$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa File: 035def30-19a3-3770-96c6-3387b1f7f2e2.roa (raw, json) Hash identifier: jvDvyMlDPdcGUCsvm52AFij5DwpxZeIjO+AFQU7h5Z0= Subject key identifier: 53:5A:B2:84:FB:E4:85:64:CB:3B:E5:56:F7:38:0D:70:94:E3:8D:38 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584ABD4B939C975E2289C651CD90 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 16696 IP address blocks: 161.38.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:93:9c:97:5e:22:89:c6:51:cd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=62a1a60b-58d8-4dc4-814d-dbc6ee878b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:18:46:57:1a:f3:1f:71:2d:b0:2f:0f:69:e8: ae:23:25:01:91:2f:bf:28:4e:1e:36:d9:1e:8f:d5: 91:a2:de:01:49:fa:b3:bf:b0:c4:9c:8e:4e:f8:06: d5:ee:d2:8f:bd:70:82:38:cf:53:fd:29:f8:9d:d8: 77:09:c9:3b:b8:6e:5d:61:2a:2b:5e:11:0d:97:0d: 1e:d3:5c:c2:88:52:f8:16:35:bb:dc:6f:4a:b7:9f: e3:8a:c9:d4:11:3c:cd:86:0e:f0:6a:6e:1f:a9:ae: 6d:66:02:e1:7c:ae:c2:8a:f9:b1:56:98:c4:4e:eb: 1b:57:e9:00:53:a3:d9:50:89:7b:44:7d:e8:d4:51: c2:41:04:11:06:d6:d7:ac:0e:a2:e2:31:80:34:01: 3f:10:c6:73:23:56:d6:b0:c9:27:89:a1:6a:77:bd: 95:4a:38:62:86:99:f6:54:58:bc:ff:0c:db:6b:4a: 23:38:4d:dc:52:e0:45:03:d6:31:46:dc:0a:ad:cf: 6c:e3:65:b8:4a:4d:c4:45:63:70:e1:9c:8a:18:cc: 31:6b:a1:51:0a:1b:e4:c6:ae:94:68:ca:f4:c1:7d: 0c:13:2c:43:6d:7f:9e:8c:19:18:ac:b6:78:41:8c: cb:e8:87:95:6d:a4:73:3f:7b:7b:37:89:f5:f1:af: 49:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:5A:B2:84:FB:E4:85:64:CB:3B:E5:56:F7:38:0D:70:94:E3:8D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:6e:b1:e4:ea:4d:2e:fd:f3:ed:a0:fd:c7:d7:c3:6d:06:ce: 0b:6a:88:9d:3c:74:81:3c:39:8f:a6:9e:8a:29:07:02:da:82: 0f:2f:17:30:63:a6:0f:42:4a:29:84:aa:f9:02:f1:bd:bc:14: 57:96:5f:04:4f:d6:16:d4:84:20:99:7a:b7:18:cc:95:66:6e: a2:4c:8f:36:26:01:fd:67:c6:e5:6b:93:95:c3:c8:58:b6:98: 3f:79:66:67:2c:84:ce:66:fb:f1:6d:ac:76:23:99:5f:23:01: db:ce:9b:82:2f:4c:08:68:cb:ed:0e:8c:c9:35:e0:01:12:50: 8d:cf:df:72:4d:63:bf:53:60:3c:85:09:0a:9b:7d:31:4d:e5: 79:8c:5a:d6:0c:f5:dc:fc:fa:a4:4f:56:f2:46:44:02:01:96: 1e:9f:27:d1:96:f8:1a:91:e3:fb:60:98:7c:07:09:11:0e:cb: e6:47:b7:80:1c:4a:49:b7:a6:bc:09:d2:53:f1:ef:97:1c:fc: 03:73:88:00:02:0a:a8:a3:18:bf:37:e6:83:69:aa:92:af:a2: 79:c5:9a:eb:be:5f:0c:24:5f:7e:43:c6:67:9a:a2:0b:b8:e4: 56:f8:7c:86:c1:7c:d3:f7:3e:34:26:7b:34:d5:49:f0:f6:d6: 7e:72:ab:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5Ocl14iicZRzZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk NjJhMWE2MGItNThkOC00ZGM0LTgxNGQtZGJjNmVlODc4Yjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxhGVxrzH3EtsC8PaeiuIyUBkS+/KE4eNtke j9WRot4BSfqzv7DEnI5O+AbV7tKPvXCCOM9T/Sn4ndh3Cck7uG5dYSorXhENlw0e 01zCiFL4FjW73G9Kt5/jisnUETzNhg7wam4fqa5tZgLhfK7CivmxVpjETusbV+kA U6PZUIl7RH3o1FHCQQQRBtbXrA6i4jGANAE/EMZzI1bWsMkniaFqd72VSjhihpn2 VFi8/wzba0ojOE3cUuBFA9YxRtwKrc9s42W4Sk3ERWNw4ZyKGMwxa6FRChvkxq6U aMr0wX0MEyxDbX+ejBkYrLZ4QYzL6IeVbaRzP3t7N4n18a9JswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNasoT75IVkyzvlVvc4DXCU4404MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDM1ZGVmMzAtMTlhMy0z NzcwLTk2YzYtMzM4N2IxZjdmMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5useTqTS798+2g/cfXw20GzgtqiJ08dIE8OY+mnoopBwLagg8vFzBj pg9CSimEqvkC8b28FFeWXwRP1hbUhCCZercYzJVmbqJMjzYmAf1nxuVrk5XDyFi2 mD95ZmcshM5m+/FtrHYjmV8jAdvOm4IvTAhoy+0OjMk14AESUI3P33JNY79TYDyF CQqbfTFN5XmMWtYM9dz8+qRPVvJGRAIBlh6fJ9GW+BqR4/tgmHwHCREOy+ZHt4Ac Skm3prwJ0lPx75cc/ANziAACCqijGL835oNpqpKvonnFmuu+XwwkX35Dxmeaogu4 5Fb4fIbBfNP3PjQmezTVSfD21n5yq08= -----END CERTIFICATE-----Generated at Wed Aug 6 00:46:08 2025 by rpki-client