutXZX3Zg+gZFqUDnb8GVdQdNJGZTx MDsR/dBmyVaqefOezjY9wL8Jdq5qJds= -----END CERTIFICATE-----Generated at Tue Jul 1 03:57:50 2025 by rpki-client