$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/3ff1ef39-3a59-31db-bf17-ce082479a311.roa File: 3ff1ef39-3a59-31db-bf17-ce082479a311.roa (raw, json) Hash identifier: RZya6VOY2YRbXFQUcvKe6RKvZfjXMqr15Fz/X9nwhYY= Subject key identifier: E5:A9:AB:2C:E1:A5:14:60:D7:A1:BF:4B:50:0E:57:40:CA:66:66:07 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584B9F6CDA4ABF92260E0E8244A0 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/3ff1ef39-3a59-31db-bf17-ce082479a311.roa Signing time: Fri 24 Oct 2025 01:00:30 +0000 ROA not before: Fri 24 Oct 2025 01:00:30 +0000 ROA not after: Thu 22 Jan 2026 02:00:30 +0000 asID: 63023 IP address blocks: 167.17.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9f:6c:da:4a:bf:92:26:0e:0e:82:44:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Oct 24 01:00:30 2025 GMT Not After : Jan 22 02:00:30 2026 GMT Subject: CN=629f2cf3-8479-438b-8269-238fe7db2425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cf:0a:c8:39:a3:8d:c3:d1:9f:97:1e:03:78: ea:92:a5:e4:0a:e6:32:57:34:78:ac:ae:44:53:84: ff:7c:4f:28:41:df:2f:43:d7:eb:52:2f:89:ee:6e: 04:ea:69:1f:63:aa:15:70:06:3a:c8:32:fb:20:5d: af:84:67:5c:64:b6:16:16:ee:cf:05:ba:66:3c:f5: 32:a0:27:63:95:91:1f:1f:38:64:23:e1:63:05:ce: 57:bf:5f:74:53:3a:11:59:83:ea:10:a4:32:8e:6b: f6:9f:7b:fb:bc:83:5c:d5:26:6d:d9:3d:a5:9a:59: 5f:e6:9e:67:ef:dc:22:50:87:22:63:d7:21:b2:06: 0d:44:98:22:60:ac:23:a3:d9:46:f1:44:c2:07:f5: 4a:9d:e1:9a:75:a3:35:67:73:63:11:17:3d:bb:d6: f3:c4:d7:e4:88:10:82:ce:d4:35:5f:8f:6e:8e:36: aa:7d:6e:39:2c:07:e0:6f:0e:84:c3:f9:b3:02:65: 80:c0:85:0a:fb:4d:22:d1:67:bf:e9:77:04:12:e0: 54:21:78:ce:c0:e3:c3:8c:0c:eb:fe:92:63:93:8a: 8a:ba:01:dc:97:41:e7:43:01:8f:9a:d2:6f:76:8c: 6b:eb:96:92:d9:27:d6:6d:57:57:4f:af:1b:a9:f5: 2f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A9:AB:2C:E1:A5:14:60:D7:A1:BF:4B:50:0E:57:40:CA:66:66:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/3ff1ef39-3a59-31db-bf17-ce082479a311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 167.17.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:eb:5d:c6:fa:1b:ce:34:43:63:fb:21:1e:f3:07:03:a8:79: 83:24:30:db:ea:d8:6d:07:97:38:3f:2a:23:77:89:af:94:d9: dc:fd:2e:1a:34:bf:eb:58:f0:e0:c2:99:3c:5c:75:ff:a8:5c: c0:fa:80:5c:a7:a2:38:dd:27:ae:36:ce:78:65:d4:df:57:69: 98:ac:56:eb:84:bc:b8:f1:0a:ff:cb:53:2b:01:66:50:1e:3f: 40:f7:fd:3c:a0:03:83:f6:00:ba:bc:14:33:49:75:cc:a8:6d: a6:dd:9f:7e:e8:88:40:c4:44:d6:55:85:61:e5:2d:a8:d7:8f: d6:87:09:7c:42:a6:c3:76:20:77:3d:d9:5a:98:ba:54:31:dc: f6:26:ce:f5:f1:12:82:58:29:32:4f:11:4a:79:c8:2f:82:db: a7:bf:26:cc:35:5d:08:c9:9f:91:bc:3f:9f:76:c9:00:8f:f4: 17:0c:e8:7f:60:e2:7e:cd:f9:bd:28:85:46:b1:61:a6:e1:fe: 32:af:5e:7c:4a:2f:80:9d:5e:0a:b4:f3:fa:5a:d2:35:28:4a: 18:23:43:ab:4b:ba:dc:31:3c:65:80:9c:dd:05:5d:ba:2b:79: 70:86:41:ac:7d:9c:2f:55:ff:82:22:d6:1f:b4:c0:80:f9:37: 0f:d4:c5:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEufbNpKv5ImDg6CRKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI1MTAyNDAxMDAzMFoXDTI2MDEyMjAyMDAzMFowLzEtMCsGA1UEAxMk NjI5ZjJjZjMtODQ3OS00MzhiLTgyNjktMjM4ZmU3ZGIyNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp88KyDmjjcPRn5ceA3jqkqXkCuYyVzR4rK5E U4T/fE8oQd8vQ9frUi+J7m4E6mkfY6oVcAY6yDL7IF2vhGdcZLYWFu7PBbpmPPUy oCdjlZEfHzhkI+FjBc5Xv190UzoRWYPqEKQyjmv2n3v7vINc1SZt2T2lmllf5p5n 79wiUIciY9chsgYNRJgiYKwjo9lG8UTCB/VKneGadaM1Z3NjERc9u9bzxNfkiBCC ztQ1X49ujjaqfW45LAfgbw6Ew/mzAmWAwIUK+00i0We/6XcEEuBUIXjOwOPDjAzr /pJjk4qKugHcl0HnQwGPmtJvdoxr65aS2SfWbVdXT68bqfUvYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWpqyzhpRRg16G/S1AOV0DKZmYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvM2ZmMWVmMzktM2E1OS0z MWRiLWJmMTctY2UwODI0NzlhMzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxFGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnrXcb6G840Q2P7IR7zBwOoeYMkMNvq2G0Hlzg/KiN3ia+U2dz9Lho0 v+tY8ODCmTxcdf+oXMD6gFynojjdJ642znhl1N9XaZisVuuEvLjxCv/LUysBZlAe P0D3/TygA4P2ALq8FDNJdcyobabdn37oiEDERNZVhWHlLajXj9aHCXxCpsN2IHc9 2VqYulQx3PYmzvXxEoJYKTJPEUp5yC+C26e/Jsw1XQjJn5G8P592yQCP9BcM6H9g 4n7N+b0ohUaxYabh/jKvXnxKL4CdXgq08/pa0jUoShgjQ6tLutwxPGWAnN0FXbor eXCGQax9nC9V/4Ii1h+0wID5Nw/Uxd0= -----END CERTIFICATE-----Generated at Fri Oct 24 14:49:43 2025 by rpki-client