$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/3ff1ef39-3a59-31db-bf17-ce082479a311.roa File: 3ff1ef39-3a59-31db-bf17-ce082479a311.roa (raw, json) Hash identifier: SDPfejsFbEnOyYGDdIaPtP71Z1lkF3oFqvw61wnPJns= Subject key identifier: BF:AF:D9:A6:39:AC:CC:7E:96:85:9C:30:4B:ED:C6:2F:42:CF:11:47 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584ABF48B852565AC0A57920E2F0 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/3ff1ef39-3a59-31db-bf17-ce082479a311.roa Signing time: Mon 04 Aug 2025 18:06:41 +0000 ROA not before: Mon 04 Aug 2025 18:06:41 +0000 ROA not after: Sun 02 Nov 2025 19:06:41 +0000 asID: 63023 IP address blocks: 167.17.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:48:b8:52:56:5a:c0:a5:79:20:e2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Aug 4 18:06:41 2025 GMT Not After : Nov 2 19:06:41 2025 GMT Subject: CN=99c4d98b-6baf-4329-a9c2-46242f068f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:94:30:cf:cf:20:b2:46:41:59:d5:13:58:1a: a2:d5:b0:a0:71:d1:7f:99:60:d7:01:f7:77:c9:00: 09:94:40:dd:c2:3b:ef:e7:9d:94:64:dd:85:49:50: 2a:c8:cb:03:49:ea:37:5d:1e:08:57:5a:88:58:da: c8:97:cf:9f:2d:fc:b8:49:84:b1:31:ac:5d:35:41: d9:fa:db:81:72:67:b9:a2:1f:ee:9d:cd:fe:a5:ba: ee:75:a2:6d:31:f7:b0:d0:5f:80:2d:8d:c4:94:b6: 5a:6b:75:e6:6e:25:b1:20:cb:f2:53:a8:22:87:48: 84:c8:cc:4c:14:37:68:81:7c:73:ba:10:bb:ea:89: ee:f3:04:a2:7e:73:fc:28:3c:b6:8a:fb:c7:6c:94: 78:6c:8d:88:61:35:21:df:81:be:15:8e:33:ad:1b: ff:2b:75:0d:0c:95:c6:df:ce:3f:88:8e:93:24:ac: 77:2b:d1:93:12:0d:71:0e:0b:6c:6f:63:75:f1:91: 92:36:7c:8d:4a:2a:86:b1:13:22:c3:3b:bf:07:68: 4c:d1:e4:96:61:19:95:01:f9:03:34:f1:14:17:71: bf:fd:f6:ac:77:79:88:5f:36:ea:7a:97:f1:1e:4e: 63:8c:9f:80:46:3e:79:33:bd:92:a8:8f:0f:9d:40: 80:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AF:D9:A6:39:AC:CC:7E:96:85:9C:30:4B:ED:C6:2F:42:CF:11:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/3ff1ef39-3a59-31db-bf17-ce082479a311.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 167.17.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c4:33:f2:95:16:7a:e5:24:2a:1c:1b:f5:07:90:62:5b:10: 57:10:bf:86:a4:6a:1b:8b:92:7f:41:83:5b:e1:41:ea:b5:a3: eb:a8:d8:9c:1f:e5:06:7c:1f:e2:5c:e0:ad:51:4a:60:c7:48: 6a:f9:65:cb:43:78:34:88:f7:74:56:31:48:9c:10:cb:ad:73: e9:8e:fb:7f:ac:97:63:5c:5b:35:2c:d9:a4:fb:9d:a9:ac:62: cf:13:0b:8c:49:d5:58:8b:f8:8c:5c:f8:f1:77:67:4d:33:1c: 01:00:e2:63:bb:bc:38:68:b4:2b:4d:89:4d:78:7a:66:e4:13: 26:0b:21:5a:e3:61:88:c2:aa:8a:14:31:5c:ff:6e:00:46:bf: 12:bc:16:93:1d:4c:e7:6c:9f:2f:4d:c3:36:15:a1:63:b8:a7: e6:2c:71:8f:46:0d:93:60:28:0a:0c:d6:7c:ff:bc:79:ce:84: 09:47:ff:fe:8f:a1:00:60:b1:54:22:5c:04:78:3e:61:96:a1: 70:61:3f:d0:40:d6:5e:56:53:32:09:1b:f2:62:c7:bb:b6:82: ef:e6:5f:20:2e:f3:87:36:71:b9:fc:b8:5e:72:84:19:b8:37: aa:e5:23:b3:3f:37:ce:18:e9:d5:e4:10:19:0f:1e:58:57:bb: 40:70:c1:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq/SLhSVlrApXkg4vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI1MDgwNDE4MDY0MVoXDTI1MTEwMjE5MDY0MVowLzEtMCsGA1UEAxMk OTljNGQ5OGItNmJhZi00MzI5LWE5YzItNDYyNDJmMDY4ZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJQwz88gskZBWdUTWBqi1bCgcdF/mWDXAfd3 yQAJlEDdwjvv552UZN2FSVAqyMsDSeo3XR4IV1qIWNrIl8+fLfy4SYSxMaxdNUHZ +tuBcme5oh/unc3+pbrudaJtMfew0F+ALY3ElLZaa3XmbiWxIMvyU6gih0iEyMxM FDdogXxzuhC76onu8wSifnP8KDy2ivvHbJR4bI2IYTUh34G+FY4zrRv/K3UNDJXG 384/iI6TJKx3K9GTEg1xDgtsb2N18ZGSNnyNSiqGsRMiwzu/B2hM0eSWYRmVAfkD NPEUF3G//fasd3mIXzbqepfxHk5jjJ+ARj55M72SqI8PnUCAiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+v2aY5rMx+loWcMEvtxi9CzxFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvM2ZmMWVmMzktM2E1OS0z MWRiLWJmMTctY2UwODI0NzlhMzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxFGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADEM/KVFnrlJCocG/UHkGJbEFcQv4akahuLkn9Bg1vhQeq1o+uo2Jwf 5QZ8H+Jc4K1RSmDHSGr5ZctDeDSI93RWMUicEMutc+mO+3+sl2NcWzUs2aT7nams Ys8TC4xJ1ViL+Ixc+PF3Z00zHAEA4mO7vDhotCtNiU14embkEyYLIVrjYYjCqooU MVz/bgBGvxK8FpMdTOdsny9NwzYVoWO4p+YscY9GDZNgKAoM1nz/vHnOhAlH//6P oQBgsVQiXAR4PmGWoXBhP9BA1l5WUzIJG/Jix7u2gu/mXyAu84c2cbn8uF5yhBm4 N6rlI7M/N84Y6dXkEBkPHlhXu0BwwVg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:45:33 2025 by rpki-client