$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/401e223a-6c91-3726-99ac-b9bf7fee24f8.roa File: 401e223a-6c91-3726-99ac-b9bf7fee24f8.roa (raw, json) Hash identifier: DTggEos4BXp+6jTzB4MVdIOHrNWx3jdTls+wdRq6/9g= Subject key identifier: A0:67:46:C2:5D:9B:AD:79:1C:DC:83:DB:CB:1B:9F:72:CA:BD:B0:A6 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584ABF48359F52366A47F1C517A0 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/401e223a-6c91-3726-99ac-b9bf7fee24f8.roa Signing time: Mon 04 Aug 2025 18:05:39 +0000 ROA not before: Mon 04 Aug 2025 18:05:39 +0000 ROA not after: Sun 02 Nov 2025 19:05:39 +0000 asID: 63023 IP address blocks: 167.17.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:48:35:9f:52:36:6a:47:f1:c5:17:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Aug 4 18:05:39 2025 GMT Not After : Nov 2 19:05:39 2025 GMT Subject: CN=6bdcfa95-30e5-4210-9a46-a1dfc646b7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5e:15:90:c3:8e:62:59:d1:7d:b2:fd:c1:d0: 4a:15:4e:f1:ff:38:b9:89:08:f1:f5:9b:ac:4d:76: cd:90:60:10:0c:c5:5d:e5:67:0d:b7:b5:44:98:93: b7:c5:35:2b:cd:2b:d1:1d:e3:ce:b3:21:19:d1:a0: 3e:4c:d3:04:9d:5e:b2:4a:5a:e5:c0:95:bf:06:53: b5:09:af:6f:ee:fc:59:c4:d3:31:be:98:3d:b5:04: 46:40:0d:3a:ab:d9:9f:bf:eb:ce:f0:0a:30:40:0e: f5:15:41:51:87:e2:5c:73:75:85:35:5b:c6:a3:11: fb:24:c5:ed:7b:25:17:1e:4d:45:fc:2a:7f:18:70: 29:d4:33:57:e2:46:a6:ed:e3:44:f4:50:6e:ab:73: ab:1a:20:28:14:4e:2b:de:bc:6b:5c:96:a0:e6:b4: c1:68:42:12:aa:80:30:98:d5:27:6b:f2:22:b2:5d: 40:18:6f:5d:30:12:fa:5f:15:7f:10:80:68:1d:09: de:38:9e:d6:71:c3:0e:d7:69:55:04:5a:7f:2e:2e: 60:cb:91:2f:33:23:c0:3c:15:fd:88:51:44:fb:9a: 33:e7:b3:05:4c:0e:27:51:2d:3c:6b:0a:06:cd:a5: 01:a0:1c:aa:30:23:72:53:a9:34:49:9e:a5:37:98: e0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:67:46:C2:5D:9B:AD:79:1C:DC:83:DB:CB:1B:9F:72:CA:BD:B0:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/401e223a-6c91-3726-99ac-b9bf7fee24f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 167.17.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b8:4f:5a:32:28:2a:2b:02:d6:77:fb:68:22:d4:0f:0f:7b: 3c:92:dc:5c:e9:13:d2:2d:bb:a2:b7:3c:63:bd:db:94:91:59: 0a:08:75:b2:69:12:cb:30:de:23:d5:c6:1b:83:d6:57:96:e8: 48:2c:4f:3e:15:33:fa:82:ae:c2:cf:fc:e7:16:e5:97:f6:98: 1d:8e:01:1e:be:0c:7c:56:43:15:b8:e1:09:b5:46:7d:b8:52: 06:b8:7f:d1:f9:f6:51:c2:25:bb:6a:bb:69:c4:9c:c9:48:1d: 15:dc:65:a0:df:09:cc:b1:3c:39:27:2b:84:90:95:bf:4a:cd: 8f:80:2a:c9:ea:75:24:64:59:6a:22:fc:78:a6:40:1a:ed:87: 5d:0f:5d:66:32:cd:4b:f7:c4:0f:53:af:36:d0:5f:c5:c9:54: 12:df:21:d9:bd:18:c4:28:e9:ab:1e:8b:f1:e6:fd:0d:dc:f6: d3:5d:dd:da:3d:24:17:46:34:40:07:ab:d2:77:b7:a1:07:37: bc:f6:fa:69:57:99:45:9b:ca:b0:d8:ed:8a:45:9d:2a:9b:86: e2:34:cf:f6:ec:bc:cb:06:a6:05:5d:26:6d:9c:2d:24:a2:da: 71:9b:5d:12:cc:5b:79:90:17:40:a9:32:b0:8c:92:da:15:88: 0a:c8:ef:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq/SDWfUjZqR/HFF6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI1MDgwNDE4MDUzOVoXDTI1MTEwMjE5MDUzOVowLzEtMCsGA1UEAxMk NmJkY2ZhOTUtMzBlNS00MjEwLTlhNDYtYTFkZmM2NDZiN2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl4VkMOOYlnRfbL9wdBKFU7x/zi5iQjx9Zus TXbNkGAQDMVd5WcNt7VEmJO3xTUrzSvRHePOsyEZ0aA+TNMEnV6ySlrlwJW/BlO1 Ca9v7vxZxNMxvpg9tQRGQA06q9mfv+vO8AowQA71FUFRh+Jcc3WFNVvGoxH7JMXt eyUXHk1F/Cp/GHAp1DNX4kam7eNE9FBuq3OrGiAoFE4r3rxrXJag5rTBaEISqoAw mNUna/Iisl1AGG9dMBL6XxV/EIBoHQneOJ7WccMO12lVBFp/Li5gy5EvMyPAPBX9 iFFE+5oz57MFTA4nUS08awoGzaUBoByqMCNyU6k0SZ6lN5jgMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBnRsJdm615HNyD28sbn3LKvbCmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvNDAxZTIyM2EtNmM5MS0z NzI2LTk5YWMtYjliZjdmZWUyNGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm4T1oyKCorAtZ3+2gi1A8PezyS3FzpE9Itu6K3PGO925SRWQoIdbJp Essw3iPVxhuD1leW6EgsTz4VM/qCrsLP/OcW5Zf2mB2OAR6+DHxWQxW44Qm1Rn24 Uga4f9H59lHCJbtqu2nEnMlIHRXcZaDfCcyxPDknK4SQlb9KzY+AKsnqdSRkWWoi /HimQBrth10PXWYyzUv3xA9TrzbQX8XJVBLfIdm9GMQo6asei/Hm/Q3c9tNd3do9 JBdGNEAHq9J3t6EHN7z2+mlXmUWbyrDY7YpFnSqbhuI0z/bsvMsGpgVdJm2cLSSi 2nGbXRLMW3mQF0CpMrCMktoViArI774= -----END CERTIFICATE-----Generated at Sat Aug 23 16:27:23 2025 by rpki-client