$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/b9154c64-f4c1-3931-a133-76d53b82db91.roa File: b9154c64-f4c1-3931-a133-76d53b82db91.roa (raw, json) Hash identifier: yeq9bNK1ElWjMe2z5CFj6DIlqCdAoDnSVD+aa6sUaSc= Subject key identifier: 9E:9F:61:08:7E:16:3C:C9:69:33:F3:E4:C2:66:EC:B3:1E:7D:2C:74 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584ABF47ABCD3F5A8C77B35F8F80 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/b9154c64-f4c1-3931-a133-76d53b82db91.roa Signing time: Mon 04 Aug 2025 18:04:34 +0000 ROA not before: Mon 04 Aug 2025 18:04:34 +0000 ROA not after: Sun 02 Nov 2025 19:04:34 +0000 asID: 63023 IP address blocks: 167.17.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bf:47:ab:cd:3f:5a:8c:77:b3:5f:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Aug 4 18:04:34 2025 GMT Not After : Nov 2 19:04:34 2025 GMT Subject: CN=22b3d84d-b99c-4b13-b127-0ecebcf94882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:87:73:13:7a:ad:f8:27:18:cb:aa:62:18: e7:97:ef:3d:49:d2:01:fa:ae:65:f3:6c:fe:f7:93: 3c:f3:18:98:16:e9:5e:b3:09:d1:a6:69:c7:49:2f: 60:2e:2c:8b:ee:ef:19:3f:e4:e9:1b:bd:10:e0:08: f3:e3:1a:7c:df:4f:f4:5b:c2:11:17:de:53:9f:a7: 9a:82:02:67:0e:aa:46:2d:80:c0:9f:05:e7:e8:56: a9:96:27:21:a0:03:23:5a:4f:c6:4c:ee:09:d7:d8: ff:b7:3a:4d:8b:f7:fb:24:d0:14:57:1c:c3:73:fe: 68:93:08:80:80:98:63:da:86:37:54:8b:26:ea:31: 24:77:25:8f:b0:55:02:6a:e6:53:c6:98:b4:d8:08: 0c:2c:5f:65:53:a5:e6:7c:d4:e8:fb:d9:d0:60:df: 81:cc:21:57:87:ca:a3:41:3c:7c:eb:de:ba:c3:a7: b8:09:6c:9a:1c:a4:a1:3f:70:ef:cd:7c:d1:5f:37: 2a:ca:05:67:8f:2c:e4:4a:c9:2a:23:f3:5e:23:ab: 42:ef:e1:8c:d2:90:f0:3e:58:9c:72:72:fb:80:81: 5a:05:4e:8d:9f:fc:75:86:e0:83:2b:d4:a9:b7:63: f2:44:f0:19:5c:46:8a:77:6b:9c:70:df:b0:80:78: 3b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:9F:61:08:7E:16:3C:C9:69:33:F3:E4:C2:66:EC:B3:1E:7D:2C:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/b9154c64-f4c1-3931-a133-76d53b82db91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 167.17.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:5a:d2:44:6c:b0:31:34:ff:b3:1a:e8:74:dc:0f:e2:49:88: fd:b4:48:75:88:9a:85:39:20:ed:da:bc:d4:fb:64:1e:de:86: 67:e2:cd:46:78:b2:ba:0f:2f:dd:d2:f6:cf:8c:71:a1:18:e8: 16:52:3f:f2:40:20:0a:03:2b:ef:ca:6a:85:ee:2d:c6:a9:b6: f3:3e:e3:b0:52:75:34:bb:72:ba:30:c0:21:57:21:5b:cd:87: 20:20:a1:fa:bc:f4:b3:1e:43:05:86:fe:fb:96:7f:5a:a4:8e: 66:1f:c7:31:2a:ac:f1:6a:b4:e0:1b:4c:e7:0f:d1:70:e6:a1: 91:5a:cd:7d:50:ff:d5:f7:aa:23:c0:e6:67:62:83:c6:a5:73: 5e:39:32:85:47:4c:3e:f9:bb:b7:02:8d:ef:7a:b4:39:c5:4b: 40:33:86:c8:bd:6d:40:5c:93:37:6a:a7:7a:b1:e6:8a:ee:36: 4c:02:e7:0f:92:0d:c4:24:0c:f4:6f:cf:57:f9:4a:c2:03:f1: 6b:10:30:ab:75:2d:3f:68:0d:ac:60:30:f6:7d:5e:92:19:4f: 31:f3:da:50:6f:87:51:08:aa:43:a4:a4:5e:25:b2:4e:b4:ed: 02:cd:26:6b:cc:71:0b:25:71:89:2d:47:e7:0d:cf:5f:94:a6: 66:d7:aa:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq/R6vNP1qMd7Nfj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI1MDgwNDE4MDQzNFoXDTI1MTEwMjE5MDQzNFowLzEtMCsGA1UEAxMk MjJiM2Q4NGQtYjk5Yy00YjEzLWIxMjctMGVjZWJjZjk0ODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IaHcxN6rfgnGMuqYhjnl+89SdIB+q5l82z+ 95M88xiYFuleswnRpmnHSS9gLiyL7u8ZP+TpG70Q4Ajz4xp830/0W8IRF95Tn6ea ggJnDqpGLYDAnwXn6FaplichoAMjWk/GTO4J19j/tzpNi/f7JNAUVxzDc/5okwiA gJhj2oY3VIsm6jEkdyWPsFUCauZTxpi02AgMLF9lU6XmfNTo+9nQYN+BzCFXh8qj QTx86966w6e4CWyaHKShP3DvzXzRXzcqygVnjyzkSskqI/NeI6tC7+GM0pDwPlic cnL7gIFaBU6Nn/x1huCDK9Spt2PyRPAZXEaKd2uccN+wgHg7JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6fYQh+FjzJaTPz5MJm7LMefSx0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvYjkxNTRjNjQtZjRjMS0z OTMxLWExMzMtNzZkNTNiODJkYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9a0kRssDE0/7Ma6HTcD+JJiP20SHWImoU5IO3avNT7ZB7ehmfizUZ4 sroPL93S9s+McaEY6BZSP/JAIAoDK+/KaoXuLcaptvM+47BSdTS7crowwCFXIVvN hyAgofq89LMeQwWG/vuWf1qkjmYfxzEqrPFqtOAbTOcP0XDmoZFazX1Q/9X3qiPA 5mdig8alc145MoVHTD75u7cCje96tDnFS0Azhsi9bUBckzdqp3qx5oruNkwC5w+S DcQkDPRvz1f5SsID8WsQMKt1LT9oDaxgMPZ9XpIZTzHz2lBvh1EIqkOkpF4lsk60 7QLNJmvMcQslcYktR+cNz1+UpmbXqu4= -----END CERTIFICATE-----Generated at Sat Aug 23 15:55:54 2025 by rpki-client