$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/b9154c64-f4c1-3931-a133-76d53b82db91.roa File: b9154c64-f4c1-3931-a133-76d53b82db91.roa (raw, json) Hash identifier: DZo+FgbM4mMI7MDxaonAH83QJrN/FKArrRc5JId4n9c= Subject key identifier: A9:75:4E:9F:FE:68:C4:F3:E8:C9:C6:83:08:57:68:8E:A1:21:63:2F Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584B9F6CD9C22B7D2A449C247B00 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/b9154c64-f4c1-3931-a133-76d53b82db91.roa Signing time: Fri 24 Oct 2025 01:00:30 +0000 ROA not before: Fri 24 Oct 2025 01:00:30 +0000 ROA not after: Thu 22 Jan 2026 02:00:30 +0000 asID: 63023 IP address blocks: 167.17.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9f:6c:d9:c2:2b:7d:2a:44:9c:24:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Oct 24 01:00:30 2025 GMT Not After : Jan 22 02:00:30 2026 GMT Subject: CN=8cba6c84-d13b-4e02-a9c2-36ee75b73a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ab:16:75:1e:e2:cf:dd:ca:b8:01:79:89:c1: 3d:1f:a8:ac:bc:7b:2c:5c:83:b5:89:3f:67:38:f2: db:5e:c8:3e:29:b3:8e:60:95:86:0d:74:75:97:e4: 16:c7:f9:1b:38:a9:88:40:77:3f:57:50:29:fe:91: 82:5a:5f:28:45:53:91:e9:96:a1:67:c8:ae:f3:4c: d9:6a:cc:e3:e5:ce:02:c2:63:8f:d4:b5:40:fd:19: 87:5c:df:ba:2d:dc:28:a0:1a:9c:65:1d:07:40:6a: e3:af:13:59:e0:6a:eb:32:1a:88:52:df:e6:eb:52: fb:f6:08:dd:c9:e6:8c:77:58:88:4c:a8:16:b3:a8: aa:72:d2:b4:63:13:64:7b:6c:83:37:f5:95:c1:0d: 43:b7:63:04:54:63:d2:ee:c5:68:e5:23:2a:68:c4: 81:85:b5:5f:79:09:10:42:84:35:a7:b3:33:42:23: 1a:9d:20:cf:b9:f1:89:9e:f3:f3:06:1c:5b:78:b3: 97:8a:33:90:f4:e6:e4:60:60:9c:a9:c3:42:9a:8e: 9d:ff:ad:02:8d:c6:d9:a7:d2:c1:1a:79:b4:f8:25: e7:8b:8d:db:97:5e:8b:52:1c:bd:4d:87:c5:ef:39: a7:07:94:52:cf:21:e2:ed:1f:c4:01:30:e2:d6:e0: 48:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:75:4E:9F:FE:68:C4:F3:E8:C9:C6:83:08:57:68:8E:A1:21:63:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/b9154c64-f4c1-3931-a133-76d53b82db91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 167.17.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:6c:f7:83:51:ae:b5:cc:25:bc:d9:d5:c5:6b:9b:f2:86:c3: 95:9c:e1:9f:da:7d:2f:8f:59:1f:59:85:c0:af:e6:f7:fd:cf: 57:aa:6d:88:37:a4:ee:a7:7c:1e:08:a2:a1:06:a3:0b:78:00: 6d:f6:f5:d3:6a:38:fb:5b:d8:b9:f0:b1:67:05:f3:97:da:b1: 34:0c:27:36:b0:1d:3e:05:c5:bd:d6:4a:90:82:29:50:ca:5d: 2e:e1:b4:15:b8:46:fa:c6:61:01:0b:49:c9:23:4a:bd:31:eb: 0a:21:13:47:a8:86:6a:18:92:90:64:52:98:e4:e5:24:24:96: c7:91:96:d8:f5:54:84:8f:9f:ad:65:18:a3:9f:65:d8:55:1d: 7e:d4:ff:20:3a:21:22:b2:8b:55:4d:4d:bf:84:8c:f3:67:73: 37:30:c1:b1:57:a6:5d:d3:b1:fa:dd:ac:7e:5e:e3:7f:a5:9f: b4:4f:b2:2a:fa:e1:b7:36:a9:bb:93:26:24:97:bd:aa:f5:6f: ec:f3:e9:6d:f7:ad:cf:be:33:44:a8:75:2f:ff:48:b7:06:6c: a2:fd:cc:e5:d8:69:0f:3e:34:a5:57:3e:37:36:3e:50:5c:0a: 2c:24:9d:74:e8:ba:fe:cf:dd:d7:09:b7:99:a5:66:ca:76:0e: 7c:d8:99:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEufbNnCK30qRJwkewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI1MTAyNDAxMDAzMFoXDTI2MDEyMjAyMDAzMFowLzEtMCsGA1UEAxMk OGNiYTZjODQtZDEzYi00ZTAyLWE5YzItMzZlZTc1YjczYTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgasWdR7iz93KuAF5icE9H6isvHssXIO1iT9n OPLbXsg+KbOOYJWGDXR1l+QWx/kbOKmIQHc/V1Ap/pGCWl8oRVOR6ZahZ8iu80zZ aszj5c4CwmOP1LVA/RmHXN+6LdwooBqcZR0HQGrjrxNZ4GrrMhqIUt/m61L79gjd yeaMd1iITKgWs6iqctK0YxNke2yDN/WVwQ1Dt2MEVGPS7sVo5SMqaMSBhbVfeQkQ QoQ1p7MzQiManSDPufGJnvPzBhxbeLOXijOQ9ObkYGCcqcNCmo6d/60CjcbZp9LB Gnm0+CXni43bl16LUhy9TYfF7zmnB5RSzyHi7R/EATDi1uBIGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl1Tp/+aMTz6MnGgwhXaI6hIWMvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvYjkxNTRjNjQtZjRjMS0z OTMxLWExMzMtNzZkNTNiODJkYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxs94NRrrXMJbzZ1cVrm/KGw5Wc4Z/afS+PWR9ZhcCv5vf9z1eqbYg3 pO6nfB4IoqEGowt4AG329dNqOPtb2LnwsWcF85fasTQMJzawHT4Fxb3WSpCCKVDK XS7htBW4RvrGYQELSckjSr0x6wohE0eohmoYkpBkUpjk5SQklseRltj1VISPn61l GKOfZdhVHX7U/yA6ISKyi1VNTb+EjPNnczcwwbFXpl3TsfrdrH5e43+ln7RPsir6 4bc2qbuTJiSXvar1b+zz6W33rc++M0SodS//SLcGbKL9zOXYaQ8+NKVXPjc2PlBc CiwknXTouv7P3dcJt5mlZsp2DnzYmfo= -----END CERTIFICATE-----Generated at Fri Oct 24 14:57:05 2025 by rpki-client