$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38af7f86-7c7b-3de3-a063-278249ef1fed.roa File: 38af7f86-7c7b-3de3-a063-278249ef1fed.roa (raw, json) Hash identifier: N1ZNf6InHsZPD6xpHZhNIF0VAo9uK6KmgUeeWwl7PPw= Subject key identifier: 98:F6:48:4B:19:45:7F:3F:DA:19:B6:28:77:B1:08:B7:76:48:2E:9C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B2331829EC8D6BD07C4B14A80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38af7f86-7c7b-3de3-a063-278249ef1fed.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 3356 IP address blocks: 170.30.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:82:9e:c8:d6:bd:07:c4:b1:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=d8c017f5-743d-43e4-a258-0edcae2f0f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8d:03:af:94:f8:3b:0d:19:69:91:87:c1:90: 1c:4b:f2:49:ea:58:a7:f1:1d:93:37:9c:c4:72:4a: b6:69:c1:0d:33:7c:66:76:9e:e0:07:39:de:f0:5d: b4:58:39:f3:3f:f1:05:30:b2:42:83:aa:de:3c:39: 33:01:4e:98:99:85:97:0f:03:ac:e1:a9:8c:0c:f9: 62:55:98:ba:d7:a3:16:3a:d4:09:03:e8:9b:f1:b8: 65:62:ac:0c:cd:80:a6:5f:b2:61:8f:59:eb:55:93: d4:af:47:21:1b:e0:b8:a8:0d:3a:69:6e:5e:fa:54: 0c:6a:bc:f2:27:ee:b1:55:34:ee:62:65:40:dd:ef: f3:3c:aa:ab:8f:49:e4:7b:c3:cf:6b:34:45:41:0f: ce:91:c8:7e:17:15:14:95:a7:bc:c7:aa:2e:cb:75: 16:92:0b:7b:06:f7:97:ef:78:9c:f8:54:81:32:de: 9a:a1:7f:ae:0a:29:82:fd:7f:55:1b:f7:58:58:b7: 61:4c:64:e4:bd:fa:0f:8a:20:fc:f2:e1:13:97:a1: 16:82:d3:60:bc:b6:b2:55:32:c2:31:4e:62:97:11: 0c:10:86:8b:d1:6c:5f:48:fc:de:a1:78:32:60:a5: 96:65:52:8a:6f:f5:b3:98:c5:8e:2d:dc:3b:cf:85: af:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F6:48:4B:19:45:7F:3F:DA:19:B6:28:77:B1:08:B7:76:48:2E:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38af7f86-7c7b-3de3-a063-278249ef1fed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 170.30.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:04:9a:39:40:3a:1a:8c:48:d3:6a:ac:38:c8:9c:f5:df:2f: 47:be:6c:7f:7e:5a:c9:95:11:af:d5:9e:85:80:7a:c8:bf:c0: 4a:4a:ae:99:dd:58:a4:99:cd:36:1a:51:5b:c3:8d:c8:f9:5f: 61:12:a3:db:6d:12:79:6f:ae:98:bb:5c:bf:c4:7c:f3:fc:e4: 33:64:32:74:08:d1:df:e0:39:68:14:d2:bb:12:dd:aa:55:d6: 83:50:d8:5d:12:f2:8d:67:7e:6c:20:93:7b:29:ea:86:bb:f8: 0f:5a:fd:a3:a9:cf:74:a6:14:af:01:77:e5:cf:76:7b:d7:9d: da:b1:95:7d:f5:3b:77:84:30:00:08:31:3c:00:62:bc:9c:63: 84:a2:2c:5d:2a:e8:71:55:07:28:9f:bc:ff:d3:66:1d:b9:82: e7:41:61:c2:6d:18:49:43:cc:a1:f9:88:31:6b:99:24:92:47: 37:38:f2:31:2f:f2:37:73:6b:4c:b3:c0:46:8a:e6:2d:40:21: 3b:08:c1:18:47:02:8e:87:29:f6:0c:8f:ab:60:a1:7e:bc:0d: b5:a0:47:f8:5f:cf:2d:6a:c4:17:31:ea:c5:60:09:10:e2:a9: f3:3d:dd:b3:1c:78:37:8e:ed:5a:08:9f:77:ce:42:e1:69:83: cd:21:c5:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYKeyNa9B8SxSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk ZDhjMDE3ZjUtNzQzZC00M2U0LWEyNTgtMGVkY2FlMmYwZjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro0Dr5T4Ow0ZaZGHwZAcS/JJ6lin8R2TN5zE ckq2acENM3xmdp7gBzne8F20WDnzP/EFMLJCg6rePDkzAU6YmYWXDwOs4amMDPli VZi616MWOtQJA+ib8bhlYqwMzYCmX7Jhj1nrVZPUr0chG+C4qA06aW5e+lQMarzy J+6xVTTuYmVA3e/zPKqrj0nke8PPazRFQQ/Okch+FxUUlae8x6ouy3UWkgt7BveX 73ic+FSBMt6aoX+uCimC/X9VG/dYWLdhTGTkvfoPiiD88uETl6EWgtNgvLayVTLC MU5ilxEMEIaL0WxfSPzeoXgyYKWWZVKKb/WzmMWOLdw7z4Wv1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJj2SEsZRX8/2hm2KHexCLd2SC6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzhhZjdmODYtN2M3Yi0z ZGUzLWEwNjMtMjc4MjQ5ZWYxZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqh7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYEmjlAOhqMSNNqrDjInPXfL0e+bH9+WsmVEa/VnoWAesi/wEpKrpnd WKSZzTYaUVvDjcj5X2ESo9ttEnlvrpi7XL/EfPP85DNkMnQI0d/gOWgU0rsS3apV 1oNQ2F0S8o1nfmwgk3sp6oa7+A9a/aOpz3SmFK8Bd+XPdnvXndqxlX31O3eEMAAI MTwAYrycY4SiLF0q6HFVByifvP/TZh25gudBYcJtGElDzKH5iDFrmSSSRzc48jEv 8jdza0yzwEaK5i1AITsIwRhHAo6HKfYMj6tgoX68DbWgR/hfzy1qxBcx6sVgCRDi qfM93bMceDeO7VoIn3fOQuFpg80hxfc= -----END CERTIFICATE-----Generated at Wed Sep 17 04:06:33 2025 by rpki-client