$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/3ff1ef39-3a59-31db-bf17-ce082479a311.roa File: 3ff1ef39-3a59-31db-bf17-ce082479a311.roa (raw, json) Hash identifier: 5iHy/Yucd2VjrUhmUuvZ0aOv1yjHSG9pRsEgNL59VPQ= Subject key identifier: A6:B9:73:32:D4:81:90:A3:BF:9C:41:B2:44:F8:61:A6:06:A7:D4:77 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584EE22742092E03F942932D8A70 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/3ff1ef39-3a59-31db-bf17-ce082479a311.roa Signing time: Wed 19 Aug 2026 01:00:12 +0000 ROA not before: Wed 19 Aug 2026 01:00:12 +0000 ROA not after: Tue 17 Nov 2026 02:00:12 +0000 asID: 63023 IP address blocks: 167.17.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e2:27:42:09:2e:03:f9:42:93:2d:8a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Aug 19 01:00:12 2026 GMT Not After : Nov 17 02:00:12 2026 GMT Subject: CN=a8fe5ec9-2f23-4a74-a9a1-2bbae2afa0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b9:c3:96:ec:38:4d:3b:b4:3f:5b:14:b1:72: 37:62:ca:19:a9:84:6f:01:67:e4:5b:92:26:b3:f2: dc:10:7a:f3:74:4d:bf:0b:2d:5c:01:f2:f6:bf:03: 91:39:ac:d8:a7:f8:bb:df:b1:18:17:f5:eb:e8:51: 54:23:f0:a7:02:56:7c:f6:f6:cb:fe:bc:d9:0c:02: d4:75:25:85:8a:8b:a9:36:e0:da:28:a0:52:d8:53: 8c:56:41:63:d4:f3:f8:e6:45:8e:5f:c8:91:05:a2: 38:a1:94:d5:94:aa:37:2f:0f:38:87:23:1d:25:63: 2d:50:18:02:b6:ff:a2:3c:f5:15:e7:1a:51:33:75: 60:af:e9:2d:a6:22:7a:46:32:52:52:f1:fe:a9:24: d8:bc:f4:73:04:06:a1:60:f5:fb:4b:42:47:4a:71: e7:6d:44:19:42:26:09:ef:7c:1b:5d:79:5a:72:37: e8:56:44:c2:77:6d:89:16:bf:53:2f:ba:ed:4d:88: 3a:c2:55:7c:a5:b4:2a:b6:39:fd:63:6b:db:ff:47: 66:ef:05:4d:27:a7:c2:f0:d2:d5:8b:ed:7d:94:2b: b3:04:8e:08:0f:68:71:5d:2b:4f:60:ee:9d:ef:cc: b6:e5:6d:48:37:c4:75:72:66:7f:e7:4e:da:4e:4b: 9e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B9:73:32:D4:81:90:A3:BF:9C:41:B2:44:F8:61:A6:06:A7:D4:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/3ff1ef39-3a59-31db-bf17-ce082479a311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 167.17.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b9:10:91:9b:79:eb:75:c9:3d:57:29:8e:cd:23:a4:d4:ad: 93:2e:90:50:d8:1a:df:b4:9f:28:71:a0:7c:08:5b:c8:e8:a3: c3:84:52:f6:da:51:79:af:ed:03:69:fb:84:71:36:0b:00:38: c4:9f:f6:af:5a:82:53:99:f4:ef:3d:6e:e5:00:10:e3:52:b2: af:36:26:63:6e:90:15:ce:5b:90:36:c0:5b:6f:8b:1d:a6:60: f5:99:ab:2d:ed:41:bf:51:7d:e2:79:2e:ad:e0:47:54:75:70: 1b:a9:4a:63:ac:37:d1:02:12:67:a4:ec:85:50:52:d6:5c:90: 04:6c:f9:79:9b:6d:8e:8f:b9:f0:08:77:91:41:c5:95:cf:59: dc:7f:8a:9b:78:71:12:d6:ff:4c:b1:0f:7b:16:d7:cd:86:89: f7:bf:0b:ad:cd:dc:5a:16:6d:af:cc:4e:41:dd:bf:e8:99:b2: d6:eb:d3:4d:80:84:e3:ad:9b:96:da:72:79:8c:92:20:84:04: 49:c1:01:8f:65:df:4e:37:56:24:d6:b2:0f:df:df:13:c7:04: 24:a5:ce:c4:28:72:33:48:fc:f6:f4:02:47:2b:59:27:4e:d0: 35:a9:cb:74:a1:e8:5a:5d:aa:30:b9:fb:5c:dc:de:de:8b:7d: 29:73:9e:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7iJ0IJLgP5QpMtinAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI2MDgxOTAxMDAxMloXDTI2MTExNzAyMDAxMlowLzEtMCsGA1UEAxMk YThmZTVlYzktMmYyMy00YTc0LWE5YTEtMmJiYWUyYWZhMGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbnDluw4TTu0P1sUsXI3YsoZqYRvAWfkW5Im s/LcEHrzdE2/Cy1cAfL2vwOROazYp/i737EYF/Xr6FFUI/CnAlZ89vbL/rzZDALU dSWFioupNuDaKKBS2FOMVkFj1PP45kWOX8iRBaI4oZTVlKo3Lw84hyMdJWMtUBgC tv+iPPUV5xpRM3Vgr+ktpiJ6RjJSUvH+qSTYvPRzBAahYPX7S0JHSnHnbUQZQiYJ 73wbXXlacjfoVkTCd22JFr9TL7rtTYg6wlV8pbQqtjn9Y2vb/0dm7wVNJ6fC8NLV i+19lCuzBI4ID2hxXStPYO6d78y25W1IN8R1cmZ/507aTkueYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKa5czLUgZCjv5xBskT4YaYGp9R3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvM2ZmMWVmMzktM2E1OS0z MWRiLWJmMTctY2UwODI0NzlhMzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxFGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu5EJGbeet1yT1XKY7NI6TUrZMukFDYGt+0nyhxoHwIW8joo8OEUvba UXmv7QNp+4RxNgsAOMSf9q9aglOZ9O89buUAEONSsq82JmNukBXOW5A2wFtvix2m YPWZqy3tQb9RfeJ5Lq3gR1R1cBupSmOsN9ECEmek7IVQUtZckARs+XmbbY6PufAI d5FBxZXPWdx/ipt4cRLW/0yxD3sW182Gife/C63N3FoWba/MTkHdv+iZstbr002A hOOtm5bacnmMkiCEBEnBAY9l3043ViTWsg/f3xPHBCSlzsQocjNI/Pb0AkcrWSdO 0DWpy3Sh6FpdqjC5+1zc3t6LfSlznjc= -----END CERTIFICATE-----Generated at Fri Sep 11 00:26:31 2026 by rpki-client