$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/b9154c64-f4c1-3931-a133-76d53b82db91.roa File: b9154c64-f4c1-3931-a133-76d53b82db91.roa (raw, json) Hash identifier: 49CZ7y0ahJXNUYCDNJSUG2pTweYSSBwV/DQrBSHixo0= Subject key identifier: 02:BD:9C:58:97:E7:50:8A:EC:F7:8C:52:5C:AA:86:DE:B7:4A:24:94 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584EE22750C6330041BC963F2BC8 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/b9154c64-f4c1-3931-a133-76d53b82db91.roa Signing time: Wed 19 Aug 2026 01:00:12 +0000 ROA not before: Wed 19 Aug 2026 01:00:12 +0000 ROA not after: Tue 17 Nov 2026 02:00:12 +0000 asID: 63023 IP address blocks: 167.17.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e2:27:50:c6:33:00:41:bc:96:3f:2b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Aug 19 01:00:12 2026 GMT Not After : Nov 17 02:00:12 2026 GMT Subject: CN=a1ac7050-c0ca-4abb-891c-aa9128c3af40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:45:67:0c:0a:27:a8:ac:9c:36:b5:e5:86:dd: de:94:aa:0a:a5:92:90:89:79:2e:04:5a:61:0c:80: 9a:32:1f:3a:3d:9f:47:5d:84:8f:77:da:f6:7f:bf: f0:a3:69:ff:ac:23:38:e0:83:0b:b2:e8:66:2d:be: 92:33:25:1c:db:67:d7:ed:c2:7a:df:d1:16:18:81: 47:95:9e:b1:16:a4:8f:c0:95:db:50:94:2e:da:ca: 00:ef:fd:58:1d:29:b3:d6:bf:c8:a1:8c:f6:2a:56: 23:55:fe:12:f3:64:d6:1c:c1:39:ef:54:92:64:71: 45:ce:66:06:b8:86:4d:8f:5b:ef:46:23:d0:69:ae: 16:18:ae:3e:6b:d3:28:0d:e1:e3:1b:53:2d:a3:dd: c7:5b:da:cc:81:33:9d:3f:d8:c6:12:91:2c:00:70: 13:e0:c6:85:2b:14:36:95:ee:49:4c:b3:59:75:ff: 5e:5c:99:ad:f5:e0:20:8b:14:18:4a:4c:c4:e4:1f: 94:d0:15:e8:81:94:44:25:1b:a1:60:25:20:ab:bf: b0:fb:45:26:c8:9b:79:3c:13:6c:55:f7:ee:5f:cc: 42:11:d2:26:d9:4f:e1:ba:a0:5b:1c:41:89:0e:90: 7a:2e:61:55:76:7d:0b:e4:4f:78:e3:68:c5:d9:f1: 11:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BD:9C:58:97:E7:50:8A:EC:F7:8C:52:5C:AA:86:DE:B7:4A:24:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/b9154c64-f4c1-3931-a133-76d53b82db91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 167.17.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:c9:62:bc:e9:c7:53:b5:ae:7e:08:0e:66:dc:74:08:c1:f9: 09:53:9c:9d:86:41:95:6f:c7:58:76:2c:9e:3d:2d:50:61:11: 06:7f:45:e1:7b:79:46:fc:b0:28:b3:ea:66:58:b1:87:47:2b: ac:a4:f7:8d:d8:ea:0d:33:1f:79:c4:8a:17:eb:e5:f5:71:cf: c2:c9:48:8b:99:b9:ff:63:8e:35:3a:53:84:ba:76:23:0a:ae: 97:08:38:06:f2:af:58:47:c5:b6:52:20:6b:15:ee:a7:b0:f3: 87:e2:bb:82:d6:77:a6:30:08:a9:62:78:83:69:50:74:ff:d7: 29:f4:87:5a:3f:4e:b1:41:c1:53:94:d1:9f:a7:82:6d:b4:b4: ec:06:ea:ac:28:50:85:7c:7d:64:87:ce:d4:b7:1f:f3:cc:25: f1:94:f1:0a:92:2e:db:38:9d:b4:d1:d3:95:22:08:49:c0:8d: a5:3a:10:78:07:2f:02:93:84:d1:89:47:e8:67:4e:c0:7a:41: 1d:98:80:55:68:ba:23:1e:c7:87:75:30:1c:36:18:60:d8:6e: 89:fa:3a:2f:3a:c8:10:4d:4f:da:7f:0c:31:39:13:8e:e2:48: 0f:bb:94:2c:e3:41:85:ee:e8:94:fe:96:2f:f4:d0:81:40:af: 26:21:06:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7iJ1DGMwBBvJY/K8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI2MDgxOTAxMDAxMloXDTI2MTExNzAyMDAxMlowLzEtMCsGA1UEAxMk YTFhYzcwNTAtYzBjYS00YWJiLTg5MWMtYWE5MTI4YzNhZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkVnDAonqKycNrXlht3elKoKpZKQiXkuBFph DICaMh86PZ9HXYSPd9r2f7/wo2n/rCM44IMLsuhmLb6SMyUc22fX7cJ639EWGIFH lZ6xFqSPwJXbUJQu2soA7/1YHSmz1r/IoYz2KlYjVf4S82TWHME571SSZHFFzmYG uIZNj1vvRiPQaa4WGK4+a9MoDeHjG1Mto93HW9rMgTOdP9jGEpEsAHAT4MaFKxQ2 le5JTLNZdf9eXJmt9eAgixQYSkzE5B+U0BXogZREJRuhYCUgq7+w+0UmyJt5PBNs VffuX8xCEdIm2U/huqBbHEGJDpB6LmFVdn0L5E9442jF2fERPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAK9nFiX51CK7PeMUlyqht63SiSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvYjkxNTRjNjQtZjRjMS0z OTMxLWExMzMtNzZkNTNiODJkYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvJYrzpx1O1rn4IDmbcdAjB+QlTnJ2GQZVvx1h2LJ49LVBhEQZ/ReF7 eUb8sCiz6mZYsYdHK6yk943Y6g0zH3nEihfr5fVxz8LJSIuZuf9jjjU6U4S6diMK rpcIOAbyr1hHxbZSIGsV7qew84fiu4LWd6YwCKlieINpUHT/1yn0h1o/TrFBwVOU 0Z+ngm20tOwG6qwoUIV8fWSHztS3H/PMJfGU8QqSLts4nbTR05UiCEnAjaU6EHgH LwKThNGJR+hnTsB6QR2YgFVouiMex4d1MBw2GGDYbon6Oi86yBBNT9p/DDE5E47i SA+7lCzjQYXu6JT+li/00IFAryYhBpw= -----END CERTIFICATE-----Generated at Fri Sep 11 01:20:20 2026 by rpki-client