$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/401e223a-6c91-3726-99ac-b9bf7fee24f8.roa File: 401e223a-6c91-3726-99ac-b9bf7fee24f8.roa (raw, json) Hash identifier: c4Z+H48xIgUnrdSKi0mr2jx+V2Jdovmaf1xcP0QSRdE= Subject key identifier: F9:05:F2:F4:78:AD:A8:89:55:43:B9:EE:50:D2:41:66:77:14:1F:5D Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584B9F6CDA021CBF0B60839F2460 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/401e223a-6c91-3726-99ac-b9bf7fee24f8.roa Signing time: Fri 24 Oct 2025 01:00:30 +0000 ROA not before: Fri 24 Oct 2025 01:00:30 +0000 ROA not after: Thu 22 Jan 2026 02:00:30 +0000 asID: 63023 IP address blocks: 167.17.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9f:6c:da:02:1c:bf:0b:60:83:9f:24:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Oct 24 01:00:30 2025 GMT Not After : Jan 22 02:00:30 2026 GMT Subject: CN=30236f0d-b475-41f7-adf4-dcfeaf4f708f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d0:93:ae:aa:a9:32:6d:55:a6:84:bd:8d:c7: ef:8c:11:41:fc:c4:8c:e5:78:eb:7f:a9:69:08:ed: 3a:8b:4a:cd:77:c3:9e:b6:ee:77:bf:00:28:70:fe: 4a:15:43:4c:8b:18:6f:eb:5e:2c:74:4c:9a:a2:9f: b0:eb:ce:3e:e2:43:c2:86:d0:42:c7:5f:ef:8c:dd: 59:d2:a6:61:2c:66:7a:c1:8a:ee:1f:15:3e:8e:7c: 82:9f:12:9f:bd:6e:b4:0d:88:c1:33:b0:e5:04:a2: f5:17:c6:a7:1d:19:07:bb:6d:1a:aa:53:1b:5c:f1: a7:c8:c3:f7:16:7e:16:fc:78:b6:8a:9c:a7:4e:10: 5c:2a:fd:7a:a2:c1:80:6c:97:87:3a:87:a2:8d:88: 33:e9:94:af:37:e3:3c:f5:4a:ee:49:fd:e7:5d:8d: 19:40:97:b1:76:a5:92:3b:cc:02:5b:03:ef:be:7a: b5:00:41:ce:4f:76:d6:71:6b:71:f4:27:30:9e:1e: 9f:2c:43:b1:c7:06:25:97:cd:25:3d:c1:f1:b9:5c: db:37:04:75:08:29:a6:e0:f8:22:e6:c5:56:8d:a7: 0e:02:14:c6:8b:57:96:40:7d:69:e2:59:ad:07:51: e7:1e:f6:94:9e:3f:bb:3a:e3:ff:18:c9:89:a6:b8: 6b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:05:F2:F4:78:AD:A8:89:55:43:B9:EE:50:D2:41:66:77:14:1F:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/401e223a-6c91-3726-99ac-b9bf7fee24f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 167.17.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:29:3c:ea:37:a3:53:6f:08:8f:6c:a7:b2:a9:0d:22:1c:02: c7:00:3a:b5:41:28:a0:03:a5:6e:14:59:43:e2:d5:79:a2:10: 82:6b:e7:29:f3:e9:a9:a0:fc:46:d7:bd:13:60:4a:4e:94:01: 1e:09:56:d2:0d:20:14:f4:60:37:7d:2e:c8:99:73:bb:ad:7d: 70:80:32:13:c8:59:54:1a:eb:6f:9d:e5:bf:25:16:a0:ba:69: bd:8b:02:73:ed:5c:e0:50:c7:de:fb:22:2c:ff:a6:5b:0e:15: 4b:23:01:8c:be:c2:9e:d2:8d:83:e0:3c:12:70:72:40:ea:b9: 36:84:32:b6:0b:82:30:f5:31:99:4d:71:71:cd:fe:e7:b3:9d: fd:6f:71:38:7d:fb:06:76:e1:c1:01:9c:92:10:42:9a:a1:ea: 45:0f:ac:d4:b2:0a:5a:3f:f1:66:e0:f4:a1:f6:d6:4d:58:3b: 8f:97:7e:11:14:62:dd:89:38:0e:66:cb:f1:6e:47:7b:3a:81: 0a:ae:dc:04:05:85:32:ee:1f:c1:5c:26:42:f3:53:3f:4f:24: 62:9a:34:74:d9:66:2d:2b:ce:91:02:66:b6:02:b7:be:69:e9: 3b:91:a7:41:ad:bd:d3:66:f8:09:28:cf:97:e6:92:46:00:74: e2:70:34:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEufbNoCHL8LYIOfJGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI1MTAyNDAxMDAzMFoXDTI2MDEyMjAyMDAzMFowLzEtMCsGA1UEAxMk MzAyMzZmMGQtYjQ3NS00MWY3LWFkZjQtZGNmZWFmNGY3MDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtCTrqqpMm1VpoS9jcfvjBFB/MSM5Xjrf6lp CO06i0rNd8Oetu53vwAocP5KFUNMixhv614sdEyaop+w684+4kPChtBCx1/vjN1Z 0qZhLGZ6wYruHxU+jnyCnxKfvW60DYjBM7DlBKL1F8anHRkHu20aqlMbXPGnyMP3 Fn4W/Hi2ipynThBcKv16osGAbJeHOoeijYgz6ZSvN+M89UruSf3nXY0ZQJexdqWS O8wCWwPvvnq1AEHOT3bWcWtx9Ccwnh6fLEOxxwYll80lPcHxuVzbNwR1CCmm4Pgi 5sVWjacOAhTGi1eWQH1p4lmtB1HnHvaUnj+7OuP/GMmJprhrBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkF8vR4raiJVUO57lDSQWZ3FB9dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvNDAxZTIyM2EtNmM5MS0z NzI2LTk5YWMtYjliZjdmZWUyNGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGopPOo3o1NvCI9sp7KpDSIcAscAOrVBKKADpW4UWUPi1XmiEIJr5ynz 6amg/EbXvRNgSk6UAR4JVtINIBT0YDd9LsiZc7utfXCAMhPIWVQa62+d5b8lFqC6 ab2LAnPtXOBQx977Iiz/plsOFUsjAYy+wp7SjYPgPBJwckDquTaEMrYLgjD1MZlN cXHN/ueznf1vcTh9+wZ24cEBnJIQQpqh6kUPrNSyClo/8Wbg9KH21k1YO4+XfhEU Yt2JOA5my/FuR3s6gQqu3AQFhTLuH8FcJkLzUz9PJGKaNHTZZi0rzpECZrYCt75p 6TuRp0GtvdNm+Akoz5fmkkYAdOJwNNI= -----END CERTIFICATE-----Generated at Fri Oct 24 14:57:04 2025 by rpki-client