$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/1a945ad5-a8f7-3fb6-9d34-ed62134ae9fc.roa File: 1a945ad5-a8f7-3fb6-9d34-ed62134ae9fc.roa (raw, json) Hash identifier: wOKMT0QbRBSC2KYgoz0+aM2sBeD3WlHrrAjEQkok7Uc= Subject key identifier: AE:8C:31:95:51:67:D8:45:E3:57:F3:A6:37:84:4A:76:17:98:D4:C4 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584F857840D52C69F316846A7280 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/1a945ad5-a8f7-3fb6-9d34-ed62134ae9fc.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 63023 IP address blocks: 167.17.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:40:d5:2c:69:f3:16:84:6a:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=47dcaa2a-11ed-4b44-8a5d-2341387f95a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ac:89:30:98:5f:b6:bb:f2:67:49:b6:63:aa: 55:06:d0:d2:95:e4:0b:3a:41:13:aa:54:c5:ea:79: ac:da:78:a0:7b:58:71:31:d5:5f:fc:64:c8:93:62: 9d:e3:b8:8b:a0:09:58:86:ca:dc:f1:af:f6:be:9a: 0e:dd:9e:38:a6:c3:5a:d6:fd:b8:77:fb:36:c4:24: 35:8a:bc:6c:57:5e:3f:62:6a:c8:30:7f:2f:21:8f: 05:18:d5:96:b2:d5:73:4c:83:5f:2e:8f:5c:03:b9: a3:a9:cb:b8:0f:fb:64:e6:a5:ab:06:5b:dd:05:80: 97:82:62:50:ee:02:a7:6b:c0:ed:b6:d5:95:02:35: 0a:c6:ac:1b:08:fa:6e:84:ce:29:9c:1c:00:7e:bd: 2d:d2:ec:69:88:bb:f9:03:a3:f3:36:b1:c4:29:c6: d2:8a:84:1e:e5:bd:ba:4b:4f:6c:ea:98:30:2f:01: a9:f2:7c:77:35:b1:e2:f5:1a:bd:d8:1a:84:69:cd: 64:41:1a:64:6b:51:d4:e9:5b:f1:55:21:4b:e6:b2: ea:10:60:9a:ec:25:0d:03:74:48:a2:d9:55:3f:48: 11:a3:eb:77:00:f5:b8:c4:bf:80:1a:d0:34:f2:f9: 9c:55:ce:78:2d:cc:e9:45:9c:da:8c:d0:19:c2:bd: 73:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8C:31:95:51:67:D8:45:E3:57:F3:A6:37:84:4A:76:17:98:D4:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/1a945ad5-a8f7-3fb6-9d34-ed62134ae9fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 167.17.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:5a:54:0a:a6:03:9b:ee:61:e7:b3:85:a8:5e:eb:cc:ec:4e: 58:0a:f4:11:43:f5:05:c5:0b:e6:38:64:74:63:52:57:fe:17: d8:b4:20:ac:b4:9a:98:b0:33:02:4b:f6:56:66:e5:1b:91:00: 01:7c:7a:d2:9e:c5:92:d6:b3:b5:34:dd:b9:89:bf:36:ae:6f: 5c:38:a0:3c:3e:e8:bf:5a:30:ef:19:0f:3a:8d:0f:54:48:32: 6d:00:18:52:24:8b:01:06:96:97:c9:29:a9:7d:82:86:44:a0: e5:6c:e0:f0:28:d5:0a:97:3b:32:97:a3:7a:99:d4:f5:e2:14: c8:7d:cd:47:69:1d:6f:55:54:d1:b3:fe:c7:a6:d4:55:87:a3: ea:46:93:48:18:58:04:33:5d:61:db:5e:c0:f4:44:03:a5:f9: 36:74:52:5e:d9:1e:3b:f7:63:5f:7b:36:99:16:1e:a2:cb:93: 72:34:7a:01:53:4c:fb:b7:aa:9c:e8:c3:fb:f6:ce:01:ed:95: f6:ab:f1:36:af:84:82:48:3c:4c:c7:23:4c:86:cb:95:fb:99: 54:81:ac:ec:f7:a0:a4:33:ea:31:c4:d0:05:b6:5a:96:73:37: b7:43:63:bd:89:e3:cb:b9:d0:b6:72:5d:03:db:7d:96:8d:c4: d1:da:cc:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeEDVLGnzFoRqcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk NDdkY2FhMmEtMTFlZC00YjQ0LThhNWQtMjM0MTM4N2Y5NWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6yJMJhftrvyZ0m2Y6pVBtDSleQLOkETqlTF 6nms2nige1hxMdVf/GTIk2Kd47iLoAlYhsrc8a/2vpoO3Z44psNa1v24d/s2xCQ1 irxsV14/YmrIMH8vIY8FGNWWstVzTINfLo9cA7mjqcu4D/tk5qWrBlvdBYCXgmJQ 7gKna8DtttWVAjUKxqwbCPpuhM4pnBwAfr0t0uxpiLv5A6PzNrHEKcbSioQe5b26 S09s6pgwLwGp8nx3NbHi9Rq92BqEac1kQRpka1HU6VvxVSFL5rLqEGCa7CUNA3RI otlVP0gRo+t3APW4xL+AGtA08vmcVc54LczpRZzajNAZwr1z4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6MMZVRZ9hF41fzpjeESnYXmNTEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvMWE5NDVhZDUtYThmNy0z ZmI2LTlkMzQtZWQ2MjEzNGFlOWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxFCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJaVAqmA5vuYeezhahe68zsTlgK9BFD9QXFC+Y4ZHRjUlf+F9i0IKy0 mpiwMwJL9lZm5RuRAAF8etKexZLWs7U03bmJvzaub1w4oDw+6L9aMO8ZDzqND1RI Mm0AGFIkiwEGlpfJKal9goZEoOVs4PAo1QqXOzKXo3qZ1PXiFMh9zUdpHW9VVNGz /sem1FWHo+pGk0gYWAQzXWHbXsD0RAOl+TZ0Ul7ZHjv3Y197NpkWHqLLk3I0egFT TPu3qpzow/v2zgHtlfar8TavhIJIPEzHI0yGy5X7mVSBrOz3oKQz6jHE0AW2WpZz N7dDY72J48u50LZyXQPbfZaNxNHazMU= -----END CERTIFICATE-----Generated at Wed Oct 28 21:08:56 2026 by rpki-client