$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/1a945ad5-a8f7-3fb6-9d34-ed62134ae9fc.roa File: 1a945ad5-a8f7-3fb6-9d34-ed62134ae9fc.roa (raw, json) Hash identifier: KXPVCUXnhx2slLs9ViihP3EFyQAdmOMYGTERzOGTkHY= Subject key identifier: D9:0F:F8:24:8C:60:C5:60:15:EF:66:9A:42:A5:1E:2A:F1:98:E1:EB Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584E3FC47064B2C6593759ED22C9 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/1a945ad5-a8f7-3fb6-9d34-ed62134ae9fc.roa Signing time: Sun 21 Jun 2026 21:00:12 +0000 ROA not before: Sun 21 Jun 2026 21:00:12 +0000 ROA not after: Sat 19 Sep 2026 21:00:12 +0000 asID: 63023 IP address blocks: 167.17.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3f:c4:70:64:b2:c6:59:37:59:ed:22:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Jun 21 21:00:12 2026 GMT Not After : Sep 19 21:00:12 2026 GMT Subject: CN=4bd24e55-fbc3-4b88-bb8b-481e744b3c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:22:fc:20:0b:e4:c3:19:93:c3:de:38:6b:3d: 65:c3:32:51:a9:c9:77:80:cf:68:27:13:98:80:ae: b6:2d:54:cd:1e:43:0d:81:bd:98:a4:f5:e6:e2:d5: b7:bc:48:d2:e7:a6:17:50:a8:6a:c5:16:0d:20:22: b7:80:4f:7d:e0:de:7a:ad:eb:94:79:b1:09:09:74: a1:55:a1:06:9f:ba:a2:92:3c:89:e1:98:79:c8:10: bf:69:f8:40:21:21:26:52:98:46:31:22:a9:eb:0f: fb:27:77:72:34:b9:6c:68:bc:43:a4:d7:e7:a9:61: 2b:1b:2b:2a:ec:b1:6d:97:b4:f9:00:7a:6a:55:63: f5:d2:a3:92:cf:47:7b:4b:e9:cd:a6:d2:44:b5:f6: 23:6a:fc:86:b7:35:c2:e2:b1:60:e1:22:75:a3:80: cf:dd:6b:f0:57:20:05:ef:f9:52:0f:8c:2a:2b:e4: 34:87:23:2b:c5:db:6e:e8:a0:b1:e5:93:f6:78:b7: f8:fb:fd:f8:64:ae:7b:77:9a:5a:10:c2:c7:ca:9e: 65:50:cb:f4:d5:dd:ac:51:a8:a9:30:71:64:e7:a8: b4:97:2e:80:03:7c:83:3e:85:77:e9:4f:fc:18:d4: d6:6f:b4:a2:cd:d4:de:fa:68:3a:17:3a:e7:83:1f: af:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:0F:F8:24:8C:60:C5:60:15:EF:66:9A:42:A5:1E:2A:F1:98:E1:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/1a945ad5-a8f7-3fb6-9d34-ed62134ae9fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 167.17.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:80:41:08:09:ea:58:8d:72:6b:be:e5:e2:95:d7:cd:63:82: 15:87:ec:bb:2f:ff:8c:f5:b7:fc:8e:62:64:2e:32:0f:40:fa: 2f:6a:0a:65:2d:75:18:bf:65:a0:74:d5:b1:8a:fc:2e:e1:82: b8:b1:d3:e8:91:79:09:76:f6:eb:bf:44:49:56:54:2c:b0:53: d9:74:eb:23:3f:31:a5:b3:a7:c7:f4:5c:c9:78:a2:8e:10:60: 5c:f9:23:cf:fa:c5:73:42:d8:d9:11:34:47:7d:4d:47:32:92: f6:2d:48:21:30:07:b1:1e:3a:2b:44:91:79:02:fb:22:16:d0: 19:c3:b5:fd:77:97:21:aa:d1:a4:d1:98:65:1e:4e:1b:90:93: 0a:20:0f:df:17:45:f8:ab:e8:3a:03:c4:e5:a6:ee:9e:b4:f2: 9c:1b:e7:25:15:ac:87:0d:b3:bf:13:bf:c5:b0:6e:79:03:2f: 6f:1c:df:06:26:a2:c2:90:95:76:1a:13:8a:2f:f6:47:d5:67: 35:aa:ce:e2:ca:79:76:78:85:d4:08:4e:25:5b:49:4d:c5:56: fc:73:29:0b:2a:56:ef:69:cb:2f:28:09:41:5f:82:5c:e9:74: b6:8b:24:e1:92:2a:f8:02:08:f6:61:62:53:1d:25:33:ed:c3: da:17:8b:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4/xHBkssZZN1ntIskwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk NGJkMjRlNTUtZmJjMy00Yjg4LWJiOGItNDgxZTc0NGIzYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyL8IAvkwxmTw944az1lwzJRqcl3gM9oJxOY gK62LVTNHkMNgb2YpPXm4tW3vEjS56YXUKhqxRYNICK3gE994N56reuUebEJCXSh VaEGn7qikjyJ4Zh5yBC/afhAISEmUphGMSKp6w/7J3dyNLlsaLxDpNfnqWErGysq 7LFtl7T5AHpqVWP10qOSz0d7S+nNptJEtfYjavyGtzXC4rFg4SJ1o4DP3WvwVyAF 7/lSD4wqK+Q0hyMrxdtu6KCx5ZP2eLf4+/34ZK57d5paEMLHyp5lUMv01d2sUaip MHFk56i0ly6AA3yDPoV36U/8GNTWb7SizdTe+mg6Fzrngx+vJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkP+CSMYMVgFe9mmkKlHirxmOHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvMWE5NDVhZDUtYThmNy0z ZmI2LTlkMzQtZWQ2MjEzNGFlOWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxFCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWAQQgJ6liNcmu+5eKV181jghWH7Lsv/4z1t/yOYmQuMg9A+i9qCmUt dRi/ZaB01bGK/C7hgrix0+iReQl29uu/RElWVCywU9l06yM/MaWzp8f0XMl4oo4Q YFz5I8/6xXNC2NkRNEd9TUcykvYtSCEwB7EeOitEkXkC+yIW0BnDtf13lyGq0aTR mGUeThuQkwogD98XRfir6DoDxOWm7p608pwb5yUVrIcNs78Tv8WwbnkDL28c3wYm osKQlXYaE4ov9kfVZzWqzuLKeXZ4hdQITiVbSU3FVvxzKQsqVu9pyy8oCUFfglzp dLaLJOGSKvgCCPZhYlMdJTPtw9oXi+U= -----END CERTIFICATE-----Generated at Fri Jul 24 13:35:52 2026 by rpki-client