$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/98331eed-61d9-3100-8c04-24174f07d905.roa File: 98331eed-61d9-3100-8c04-24174f07d905.roa (raw, json) Hash identifier: tqJrsPChc+5vp8UUBrgYsy1PDhAljbmQeaCrQPzE5Aw= Subject key identifier: B0:23:50:44:8A:B8:D0:7E:BE:5C:35:1A:AD:3C:AC:F0:FB:CB:6D:29 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584ABF47D4CA1FB67F6EB8DE1C60 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/98331eed-61d9-3100-8c04-24174f07d905.roa Signing time: Mon 04 Aug 2025 18:04:53 +0000 ROA not before: Mon 04 Aug 2025 18:04:53 +0000 ROA not after: Sun 02 Nov 2025 19:04:53 +0000 asID: 63023 IP address blocks: 167.17.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:47:d4:ca:1f:b6:7f:6e:b8:de:1c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Aug 4 18:04:53 2025 GMT Not After : Nov 2 19:04:53 2025 GMT Subject: CN=971ddedb-b5d5-4eff-98f1-f7d44894cb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:46:2d:9d:8b:74:91:1f:cf:65:8b:44:9e:6c: 05:c2:86:fc:fe:e3:e4:0a:7b:92:bf:ce:10:31:cd: 1d:4b:78:2b:4e:68:f7:46:62:16:65:81:7a:24:ae: e5:98:e0:b9:c7:31:f8:a1:ad:9f:85:cd:5d:75:79: f7:e7:54:c6:2b:7c:6a:5a:25:77:1f:b0:df:5e:13: 03:16:76:b4:e8:dc:7d:38:f7:71:d5:aa:38:97:ca: ff:99:a3:51:96:ad:a9:3c:d7:ef:d9:ce:77:02:89: 09:ed:cb:72:ce:f4:70:08:55:0e:67:c4:71:c7:39: 3b:e2:eb:37:97:74:e5:78:a4:51:c4:41:5a:01:45: 06:1a:f9:00:ac:0a:dd:6a:a7:d9:10:f6:a6:f0:f0: c7:3b:ff:95:1a:8b:5a:b9:6a:36:41:e9:f2:dc:47: a0:4b:c1:20:6a:5c:55:5f:bb:43:f4:4a:0f:b8:9d: e9:78:fd:30:70:18:a0:fb:c3:6e:63:74:af:32:40: b8:42:11:47:28:c3:b8:cf:52:7b:cd:cf:e1:14:d6: 16:72:a1:8b:3b:32:89:c3:89:75:4c:a4:af:e9:e9: 20:4f:ec:57:96:78:e3:93:96:6c:83:85:74:0f:4a: e7:d4:11:8a:b2:9f:d0:2e:62:fd:98:58:ce:d6:9d: 24:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:23:50:44:8A:B8:D0:7E:BE:5C:35:1A:AD:3C:AC:F0:FB:CB:6D:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/98331eed-61d9-3100-8c04-24174f07d905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 167.17.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:93:f3:c0:6f:82:16:25:d9:a6:6d:6d:30:ed:e5:4c:2f:2b: 67:f9:35:e4:b3:80:85:41:ad:5a:ac:9f:d6:e3:df:69:9b:91: 4d:e5:33:ab:87:73:d9:50:0f:89:0b:21:fe:7e:7d:1c:a5:cc: 6e:64:40:b2:5d:e4:9b:98:b5:1c:58:78:4c:05:a6:ec:d8:ba: 8e:52:92:8d:8b:3a:8d:3a:9c:30:cf:4e:b4:a6:59:6b:be:db: c3:7c:53:a9:2d:37:ec:89:48:6f:07:72:6c:d0:6c:36:3f:a5: 06:ca:50:0f:78:03:ae:75:0f:f6:f2:49:bd:58:af:af:52:36: 26:6a:da:6a:93:95:59:5e:3b:17:3a:1d:bd:03:9a:73:e6:1d: d1:dd:95:d1:16:a2:57:43:ce:04:a8:ee:f2:e5:54:14:08:c1: 34:6a:3e:d0:e4:95:fd:91:7a:07:91:e4:ea:e6:40:c7:d0:c2: 64:20:61:64:aa:76:97:53:c9:da:b0:a0:05:e8:8b:f1:99:b4: 87:5e:f4:57:d4:3a:34:ba:4c:83:a7:e0:3b:c6:0d:79:fe:1d: e6:55:7e:bd:29:98:37:6b:f1:b6:1b:0f:26:d4:b2:7a:a1:b4: 54:9b:79:6c:eb:de:d8:72:90:9c:22:21:76:12:71:30:9a:31: ef:de:a0:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq/R9TKH7Z/brjeHGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI1MDgwNDE4MDQ1M1oXDTI1MTEwMjE5MDQ1M1owLzEtMCsGA1UEAxMk OTcxZGRlZGItYjVkNS00ZWZmLTk4ZjEtZjdkNDQ4OTRjYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUYtnYt0kR/PZYtEnmwFwob8/uPkCnuSv84Q Mc0dS3grTmj3RmIWZYF6JK7lmOC5xzH4oa2fhc1ddXn351TGK3xqWiV3H7DfXhMD Fna06Nx9OPdx1ao4l8r/maNRlq2pPNfv2c53AokJ7ctyzvRwCFUOZ8Rxxzk74us3 l3TleKRRxEFaAUUGGvkArArdaqfZEPam8PDHO/+VGotauWo2Qeny3EegS8EgalxV X7tD9EoPuJ3peP0wcBig+8NuY3SvMkC4QhFHKMO4z1J7zc/hFNYWcqGLOzKJw4l1 TKSv6ekgT+xXlnjjk5Zsg4V0D0rn1BGKsp/QLmL9mFjO1p0k8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAjUESKuNB+vlw1Gq08rPD7y20pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvOTgzMzFlZWQtNjFkOS0z MTAwLThjMDQtMjQxNzRmMDdkOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxFBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKT88BvghYl2aZtbTDt5UwvK2f5NeSzgIVBrVqsn9bj32mbkU3lM6uH c9lQD4kLIf5+fRylzG5kQLJd5JuYtRxYeEwFpuzYuo5Sko2LOo06nDDPTrSmWWu+ 28N8U6ktN+yJSG8HcmzQbDY/pQbKUA94A651D/bySb1Yr69SNiZq2mqTlVleOxc6 Hb0DmnPmHdHdldEWoldDzgSo7vLlVBQIwTRqPtDklf2RegeR5OrmQMfQwmQgYWSq dpdTydqwoAXoi/GZtIde9FfUOjS6TIOn4DvGDXn+HeZVfr0pmDdr8bYbDybUsnqh tFSbeWzr3thykJwiIXYScTCaMe/eoKY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:53:55 2025 by rpki-client