$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/98331eed-61d9-3100-8c04-24174f07d905.roa File: 98331eed-61d9-3100-8c04-24174f07d905.roa (raw, json) Hash identifier: vMvOsOkgc4Fsk3wlJZCUaFJAmlDfBJWqgzmjPUjKxBg= Subject key identifier: 35:A3:34:1C:F0:D8:EC:AB:77:D5:36:8F:15:2F:1B:92:54:C4:91:E4 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584EE2273BACB67C232C7BF2EB00 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/98331eed-61d9-3100-8c04-24174f07d905.roa Signing time: Wed 19 Aug 2026 01:00:12 +0000 ROA not before: Wed 19 Aug 2026 01:00:12 +0000 ROA not after: Tue 17 Nov 2026 02:00:12 +0000 asID: 63023 IP address blocks: 167.17.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e2:27:3b:ac:b6:7c:23:2c:7b:f2:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Aug 19 01:00:12 2026 GMT Not After : Nov 17 02:00:12 2026 GMT Subject: CN=1761f8be-7754-4364-99df-2c1622f56c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:97:ff:f3:1f:c7:9b:5a:9c:6c:5a:e2:4a:93: 76:55:4c:5c:02:b5:df:32:5a:d6:b8:93:2b:86:05: 55:5f:bd:61:3a:17:8d:92:0f:bb:cb:83:84:d0:a1: b6:e8:25:3e:5c:63:25:9e:44:1a:13:e3:b1:13:49: b9:28:87:f0:97:a1:2e:55:be:67:aa:c7:6f:6e:f7: e5:ca:ee:cd:6d:ad:4d:c2:db:8a:cb:83:29:a6:d7: b4:98:ab:d4:5a:66:08:9f:0b:f5:d6:f0:98:28:24: 3a:e3:25:7c:8a:f5:5d:14:4d:67:ba:66:3b:8e:12: d5:3e:e0:58:64:f0:9e:cd:3a:89:c6:92:2a:ba:cf: f6:22:a5:a8:37:47:68:ab:ba:da:aa:6f:7e:64:5a: f1:56:24:76:45:60:24:72:9b:d0:97:75:03:b8:0f: 0d:7d:d5:a0:44:2c:bc:6f:a5:1a:70:f0:50:b8:c2: 06:8d:5a:78:a0:b4:22:86:b5:c5:9a:55:da:03:8f: 4b:6d:d7:45:6b:1e:df:76:89:60:32:ef:60:d4:d6: 3c:38:e7:24:d1:f2:b8:42:36:d4:ff:71:a8:96:29: 8c:b8:47:35:c0:bf:fa:2d:a5:a9:cd:24:fb:98:6d: 49:fd:8d:e7:bb:ef:85:cc:24:92:50:86:21:e9:7d: 68:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A3:34:1C:F0:D8:EC:AB:77:D5:36:8F:15:2F:1B:92:54:C4:91:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/98331eed-61d9-3100-8c04-24174f07d905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 167.17.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:83:e4:17:5a:a2:3e:be:f9:7a:7c:8a:cf:d4:36:8a:d6:a7: ce:f0:34:46:b1:38:d0:71:40:b5:ec:9c:76:8c:56:56:8a:67: 46:cc:c2:9e:72:0f:61:96:a2:6f:e1:cc:28:f2:00:14:4e:3d: 99:6e:e5:1b:cd:8f:80:06:97:b7:e6:2a:44:56:f6:8b:a5:3b: b0:ba:88:45:0a:2d:26:d8:67:c5:92:02:60:bf:90:86:eb:14: b4:b5:00:f2:70:58:02:bb:46:4a:2d:d1:de:be:4d:ff:eb:ef: f2:d7:02:ab:9c:01:c7:8c:49:78:3b:37:21:3c:30:bf:49:d4: d6:d9:58:9b:43:0d:3b:78:21:71:d3:7b:c6:0c:ba:ae:b1:90: 9c:3d:ca:44:6c:75:99:d5:a2:dc:5c:03:38:4c:52:81:90:48: 30:80:ba:66:52:77:e2:75:32:ac:74:f8:43:6c:74:af:69:25: 0d:44:b9:86:eb:6d:b2:88:b7:80:db:0a:55:59:28:5c:6c:0f: c8:bd:65:72:3f:fd:e9:e3:a4:2a:ef:b1:9b:eb:c6:b3:63:6c: d6:00:61:d4:80:e3:11:93:5f:96:19:b4:5f:5b:af:e3:7a:01: c0:51:86:ce:d1:f5:f8:0e:0b:eb:1f:fe:a0:85:5d:e6:56:91: 12:41:47:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7iJzustnwjLHvy6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI2MDgxOTAxMDAxMloXDTI2MTExNzAyMDAxMlowLzEtMCsGA1UEAxMk MTc2MWY4YmUtNzc1NC00MzY0LTk5ZGYtMmMxNjIyZjU2YzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupf/8x/Hm1qcbFriSpN2VUxcArXfMlrWuJMr hgVVX71hOheNkg+7y4OE0KG26CU+XGMlnkQaE+OxE0m5KIfwl6EuVb5nqsdvbvfl yu7Nba1NwtuKy4Mppte0mKvUWmYInwv11vCYKCQ64yV8ivVdFE1numY7jhLVPuBY ZPCezTqJxpIqus/2IqWoN0doq7raqm9+ZFrxViR2RWAkcpvQl3UDuA8NfdWgRCy8 b6UacPBQuMIGjVp4oLQihrXFmlXaA49LbddFax7fdolgMu9g1NY8OOck0fK4QjbU /3GolimMuEc1wL/6LaWpzST7mG1J/Y3nu++FzCSSUIYh6X1ozwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWjNBzw2Oyrd9U2jxUvG5JUxJHkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvOTgzMzFlZWQtNjFkOS0z MTAwLThjMDQtMjQxNzRmMDdkOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxFBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMeD5Bdaoj6++Xp8is/UNorWp87wNEaxONBxQLXsnHaMVlaKZ0bMwp5y D2GWom/hzCjyABROPZlu5RvNj4AGl7fmKkRW9oulO7C6iEUKLSbYZ8WSAmC/kIbr FLS1APJwWAK7Rkot0d6+Tf/r7/LXAqucAceMSXg7NyE8ML9J1NbZWJtDDTt4IXHT e8YMuq6xkJw9ykRsdZnVotxcAzhMUoGQSDCAumZSd+J1Mqx0+ENsdK9pJQ1EuYbr bbKIt4DbClVZKFxsD8i9ZXI//enjpCrvsZvrxrNjbNYAYdSA4xGTX5YZtF9br+N6 AcBRhs7R9fgOC+sf/qCFXeZWkRJBRxU= -----END CERTIFICATE-----Generated at Fri Sep 11 01:20:07 2026 by rpki-client