$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/401e223a-6c91-3726-99ac-b9bf7fee24f8.roa File: 401e223a-6c91-3726-99ac-b9bf7fee24f8.roa (raw, json) Hash identifier: 1u7PuQTkHfyGH6ZL3TDr3xOYHc1Cyygc171rc6qirow= Subject key identifier: 82:BE:26:64:4A:46:F7:1B:F3:17:A8:5F:CF:E7:5B:0A:0C:22:99:F1 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584F8578584E619328BA78756D80 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/401e223a-6c91-3726-99ac-b9bf7fee24f8.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 63023 IP address blocks: 167.17.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:58:4e:61:93:28:ba:78:75:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=8be23bea-f243-436e-9600-224e25d12fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:e9:c7:44:df:46:31:b1:c4:25:a7:ee:97: 0d:39:13:3c:9f:c3:a3:40:74:7d:06:90:56:a0:4c: 72:ee:8c:9a:af:33:43:10:93:28:d4:ef:41:85:28: a7:4e:fa:9c:88:54:68:cf:79:02:ac:22:ec:54:7d: 1b:39:b9:5e:53:89:3a:1a:3b:ec:3c:ec:a5:8e:5d: 24:a3:a0:cd:b2:e5:c8:a2:4f:18:f2:b9:b3:74:65: 66:29:7d:78:d1:ca:e8:7f:55:01:60:7f:4b:3f:19: 5a:46:bc:71:ca:81:10:d2:df:9f:76:2e:c0:ec:e9: 0b:d8:86:a5:cf:03:c3:3a:82:ab:ee:70:2c:6d:50: 8b:c8:fb:74:33:33:37:fb:dd:5d:88:d4:c9:34:da: 0e:45:4f:77:ff:35:a6:3f:ff:97:20:e7:ec:cc:27: 23:20:2c:96:db:18:32:81:fd:f9:a4:eb:b3:18:14: 1a:c0:4e:18:47:24:bd:be:97:5e:39:d5:1a:e9:a1: 71:31:5d:d4:ab:c3:02:10:79:88:79:82:07:91:5b: 03:eb:d8:3f:f8:d3:74:cd:6e:c2:9e:3c:ff:db:09: b4:4b:44:9d:a0:d5:e9:64:3b:c0:45:2f:52:f0:37: 4f:6e:0e:36:0d:34:dd:fc:5d:b5:c8:4e:1a:63:5d: 4a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BE:26:64:4A:46:F7:1B:F3:17:A8:5F:CF:E7:5B:0A:0C:22:99:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/401e223a-6c91-3726-99ac-b9bf7fee24f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 167.17.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:85:84:15:b7:20:a9:4b:8b:02:df:35:a9:f5:9e:ca:8a:ff: c7:30:1f:8a:e4:8c:ce:35:f3:c3:96:ac:b8:9f:f9:d8:05:93: a1:48:05:61:b7:2c:fa:2e:78:89:79:62:e7:6f:5a:15:97:15: 9a:71:cc:e7:12:28:e0:81:72:a0:ca:93:ed:9b:a8:d9:cc:17: 02:e4:cc:0c:48:2d:3e:fb:75:6d:09:26:ac:94:a3:54:0b:b4: dd:93:36:53:31:51:74:81:44:a2:27:c1:90:bf:c6:d6:52:2b: 57:50:af:99:c1:57:a5:d3:1a:59:14:22:32:ab:c0:37:95:ff: 64:5e:7c:b4:19:57:41:5d:de:c2:0e:73:1c:21:4a:67:a0:45: bf:ac:f0:3e:77:5a:f0:84:74:7e:b0:c6:dd:55:63:29:5a:18: 76:82:44:00:6e:e4:f1:e5:33:b5:5f:1e:6a:65:e5:46:cd:55: b1:2d:4b:90:d6:71:fd:a9:f9:ba:9b:e4:5f:9e:c5:ee:14:56: f0:02:97:26:35:4e:77:9b:69:d0:a4:80:84:0f:36:3b:0d:25: b4:4f:6a:a6:31:64:de:22:5e:c7:e3:58:45:c4:de:94:d1:40: 9f:96:bd:da:ce:1a:f6:73:f8:df:aa:22:17:f4:42:35:65:fd: d9:7d:d8:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeFhOYZMounh1bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk OGJlMjNiZWEtZjI0My00MzZlLTk2MDAtMjI0ZTI1ZDEyZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYPpx0TfRjGxxCWn7pcNORM8n8OjQHR9BpBW oExy7oyarzNDEJMo1O9BhSinTvqciFRoz3kCrCLsVH0bObleU4k6GjvsPOyljl0k o6DNsuXIok8Y8rmzdGVmKX140crof1UBYH9LPxlaRrxxyoEQ0t+fdi7A7OkL2Ial zwPDOoKr7nAsbVCLyPt0MzM3+91diNTJNNoORU93/zWmP/+XIOfszCcjICyW2xgy gf35pOuzGBQawE4YRyS9vpdeOdUa6aFxMV3Uq8MCEHmIeYIHkVsD69g/+NN0zW7C njz/2wm0S0SdoNXpZDvARS9S8DdPbg42DTTd/F21yE4aY11KQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIK+JmRKRvcb8xeoX8/nWwoMIpnxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvNDAxZTIyM2EtNmM5MS0z NzI2LTk5YWMtYjliZjdmZWUyNGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuFhBW3IKlLiwLfNan1nsqK/8cwH4rkjM4188OWrLif+dgFk6FIBWG3 LPoueIl5YudvWhWXFZpxzOcSKOCBcqDKk+2bqNnMFwLkzAxILT77dW0JJqyUo1QL tN2TNlMxUXSBRKInwZC/xtZSK1dQr5nBV6XTGlkUIjKrwDeV/2RefLQZV0Fd3sIO cxwhSmegRb+s8D53WvCEdH6wxt1VYylaGHaCRABu5PHlM7VfHmpl5UbNVbEtS5DW cf2p+bqb5F+exe4UVvAClyY1TnebadCkgIQPNjsNJbRPaqYxZN4iXsfjWEXE3pTR QJ+WvdrOGvZz+N+qIhf0QjVl/dl92Bc= -----END CERTIFICATE-----Generated at Wed Oct 28 14:44:29 2026 by rpki-client