$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/2b3ada55-5d50-360b-a9c2-056a83e9dbe2.roa File: 2b3ada55-5d50-360b-a9c2-056a83e9dbe2.roa (raw, json) Hash identifier: 7QjdgsdSTyiynYv4Q3Dyk+j+a/OtK7XmYg6D8PVWO3U= Subject key identifier: AE:58:FE:2D:8E:BA:E2:99:74:18:0C:E6:3F:0E:8D:E0:E3:52:28:59 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584F569A6F12AFC06C26B9C66D80 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/2b3ada55-5d50-360b-a9c2-056a83e9dbe2.roa Signing time: Tue 29 Sep 2026 18:06:08 +0000 ROA not before: Tue 29 Sep 2026 18:06:08 +0000 ROA not after: Mon 28 Dec 2026 19:06:08 +0000 asID: 396253 IP address blocks: 163.120.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:9a:6f:12:af:c0:6c:26:b9:c6:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Sep 29 18:06:08 2026 GMT Not After : Dec 28 19:06:08 2026 GMT Subject: CN=ebb2e418-5c5a-4d2c-9f5a-9008bc0e699c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b8:71:7c:bf:f1:22:7d:4c:4d:b2:b1:0f:8f: 26:99:95:c6:b7:8b:a5:c2:35:62:08:23:10:63:09: f4:f7:75:da:e1:ca:2a:1c:ac:38:21:c8:40:81:4f: 3f:e3:3e:c0:75:4b:21:35:e4:3c:0f:1d:95:3e:20: 94:98:98:37:aa:1a:24:de:25:b7:c3:ef:53:5f:7a: 3a:34:f5:f7:c4:8d:ba:62:58:2e:2d:1b:b7:64:84: 64:be:33:53:d7:68:0e:67:42:bd:fc:5e:e9:a6:b0: 22:a9:48:bb:64:5c:37:98:48:c3:51:29:2d:84:21: d7:7d:53:86:3f:1e:b8:2f:4b:93:ce:50:dc:0c:7d: 3a:1a:95:58:d8:7b:dd:85:ed:8f:b5:1a:6e:28:88: f0:a2:e2:b8:17:ac:04:99:fe:28:46:f2:25:94:0b: 43:3d:1c:61:22:bb:2e:4d:25:8f:26:2d:56:a5:52: 2f:a7:56:cd:35:6a:cd:00:dc:42:a1:36:dc:5e:91: 58:c9:59:f1:9e:25:66:15:1f:fe:fd:2e:a6:5b:88: 46:e6:2e:59:d9:d9:e3:67:92:7e:d9:e7:3a:b1:fe: 8e:e5:35:83:80:2b:2f:e4:ee:bd:ec:71:e5:42:4b: 20:14:e7:d1:74:13:a1:f6:66:83:ab:e6:4d:78:81: d3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:58:FE:2D:8E:BA:E2:99:74:18:0C:E6:3F:0E:8D:E0:E3:52:28:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/2b3ada55-5d50-360b-a9c2-056a83e9dbe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 163.120.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:e2:f7:e1:5c:32:14:52:80:42:dc:5c:78:96:4a:b7:98:aa: a7:c9:99:38:53:a8:35:e6:28:e4:f0:1c:31:b9:3d:85:ed:fb: 67:50:64:68:8f:d5:58:99:14:b2:3a:72:c0:e6:57:7c:66:5b: bd:c4:70:93:35:55:c4:e0:44:d9:bb:30:d1:84:1e:3e:38:e2: 80:e9:9d:6b:37:df:ab:f8:a9:b4:70:68:23:6c:65:8e:79:46: 7f:f7:2e:e1:12:bb:d1:2d:b0:1e:1d:40:33:b0:ad:29:0f:2e: a5:c8:0f:e4:b9:e4:eb:fa:86:71:65:77:07:97:0f:da:13:8f: 52:f4:a6:7b:04:52:d4:ce:cc:dc:30:65:b4:72:73:07:bb:5f: 95:51:b9:b2:4a:d4:0e:92:d3:45:01:68:e9:55:b3:87:03:37: 28:a9:54:68:8c:c2:55:ca:77:a6:ab:9f:46:a5:48:f6:a4:06: 6b:22:05:b2:65:d5:06:83:5c:00:00:74:bc:a7:fc:fc:fe:b4: b6:23:1f:78:47:e7:88:d1:34:cd:50:44:e0:6f:da:f3:5f:d9: d0:7e:cb:39:1a:87:bd:ed:46:e1:a4:b2:c8:65:08:5a:c9:5f: 33:17:bd:c6:c6:38:20:06:66:59:0a:10:c9:35:25:7c:79:90: 64:8c:b1:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Wmm8Sr8BsJrnGbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDkyOTE4MDYwOFoXDTI2MTIyODE5MDYwOFowLzEtMCsGA1UEAxMk ZWJiMmU0MTgtNWM1YS00ZDJjLTlmNWEtOTAwOGJjMGU2OTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrhxfL/xIn1MTbKxD48mmZXGt4ulwjViCCMQ Ywn093Xa4coqHKw4IchAgU8/4z7AdUshNeQ8Dx2VPiCUmJg3qhok3iW3w+9TX3o6 NPX3xI26YlguLRu3ZIRkvjNT12gOZ0K9/F7pprAiqUi7ZFw3mEjDUSkthCHXfVOG Px64L0uTzlDcDH06GpVY2Hvdhe2PtRpuKIjwouK4F6wEmf4oRvIllAtDPRxhIrsu TSWPJi1WpVIvp1bNNWrNANxCoTbcXpFYyVnxniVmFR/+/S6mW4hG5i5Z2dnjZ5J+ 2ec6sf6O5TWDgCsv5O697HHlQksgFOfRdBOh9maDq+ZNeIHTcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5Y/i2OuuKZdBgM5j8OjeDjUihZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvMmIzYWRhNTUtNWQ1MC0z NjBiLWE5YzItMDU2YTgzZTlkYmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3hVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEni9+FcMhRSgELcXHiWSreYqqfJmThTqDXmKOTwHDG5PYXt+2dQZGiP 1ViZFLI6csDmV3xmW73EcJM1VcTgRNm7MNGEHj444oDpnWs336v4qbRwaCNsZY55 Rn/3LuESu9EtsB4dQDOwrSkPLqXID+S55Ov6hnFldweXD9oTj1L0pnsEUtTOzNww ZbRycwe7X5VRubJK1A6S00UBaOlVs4cDNyipVGiMwlXKd6arn0alSPakBmsiBbJl 1QaDXAAAdLyn/Pz+tLYjH3hH54jRNM1QROBv2vNf2dB+yzkah73tRuGksshlCFrJ XzMXvcbGOCAGZlkKEMk1JXx5kGSMsRg= -----END CERTIFICATE-----Generated at Sun Oct 4 11:14:38 2026 by rpki-client