$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/653df23b-3d63-3c7d-bf2e-02ee206101e7.roa File: 653df23b-3d63-3c7d-bf2e-02ee206101e7.roa (raw, json) Hash identifier: Rz31qIkhEhVIRR9Ar08zm46p+XoqwnS0evJSJsoUt+o= Subject key identifier: 97:1E:3D:AC:E5:8E:8F:B4:02:60:B5:BD:F8:C5:88:0A:25:EA:C6:72 Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F4328584EB84734B84A932F94CFAF0E00 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/653df23b-3d63-3c7d-bf2e-02ee206101e7.roa Signing time: Tue 04 Aug 2026 01:00:12 +0000 ROA not before: Tue 04 Aug 2026 01:00:12 +0000 ROA not after: Mon 02 Nov 2026 02:00:12 +0000 asID: 396253 IP address blocks: 163.120.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b8:47:34:b8:4a:93:2f:94:cf:af:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Aug 4 01:00:12 2026 GMT Not After : Nov 2 02:00:12 2026 GMT Subject: CN=77a7ddd6-1647-414f-96c1-a958fc66f5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:36:48:98:e4:0f:b7:32:d0:48:11:7b:97:bc: fd:36:11:b1:b0:a8:17:73:f8:f8:f0:af:7c:18:0c: 65:e0:e7:78:fc:8f:ac:e9:25:fd:1f:33:2a:76:37: 00:eb:ee:27:b7:3f:73:7f:d9:86:0c:10:83:f3:75: ed:72:b4:28:d1:2d:b4:de:f2:b1:0d:b7:b7:26:87: 3b:89:35:e7:a1:68:e5:b7:1b:e0:c3:b1:88:d7:53: 59:a8:25:71:a9:7c:65:9b:a3:66:2c:d1:e4:70:55: 7f:77:2a:f1:46:4a:ce:bc:4d:d6:be:10:89:d3:77: 4e:6c:d0:b4:b6:05:45:27:aa:33:cb:1e:d1:d3:da: 69:3f:fa:23:19:98:f3:14:30:f1:0c:ec:b7:a4:8f: df:ed:d6:3e:67:8e:23:ef:00:9a:30:33:2a:ed:57: 1b:2d:4f:a5:26:91:c8:7e:b3:9b:40:0a:ca:fd:fe: 2c:85:49:78:46:d6:23:04:0b:5b:5c:11:a3:86:bb: db:dc:5c:16:77:00:4c:9a:8c:44:c2:45:5c:52:87: ea:34:06:6b:42:3f:96:e1:f9:b0:2c:62:e4:80:ef: 47:e7:17:1a:2f:fe:62:40:c0:b2:b7:af:63:97:94: 7d:fe:3c:04:da:5b:b5:8f:7d:e2:89:b4:0c:77:a1: dc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1E:3D:AC:E5:8E:8F:B4:02:60:B5:BD:F8:C5:88:0A:25:EA:C6:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/653df23b-3d63-3c7d-bf2e-02ee206101e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 163.120.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:9d:65:2b:ba:e4:66:59:e5:85:a6:3e:5a:e4:3c:04:7a:79: d8:6e:c0:37:68:95:94:dc:73:f6:f9:1f:8f:eb:77:02:6d:eb: e6:15:02:ff:d8:25:b4:f5:75:fc:fc:0e:e4:07:2a:f5:b5:e7: 49:1c:41:41:c7:36:bb:6e:c4:4f:bf:d1:f4:84:d4:0d:6e:65: 74:ee:d4:96:bd:5b:2a:3a:6f:30:12:5e:80:0f:ba:2b:f1:5d: 61:4a:96:28:5a:2c:cb:57:9a:57:e0:f6:ee:94:1f:96:31:d9: 5d:a7:e5:33:68:59:d0:fa:36:fd:20:40:2c:7e:81:29:70:d6: 7f:d4:74:0d:f6:c0:1c:af:17:61:81:21:a3:4a:b7:c8:69:2d: c9:82:e0:dc:ae:2e:a1:64:83:5e:07:eb:e4:9c:ea:d5:e3:56: cc:29:f7:b7:27:c2:23:93:91:78:44:f7:84:72:ce:d7:a0:d0: 81:78:75:b5:07:06:41:4b:ab:0a:15:21:e4:75:20:b6:cf:d3: 0d:6c:cb:0c:46:b9:9a:14:e8:2d:c4:dd:7f:18:e7:f6:38:ec: 92:7b:24:78:bb:c5:c8:e7:98:26:aa:80:d7:8a:ce:25:cc:d5: fe:1f:7f:1f:0f:3c:93:13:18:af:c9:56:e0:0b:ff:fe:74:00: 64:84:6f:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64RzS4SpMvlM+vDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk NzdhN2RkZDYtMTY0Ny00MTRmLTk2YzEtYTk1OGZjNjZmNWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DZImOQPtzLQSBF7l7z9NhGxsKgXc/j48K98 GAxl4Od4/I+s6SX9HzMqdjcA6+4ntz9zf9mGDBCD83XtcrQo0S203vKxDbe3Joc7 iTXnoWjltxvgw7GI11NZqCVxqXxlm6NmLNHkcFV/dyrxRkrOvE3WvhCJ03dObNC0 tgVFJ6ozyx7R09ppP/ojGZjzFDDxDOy3pI/f7dY+Z44j7wCaMDMq7VcbLU+lJpHI frObQArK/f4shUl4RtYjBAtbXBGjhrvb3FwWdwBMmoxEwkVcUofqNAZrQj+W4fmw LGLkgO9H5xcaL/5iQMCyt69jl5R9/jwE2lu1j33iibQMd6HcZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcePazljo+0AmC1vfjFiAol6sZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvNjUzZGYyM2ItM2Q2My0z YzdkLWJmMmUtMDJlZTIwNjEwMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3hOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOdZSu65GZZ5YWmPlrkPAR6edhuwDdolZTcc/b5H4/rdwJt6+YVAv/Y JbT1dfz8DuQHKvW150kcQUHHNrtuxE+/0fSE1A1uZXTu1Ja9Wyo6bzASXoAPuivx XWFKlihaLMtXmlfg9u6UH5Yx2V2n5TNoWdD6Nv0gQCx+gSlw1n/UdA32wByvF2GB IaNKt8hpLcmC4NyuLqFkg14H6+Sc6tXjVswp97cnwiOTkXhE94Ryzteg0IF4dbUH BkFLqwoVIeR1ILbP0w1sywxGuZoU6C3E3X8Y5/Y47JJ7JHi7xcjnmCaqgNeKziXM 1f4ffx8PPJMTGK/JVuAL//50AGSEb7A= -----END CERTIFICATE-----Generated at Sat Aug 15 02:08:36 2026 by rpki-client