$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa File: 035def30-19a3-3770-96c6-3387b1f7f2e2.roa (raw, json) Hash identifier: PF+/cVXvpEMAUH+64bvVTn9A9AJ4pPGuNqIjvf1Sh5I= Subject key identifier: 11:C0:C7:D7:51:34:A4:E8:1F:14:07:04:13:4A:9E:63:FF:A5:F0:CB Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285849DC8FBFEDE64A0CA6AA01F990 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 16696 IP address blocks: 161.38.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:bf:ed:e6:4a:0c:a6:aa:01:f9:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=28a36c63-de0a-4fc1-8d83-0a2054e8ef76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:01:51:81:df:38:ec:c4:13:4f:43:8e:ee: 53:62:4d:0a:7b:c5:db:73:d8:b6:2f:6b:5f:42:2c: b6:70:f0:28:5d:aa:70:ac:ec:32:92:f7:cc:0d:a9: 37:1b:79:a4:99:12:dc:63:09:f2:88:17:a5:49:36: a4:cd:90:79:71:a8:ab:4b:a3:b1:cc:43:cf:49:68: 4a:49:4b:6e:8b:dd:be:07:f6:44:bb:8f:6b:a8:36: c2:15:15:f9:7d:4a:de:37:ee:14:04:0b:c2:24:66: 70:43:73:0c:2d:26:93:b8:e6:0f:0d:f1:51:cf:02: f7:b8:97:ea:63:5b:7c:5f:54:38:04:51:f6:d0:76: bd:35:f2:a9:05:b9:9a:6a:fc:d3:45:3f:53:4f:3b: d0:50:b7:cd:fd:ac:ae:ca:f9:b1:d9:b5:72:02:af: 31:29:6c:bf:00:a8:70:62:4c:1e:1b:50:7f:54:bd: 7d:67:33:07:7c:df:4e:98:ea:f0:19:fe:fd:d3:c6: 88:44:f5:38:39:dd:b3:ce:7d:b7:6f:78:b7:17:d7: 0c:33:22:38:c1:48:28:7a:e2:fc:77:6d:f0:2d:10: 21:bd:b3:95:a5:c8:0f:a5:d0:f8:26:d5:11:e5:10: ac:a6:97:b0:3b:be:5a:2a:89:17:d8:78:c0:20:22: 7a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C0:C7:D7:51:34:A4:E8:1F:14:07:04:13:4A:9E:63:FF:A5:F0:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:69:33:8c:45:b9:9c:a1:ba:b6:6e:7e:85:83:c6:9d:7e:52: aa:45:f1:99:3e:bd:42:f9:0c:9c:4c:17:6f:dd:da:09:4b:ef: a6:a6:af:79:50:14:cc:e6:5c:43:ea:83:97:a7:96:51:72:96: cf:8c:30:73:b9:e1:94:93:07:f3:43:b1:72:13:4b:9a:62:7f: cf:17:60:18:92:15:93:27:88:09:e8:36:bf:24:62:2b:b5:ce: c9:3a:76:da:cc:b4:e4:ec:58:7c:65:5f:26:44:f8:59:28:77: cf:c1:1f:48:a9:41:3c:d5:c2:fd:ee:95:c1:3f:05:56:2d:6b: 0c:4a:57:05:7b:d3:2c:09:40:10:d3:ef:2c:16:6b:0f:6d:85: 12:9d:e0:b4:b1:47:65:98:0b:43:73:3f:fe:17:60:e9:11:84: a5:41:d4:42:a1:53:54:c7:3b:4e:21:90:19:28:68:c0:35:61: 16:21:6b:c0:6b:14:05:89:46:ce:16:5a:10:7c:3b:ca:90:b9: e1:fd:e7:f8:54:e4:a7:d8:bc:fc:2a:4e:c9:5c:9d:e1:c9:7a: 46:27:14:ac:d1:d8:4c:b4:69:c9:12:cd:2f:ef:7c:c2:59:9d: b4:d4:51:d0:37:c9:50:a2:55:d5:fa:d8:78:c9:b7:ac:b9:e7: 3e:44:1f:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7/t5koMpqoB+ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk MjhhMzZjNjMtZGUwYS00ZmMxLThkODMtMGEyMDU0ZThlZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbABUYHfOOzEE09Dju5TYk0Ke8Xbc9i2L2tf Qiy2cPAoXapwrOwykvfMDak3G3mkmRLcYwnyiBelSTakzZB5cairS6OxzEPPSWhK SUtui92+B/ZEu49rqDbCFRX5fUreN+4UBAvCJGZwQ3MMLSaTuOYPDfFRzwL3uJfq Y1t8X1Q4BFH20Ha9NfKpBbmaavzTRT9TTzvQULfN/ayuyvmx2bVyAq8xKWy/AKhw YkweG1B/VL19ZzMHfN9OmOrwGf7908aIRPU4Od2zzn23b3i3F9cMMyI4wUgoeuL8 d23wLRAhvbOVpcgPpdD4JtUR5RCsppewO75aKokX2HjAICJ6kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHAx9dRNKToHxQHBBNKnmP/pfDLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDM1ZGVmMzAtMTlhMy0z NzcwLTk2YzYtMzM4N2IxZjdmMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5pM4xFuZyhurZufoWDxp1+UqpF8Zk+vUL5DJxMF2/d2glL76amr3lQ FMzmXEPqg5enllFyls+MMHO54ZSTB/NDsXITS5pif88XYBiSFZMniAnoNr8kYiu1 zsk6dtrMtOTsWHxlXyZE+Fkod8/BH0ipQTzVwv3ulcE/BVYtawxKVwV70ywJQBDT 7ywWaw9thRKd4LSxR2WYC0NzP/4XYOkRhKVB1EKhU1THO04hkBkoaMA1YRYha8Br FAWJRs4WWhB8O8qQueH95/hU5KfYvPwqTslcneHJekYnFKzR2Ey0ackSzS/vfMJZ nbTUUdA3yVCiVdX62HjJt6y55z5EH/w= -----END CERTIFICATE-----Generated at Sun Jun 15 17:41:56 2025 by rpki-client