$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8286479d-9721-3b8f-8c5e-4a0f33f5360a.roa File: 8286479d-9721-3b8f-8c5e-4a0f33f5360a.roa (raw, json) Hash identifier: 2loDUU4KpHqespt9znDzsqbpkpPq4IX4r7T0XBymRgQ= Subject key identifier: 81:5D:1C:56:C5:7B:79:11:6F:46:7C:2B:DA:45:DB:4F:87:79:AF:8D Certificate issuer: /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Certificate serial: 010D0C9F432858494B6412A0106CD47670CDF1C0 Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8286479d-9721-3b8f-8c5e-4a0f33f5360a.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 396253 IP address blocks: 163.120.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:12:a0:10:6c:d4:76:70:cd:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=a9112efa-617f-4dd0-83e9-1ef37d25ea50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:01:24:f7:48:3b:b9:60:b8:5a:e4:e5:7f:b9: 70:ec:40:a7:c6:60:99:74:58:79:7e:8d:3b:88:ca: 50:f8:41:20:02:bd:46:b0:06:3c:5a:84:e0:65:c8: 01:65:c9:6a:63:36:86:92:4b:2d:7a:ef:34:3e:b7: 8d:90:e7:33:e0:30:fb:a7:45:18:d3:0a:51:35:ba: 9b:3f:32:da:90:32:2f:09:ac:06:55:87:a6:a0:81: ac:e0:e7:f4:6d:22:76:c2:71:12:96:d5:d0:be:7c: 5c:70:fa:b0:c1:d3:91:09:6e:f0:81:70:38:49:f9: 09:8a:8f:5e:20:93:10:dc:dd:ee:34:38:08:c6:89: b6:45:ba:84:96:d2:10:ec:80:56:63:67:9e:0b:64: ee:84:2f:eb:05:df:af:33:8e:c3:37:83:1e:f2:0c: 74:c7:7a:db:6b:fc:b9:39:32:a9:00:20:c1:66:26: cc:9c:76:17:5d:b4:94:11:7d:1d:89:f2:35:5b:1c: 0c:f5:b1:d1:a6:0e:f3:31:b1:2b:f4:49:db:8e:27: c5:22:09:7e:c7:1e:66:21:48:66:07:e5:28:1a:66: 94:3f:4a:ac:9f:40:d8:b9:08:84:e4:73:72:de:f0: 22:85:46:45:85:f9:dd:4b:c5:f6:85:e4:12:a5:7c: 12:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5D:1C:56:C5:7B:79:11:6F:46:7C:2B:DA:45:DB:4F:87:79:AF:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/8286479d-9721-3b8f-8c5e-4a0f33f5360a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl X509v3 Authority Key Identifier: keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer sbgp-ipAddrBlock: critical IPv4: 163.120.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:18:72:ab:9e:8f:f5:c7:ad:75:68:73:d9:5e:38:cf:45:ca: 5f:c0:75:39:6a:b4:00:ca:98:ab:ed:1e:7f:99:06:25:61:54: 2e:ac:07:be:3a:76:34:45:a8:c3:89:44:86:af:a2:92:dc:65: c1:ad:68:f9:52:3f:a8:07:e6:c8:be:b7:55:40:56:56:8d:26: 95:3c:c9:6e:90:b0:0b:f2:6a:a4:9a:18:c8:85:8d:97:87:a7: cc:6e:6c:7d:a0:f1:79:6e:9f:07:4f:c0:6c:9a:4c:9d:6d:ba: 61:c6:49:a0:eb:0c:fb:e7:63:91:a2:a7:65:96:60:94:81:9b: f7:f6:3e:f0:2e:68:97:9c:4e:5e:58:f6:42:70:b2:99:e5:a2: 6f:a2:12:fd:a3:b4:05:c1:a3:30:ad:b7:e5:b5:c9:e5:a9:c7: f9:8a:d3:2a:ef:9e:c5:a1:28:5c:16:1d:5f:18:d9:5e:4b:33: a2:6f:8b:f9:d9:0f:fc:a4:85:90:36:5e:71:63:2d:ae:19:bf: 34:7d:06:d0:3c:56:4b:b1:67:51:ac:fe:bb:3e:7c:fd:f4:48: c9:c7:29:78:50:ba:fa:b3:92:61:c9:83:f7:6a:4a:1e:4c:7d: c6:d7:37:64:8f:8a:3c:93:d2:7a:e1:4f:53:9f:6c:46:99:48: 98:8c:d2:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBKgEGzUdnDN8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzg4NDdiZmQtM2M3Yi00NDdmLWI0NGMtZGFhYzlhZTVk YTkzMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YTkxMTJlZmEtNjE3Zi00ZGQwLTgzZTktMWVmMzdkMjVlYTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQEk90g7uWC4WuTlf7lw7ECnxmCZdFh5fo07 iMpQ+EEgAr1GsAY8WoTgZcgBZclqYzaGkksteu80PreNkOcz4DD7p0UY0wpRNbqb PzLakDIvCawGVYemoIGs4Of0bSJ2wnESltXQvnxccPqwwdORCW7wgXA4SfkJio9e IJMQ3N3uNDgIxom2RbqEltIQ7IBWY2eeC2TuhC/rBd+vM47DN4Me8gx0x3rba/y5 OTKpACDBZibMnHYXXbSUEX0difI1WxwM9bHRpg7zMbEr9EnbjifFIgl+xx5mIUhm B+UoGmaUP0qsn0DYuQiE5HNy3vAihUZFhfndS8X2heQSpXwSIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFdHFbFe3kRb0Z8K9pF20+Hea+NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0 N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFjOWFlNWRhOTMvODI4NjQ3OWQtOTcyMS0z YjhmLThjNWUtNGEwZjMzZjUzNjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzg4NDdiZmQtM2M3Yi00NDdmLWI0 NGMtZGFhYzlhZTVkYTkzLzM4ODQ3YmZkLTNjN2ItNDQ3Zi1iNDRjLWRhYWM5YWU1 ZGE5My5jcmwwHwYDVR0jBBgwFoAUEO7eCZdvZnw36RlJ8LsIUD//nOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zODg0N2JmZC0zYzdiLTQ0N2YtYjQ0Yy1kYWFj OWFlNWRhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3hGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwYcquej/XHrXVoc9leOM9Fyl/AdTlqtADKmKvtHn+ZBiVhVC6sB746 djRFqMOJRIavopLcZcGtaPlSP6gH5si+t1VAVlaNJpU8yW6QsAvyaqSaGMiFjZeH p8xubH2g8XlunwdPwGyaTJ1tumHGSaDrDPvnY5Gip2WWYJSBm/f2PvAuaJecTl5Y 9kJwspnlom+iEv2jtAXBozCtt+W1yeWpx/mK0yrvnsWhKFwWHV8Y2V5LM6Jvi/nZ D/ykhZA2XnFjLa4ZvzR9BtA8VkuxZ1Gs/rs+fP30SMnHKXhQuvqzkmHJg/dqSh5M fcbXN2SPijyT0nrhT1OfbEaZSJiM0qA= -----END CERTIFICATE-----Generated at Sun Apr 6 04:56:00 2025 by rpki-client