$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/401e223a-6c91-3726-99ac-b9bf7fee24f8.roa File: 401e223a-6c91-3726-99ac-b9bf7fee24f8.roa (raw, json) Hash identifier: jNx7AfA2IyKP36SXCo+Fft5P9+5niOfhLomKe3RcoXU= Subject key identifier: 72:3F:E1:47:1B:4D:1A:5E:C3:AE:5D:AD:1D:A3:5C:50:11:8A:A7:A1 Certificate issuer: /CN=38e671ad-3e19-48ff-801c-f18f3c194278 Certificate serial: 010D0C9F4328584D5F7FB2FAA932284FBC8EBF80 Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/401e223a-6c91-3726-99ac-b9bf7fee24f8.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 63023 IP address blocks: 167.17.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:b2:fa:a9:32:28:4f:bc:8e:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278 Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=41864d2c-8238-4e08-9527-3f72d4f4cdab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ec:7b:31:4b:bd:54:f8:28:e9:be:55:26:24: 27:b5:82:65:2c:03:fd:bc:e0:74:9f:4c:a2:3d:30: 04:83:15:f1:dc:bc:57:14:3f:fc:07:b1:95:07:60: 6e:11:b5:82:85:72:c0:e1:a0:35:a7:32:81:12:e4: 0e:3f:a4:82:a8:ec:68:b9:14:69:e0:37:af:f9:4e: 63:54:b9:6d:b8:ff:88:b2:b7:f6:df:3a:22:85:e7: 3d:95:4b:44:43:07:c0:32:e8:38:8e:bf:e1:3b:fc: 7e:75:dd:30:3d:5d:71:3c:3c:19:97:c2:5a:95:27: bb:b9:31:a5:ce:81:35:8a:75:1b:a2:68:1f:68:4f: 05:db:d6:e5:11:60:0c:dc:84:6b:13:75:aa:09:85: 0c:79:13:d8:25:8e:ab:c2:b9:96:c3:02:36:fb:c0: 14:32:58:4e:4b:39:04:46:c1:b4:9d:13:87:39:17: 1f:eb:ba:ce:f0:cc:43:54:3d:02:64:e1:69:ab:d7: 67:80:72:3a:df:76:c7:7c:de:77:07:eb:ab:9d:37: 21:db:5c:9c:b8:1c:33:b9:5b:f5:d9:ea:2c:84:54: 59:ea:b5:fa:f4:5d:8b:ed:1d:55:b3:11:d8:fc:a9: e4:48:65:08:bc:64:c1:38:10:82:4e:ec:9a:f3:be: a3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3F:E1:47:1B:4D:1A:5E:C3:AE:5D:AD:1D:A3:5C:50:11:8A:A7:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/401e223a-6c91-3726-99ac-b9bf7fee24f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl X509v3 Authority Key Identifier: keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer sbgp-ipAddrBlock: critical IPv4: 167.17.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:c9:21:cf:63:32:4c:44:d3:84:e7:18:7f:cd:0b:fb:fb:a9: 27:a7:ef:1f:2d:b0:f3:de:46:bf:7b:8a:f9:06:0e:5a:fd:94: 0d:2b:70:ce:30:49:6c:2a:72:b0:21:dd:5c:9b:ec:41:ae:04: 5c:7a:69:c7:6e:ef:90:2a:76:de:25:a9:a3:a4:9e:2f:f3:19: 40:52:79:cb:77:8f:cc:9b:50:93:6b:cb:ae:0d:6b:e0:95:4f: 6f:c5:00:08:98:3c:71:c8:62:87:0a:41:4c:de:4d:51:d2:42: 0d:f8:c6:85:2f:d5:4e:e9:50:ef:2d:8b:77:13:71:97:e5:80: c7:3c:60:e5:99:d1:3a:16:6f:3d:f8:45:c4:61:b3:f9:d1:9d: fe:89:0d:14:69:2c:8c:42:af:34:ec:b7:38:fb:af:1e:8f:5f: e6:47:d1:22:3e:55:b9:2b:05:27:d2:c9:bc:cb:df:74:b8:05: a4:84:3f:c3:3f:3b:9c:8c:8b:cb:c4:c1:40:37:75:cc:1f:2f: 6e:65:9d:36:3d:56:aa:93:7d:ae:a5:ee:ad:6f:3d:ef:6d:b1: 45:a0:9c:9d:26:9c:b4:02:31:51:2d:1b:03:c2:19:eb:0f:ce: a5:da:a9:98:3b:b2:fc:0d:1e:5f:c6:1f:9f:b9:f1:ed:29:64: 79:95:b3:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ff7L6qTIoT7yOv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNjcxYWQtM2UxOS00OGZmLTgwMWMtZjE4ZjNjMTk0 Mjc4MB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk NDE4NjRkMmMtODIzOC00ZTA4LTk1MjctM2Y3MmQ0ZjRjZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOx7MUu9VPgo6b5VJiQntYJlLAP9vOB0n0yi PTAEgxXx3LxXFD/8B7GVB2BuEbWChXLA4aA1pzKBEuQOP6SCqOxouRRp4Dev+U5j VLltuP+Isrf23zoihec9lUtEQwfAMug4jr/hO/x+dd0wPV1xPDwZl8JalSe7uTGl zoE1inUbomgfaE8F29blEWAM3IRrE3WqCYUMeRPYJY6rwrmWwwI2+8AUMlhOSzkE RsG0nROHORcf67rO8MxDVD0CZOFpq9dngHI633bHfN53B+urnTch21ycuBwzuVv1 2eoshFRZ6rX69F2L7R1VsxHY/KnkSGUIvGTBOBCCTuya876jBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHI/4UcbTRpew65drR2jXFARiqehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2 NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThmM2MxOTQyNzgvNDAxZTIyM2EtNmM5MS0z NzI2LTk5YWMtYjliZjdmZWUyNGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhlNjcxYWQtM2UxOS00OGZmLTgw MWMtZjE4ZjNjMTk0Mjc4LzM4ZTY3MWFkLTNlMTktNDhmZi04MDFjLWYxOGYzYzE5 NDI3OC5jcmwwHwYDVR0jBBgwFoAU0c/1zkbBlqJdyuADKGIFCAjz7BAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGU2NzFhZC0zZTE5LTQ4ZmYtODAxYy1mMThm M2MxOTQyNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALbJIc9jMkxE04TnGH/NC/v7qSen7x8tsPPeRr97ivkGDlr9lA0rcM4w SWwqcrAh3Vyb7EGuBFx6acdu75Aqdt4lqaOkni/zGUBSect3j8ybUJNry64Na+CV T2/FAAiYPHHIYocKQUzeTVHSQg34xoUv1U7pUO8ti3cTcZflgMc8YOWZ0ToWbz34 RcRhs/nRnf6JDRRpLIxCrzTstzj7rx6PX+ZH0SI+VbkrBSfSybzL33S4BaSEP8M/ O5yMi8vEwUA3dcwfL25lnTY9VqqTfa6l7q1vPe9tsUWgnJ0mnLQCMVEtGwPCGesP zqXaqZg7svwNHl/GH5+58e0pZHmVs+g= -----END CERTIFICATE-----Generated at Fri Apr 17 20:05:23 2026 by rpki-client