$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/401e223a-6c91-3726-99ac-b9bf7fee24f8.roa File: 401e223a-6c91-3726-99ac-b9bf7fee24f8.roa (raw, json) Hash identifier: JNzufMpkKY3b1Hr0+xH4fEnXUL93TZsjEeoxiWlglPY= Subject key identifier: 20:46:6F:43:C5:8F:99:0F:98:4C:1A:A0:F9:93:11:73:D6:19:C1:94 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584EE22754994188713E0B545300 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/401e223a-6c91-3726-99ac-b9bf7fee24f8.roa Signing time: Wed 19 Aug 2026 01:00:12 +0000 ROA not before: Wed 19 Aug 2026 01:00:12 +0000 ROA not after: Tue 17 Nov 2026 02:00:12 +0000 asID: 63023 IP address blocks: 167.17.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e2:27:54:99:41:88:71:3e:0b:54:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Aug 19 01:00:12 2026 GMT Not After : Nov 17 02:00:12 2026 GMT Subject: CN=9e176173-4116-4d0e-b5dd-d38830f0992e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ee:19:e6:ae:ce:7f:14:bc:bc:14:4e:e4:06: 70:f5:1c:d6:05:eb:b9:a0:e6:e6:1a:d9:c7:b1:14: 4b:24:3a:2a:d3:56:30:a3:a0:d4:7d:3b:4e:a3:c2: 9a:d6:70:a1:d4:cc:43:34:e3:a8:ee:eb:37:c6:d5: 9f:09:75:43:fe:54:b3:d4:a6:61:95:44:f3:58:4f: b4:ca:e5:7f:10:b5:11:96:a2:c3:51:1a:b8:fa:3e: e1:88:42:84:0c:28:f1:0a:e1:b4:bd:5d:52:03:27: 30:b2:06:82:62:bf:67:3e:e0:89:23:76:4b:42:6c: 13:92:0b:00:f2:19:2c:73:93:e3:e2:c8:fc:7f:33: 2c:56:ec:bd:03:a6:6c:96:08:5a:57:52:79:c1:5b: 02:25:89:b5:af:da:f6:56:a8:50:58:02:9d:9d:c6: 51:62:ed:44:b7:ba:ff:7c:6f:dd:2e:4f:f3:36:d9: ab:3c:bb:b0:4d:f2:5e:4f:1f:a1:ea:89:64:6d:f6: 5b:2c:3c:e8:b0:00:e8:47:f4:1c:72:e3:57:99:18: 4b:a9:df:eb:06:73:a2:35:45:22:03:93:d8:f8:b9: d8:fa:c4:da:94:8c:5f:e1:93:91:93:bf:7a:b3:4d: 20:ec:bf:98:17:a6:49:de:7c:6f:88:1d:8a:8a:c6: d7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:46:6F:43:C5:8F:99:0F:98:4C:1A:A0:F9:93:11:73:D6:19:C1:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/401e223a-6c91-3726-99ac-b9bf7fee24f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 167.17.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:98:bc:db:96:cd:5a:22:16:e4:47:35:79:45:f6:6f:3e:1c: 33:3c:99:7b:95:a7:57:a2:74:8f:3a:fb:c5:07:b5:b3:88:49: a6:33:2a:f6:bf:47:db:0d:30:7d:83:ec:f7:f1:74:79:b7:76: 78:63:0c:9c:3a:2e:cd:82:d0:01:49:a9:2f:30:65:8c:46:f7: 2f:b8:ec:55:e9:22:8f:d9:4d:66:ba:12:69:b4:78:4e:6f:ae: 43:dc:91:12:ab:bd:86:bb:68:c8:9c:62:5f:6d:0a:dd:08:b2: 3c:17:b4:85:eb:55:fe:97:bd:27:aa:ec:79:57:29:58:2d:73: cb:54:0f:0f:46:48:29:0f:1a:b9:0c:5d:b5:8f:35:4e:a8:c2: 1b:f0:56:9b:3f:16:58:c7:cd:8d:1a:09:c5:3e:85:8a:f3:bb: ce:fa:c5:fc:4a:d2:4f:6d:c0:36:1c:e9:b9:13:0d:82:1a:c8: 1d:df:8b:15:63:4b:4a:bd:e2:fe:05:63:5d:cb:ee:a9:0c:2b: 07:09:02:43:08:06:6b:80:2f:0b:de:71:aa:5b:33:1b:2a:fb: 5d:4e:21:6f:3f:0c:09:41:da:33:f8:2d:7f:32:30:15:e1:bf: d8:20:1e:8e:fa:45:15:29:fb:76:cf:31:06:aa:5c:2e:e2:d0: 23:52:32:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7iJ1SZQYhxPgtUUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI2MDgxOTAxMDAxMloXDTI2MTExNzAyMDAxMlowLzEtMCsGA1UEAxMk OWUxNzYxNzMtNDExNi00ZDBlLWI1ZGQtZDM4ODMwZjA5OTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+4Z5q7OfxS8vBRO5AZw9RzWBeu5oObmGtnH sRRLJDoq01Ywo6DUfTtOo8Ka1nCh1MxDNOOo7us3xtWfCXVD/lSz1KZhlUTzWE+0 yuV/ELURlqLDURq4+j7hiEKEDCjxCuG0vV1SAycwsgaCYr9nPuCJI3ZLQmwTkgsA 8hksc5Pj4sj8fzMsVuy9A6ZslghaV1J5wVsCJYm1r9r2VqhQWAKdncZRYu1Et7r/ fG/dLk/zNtmrPLuwTfJeTx+h6olkbfZbLDzosADoR/QccuNXmRhLqd/rBnOiNUUi A5PY+LnY+sTalIxf4ZORk796s00g7L+YF6ZJ3nxviB2KisbXtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBGb0PFj5kPmEwaoPmTEXPWGcGUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvNDAxZTIyM2EtNmM5MS0z NzI2LTk5YWMtYjliZjdmZWUyNGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKYvNuWzVoiFuRHNXlF9m8+HDM8mXuVp1eidI86+8UHtbOISaYzKva/ R9sNMH2D7PfxdHm3dnhjDJw6Ls2C0AFJqS8wZYxG9y+47FXpIo/ZTWa6Emm0eE5v rkPckRKrvYa7aMicYl9tCt0IsjwXtIXrVf6XvSeq7HlXKVgtc8tUDw9GSCkPGrkM XbWPNU6owhvwVps/FljHzY0aCcU+hYrzu876xfxK0k9twDYc6bkTDYIayB3fixVj S0q94v4FY13L7qkMKwcJAkMIBmuALwvecapbMxsq+11OIW8/DAlB2jP4LX8yMBXh v9ggHo76RRUp+3bPMQaqXC7i0CNSMm4= -----END CERTIFICATE-----Generated at Fri Sep 11 02:52:32 2026 by rpki-client