$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/98331eed-61d9-3100-8c04-24174f07d905.roa File: 98331eed-61d9-3100-8c04-24174f07d905.roa (raw, json) Hash identifier: SG9nGG/hq5szOi/jfhHkHmc6of5Nifa+yL7clz9F4nI= Subject key identifier: D6:9B:76:2B:4E:DA:0F:54:BF:6A:AA:ED:5B:06:EC:C8:42:C5:FA:F2 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584E3FC47019EEF06DA2A5896000 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/98331eed-61d9-3100-8c04-24174f07d905.roa Signing time: Sun 21 Jun 2026 21:00:12 +0000 ROA not before: Sun 21 Jun 2026 21:00:12 +0000 ROA not after: Sat 19 Sep 2026 21:00:12 +0000 asID: 63023 IP address blocks: 167.17.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3f:c4:70:19:ee:f0:6d:a2:a5:89:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Jun 21 21:00:12 2026 GMT Not After : Sep 19 21:00:12 2026 GMT Subject: CN=08bc4ae3-5380-45c9-bd64-c6637968dc8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bb:60:74:5b:e9:d2:1a:86:c3:ed:70:f2:cb: 7c:65:ac:17:94:85:1c:14:ce:98:a8:a3:84:e5:50: 7c:fc:3b:8e:58:42:5e:af:34:b1:ed:60:b3:c7:0b: 74:d6:31:c7:15:5c:9d:1e:b1:de:2e:8b:0a:af:8e: a9:96:09:a0:35:7e:68:e4:ff:27:9e:95:40:33:15: bf:4a:73:68:84:ad:c1:2f:f9:73:4c:b2:d1:27:c7: b8:81:44:48:80:03:e0:ff:2f:5f:ab:27:1a:6a:a8: c1:d2:6b:a8:ab:d8:61:eb:0f:37:0d:83:eb:cb:7a: 13:4e:88:09:d9:c8:af:a0:ea:5a:54:7f:7e:a2:74: 1d:7e:97:c4:20:1f:cc:58:c6:df:69:2c:0d:e4:ac: 12:f8:fd:1f:fb:dd:9c:b1:3a:0e:00:73:f1:69:f8: e1:76:f1:b4:45:3e:50:bf:ca:6b:61:f1:db:cd:35: 57:c7:6a:1c:a3:b2:b4:fc:6b:72:23:c0:0d:f3:e6: 4f:49:55:a5:ca:64:90:4d:aa:2f:d7:f9:85:ef:5e: c9:e7:25:87:59:e2:1d:bf:78:01:d2:ce:8f:e5:74: a6:d7:04:a2:be:c4:43:02:75:5c:74:30:31:48:67: 83:2e:f6:b7:62:ce:67:1a:1a:c7:48:ba:d7:58:9c: 10:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:9B:76:2B:4E:DA:0F:54:BF:6A:AA:ED:5B:06:EC:C8:42:C5:FA:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/98331eed-61d9-3100-8c04-24174f07d905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 167.17.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:5d:d9:d0:2c:ed:4a:7d:26:69:a4:fd:bf:61:de:81:06:1e: a2:12:fa:19:f3:3d:c4:7a:ac:77:0d:a5:9a:b8:8c:8e:75:00: 3e:6f:f5:29:1d:a7:e9:2f:47:b6:88:78:65:25:62:18:39:40: 06:81:80:37:fa:6b:eb:e0:25:01:db:9d:0c:88:73:b8:5e:53: 2b:6a:1f:67:a4:20:88:9d:90:44:5f:71:77:54:82:b6:92:d5: 56:9f:29:8a:96:4e:48:82:72:50:cb:c3:61:01:5b:91:d3:89: d8:c6:59:f9:be:56:8c:76:db:f3:4c:47:c5:48:8b:2a:0e:04: 48:78:63:22:d5:c4:83:18:ad:e7:14:2b:26:c7:a8:fd:84:ae: 1f:db:62:51:13:c7:6c:d9:e7:b2:22:a2:41:1c:ef:dc:61:a6: fb:a3:bb:f9:67:81:0e:81:57:a1:53:5a:49:37:09:3a:46:f8: 6a:81:7f:c8:fa:69:bf:06:d1:3d:9c:a0:cb:1a:89:7a:c3:45: 53:64:33:f3:75:cd:55:e9:66:8f:cf:34:d4:fd:15:13:51:e9: 46:c2:29:9f:5d:37:db:e3:5f:26:94:77:41:37:43:27:79:da: fe:48:e9:a2:6b:92:f2:bb:25:56:e6:10:93:ef:4f:29:0d:7b: a8:eb:90:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4/xHAZ7vBtoqWJYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk MDhiYzRhZTMtNTM4MC00NWM5LWJkNjQtYzY2Mzc5NjhkYzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5btgdFvp0hqGw+1w8st8ZawXlIUcFM6YqKOE 5VB8/DuOWEJerzSx7WCzxwt01jHHFVydHrHeLosKr46plgmgNX5o5P8nnpVAMxW/ SnNohK3BL/lzTLLRJ8e4gURIgAPg/y9fqycaaqjB0muoq9hh6w83DYPry3oTTogJ 2civoOpaVH9+onQdfpfEIB/MWMbfaSwN5KwS+P0f+92csToOAHPxafjhdvG0RT5Q v8prYfHbzTVXx2oco7K0/GtyI8AN8+ZPSVWlymSQTaov1/mF717J5yWHWeIdv3gB 0s6P5XSm1wSivsRDAnVcdDAxSGeDLva3Ys5nGhrHSLrXWJwQUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNabditO2g9Uv2qq7VsG7MhCxfryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvOTgzMzFlZWQtNjFkOS0z MTAwLThjMDQtMjQxNzRmMDdkOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxFBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFd2dAs7Up9Jmmk/b9h3oEGHqIS+hnzPcR6rHcNpZq4jI51AD5v9Skd p+kvR7aIeGUlYhg5QAaBgDf6a+vgJQHbnQyIc7heUytqH2ekIIidkERfcXdUgraS 1VafKYqWTkiCclDLw2EBW5HTidjGWfm+Vox22/NMR8VIiyoOBEh4YyLVxIMYrecU KybHqP2Erh/bYlETx2zZ57IiokEc79xhpvuju/lngQ6BV6FTWkk3CTpG+GqBf8j6 ab8G0T2coMsaiXrDRVNkM/N1zVXpZo/PNNT9FRNR6UbCKZ9dN9vjXyaUd0E3Qyd5 2v5I6aJrkvK7JVbmEJPvTykNe6jrkFA= -----END CERTIFICATE-----Generated at Fri Jul 24 20:24:31 2026 by rpki-client