$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa File: 2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa (raw, json) Hash identifier: p1+saZNjR4EJd+TYSvHb9u45VOyQOuoJYpM+vrvR4a0= Subject key identifier: 3F:F2:A7:4F:B0:FB:32:09:64:00:28:17:DE:81:1F:98:9E:04:F9:0E Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584EE0C203627932200013F5F000 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 16696 IP address blocks: 161.38.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:03:62:79:32:20:00:13:f5:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=1d40eb85-530e-44e2-909e-2fe54e1e7388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:83:af:f9:a8:d5:4f:bd:9d:34:62:56:28:fd: 5e:ba:e1:59:31:83:4b:4b:33:6a:c9:2d:9d:e2:ac: 92:94:81:33:68:37:6a:83:6a:1a:07:41:6d:88:c2: 65:ee:a7:3e:ee:db:22:81:4c:b5:22:46:7c:f6:74: 94:04:e0:63:b0:a6:34:0d:aa:24:77:e0:d1:05:b4: dd:f8:89:65:97:3b:7e:7b:a6:da:16:e6:7f:d0:a3: 82:f5:6c:9b:31:84:de:5c:bd:27:95:f4:ef:98:e7: 1e:a0:61:8f:88:fa:21:75:8a:99:f9:90:15:ea:8d: 5a:83:97:06:fb:80:9d:69:ee:de:6f:39:d4:a1:8c: df:59:8a:ff:f8:48:aa:c1:db:2d:4c:e5:c7:17:02: be:44:d3:66:b7:a7:f5:bc:3f:b2:d2:fb:06:19:85: 80:ec:45:86:c0:d4:b4:62:1b:de:9e:eb:a9:03:96: 12:33:54:70:15:00:bb:95:9e:7e:5a:dd:58:cc:02: c3:89:64:7c:45:d9:19:d9:40:57:ff:f2:df:ec:10: a4:6e:8b:77:4c:b0:a7:ee:9b:21:6f:f6:46:82:2c: 01:96:ab:76:e4:c7:36:d4:d3:9a:31:8d:61:39:03: de:03:97:c6:7b:8e:4a:c0:4b:65:cf:a2:8d:f0:ca: 77:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F2:A7:4F:B0:FB:32:09:64:00:28:17:DE:81:1F:98:9E:04:F9:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:fe:ae:8d:0e:0d:bb:bc:0c:0e:8e:10:ff:d1:f3:77:5c:42: 53:96:77:b3:35:5f:87:7c:48:8c:7b:45:dc:c7:6f:d7:56:2f: 88:ba:57:41:2a:ad:bc:bc:0b:eb:e3:ca:1c:2e:27:95:d1:b6: ed:f3:43:e5:2e:f1:b7:9b:1d:9f:6c:6c:28:75:8f:53:bc:7a: 42:8c:bf:d6:96:a5:30:87:ec:a6:a7:2a:e6:26:89:2e:3d:ab: 79:d3:f4:99:dd:4f:de:3a:19:39:16:9b:87:20:20:32:32:e5: 06:12:7b:f6:b9:bc:08:e6:38:c4:d1:df:a2:0a:fb:4a:ad:e6: 2d:f7:70:37:a8:af:55:17:1a:c5:cb:c7:40:c7:c8:bc:13:ae: ea:45:4d:36:93:e8:8c:8e:89:a4:a4:a9:0c:fb:e5:d5:1b:ea: 3a:32:49:6d:06:4d:76:55:f3:91:09:79:74:b2:21:21:a8:66: 00:5c:fa:bb:5a:de:13:2b:7f:6b:00:9e:a1:f8:68:63:08:0e: 2f:18:76:ac:cc:49:13:58:c0:5a:46:35:73:d9:2f:e5:15:fb: 50:dc:7b:87:26:51:d2:54:f5:8d:f2:62:9d:6c:48:04:94:15: 10:d6:e5:3d:23:00:0b:2a:ff:aa:7b:a6:85:74:b8:02:eb:b6: 6f:b9:7f:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgNieTIgABP18AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk MWQ0MGViODUtNTMwZS00NGUyLTkwOWUtMmZlNTRlMWU3Mzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4Ov+ajVT72dNGJWKP1euuFZMYNLSzNqyS2d 4qySlIEzaDdqg2oaB0FtiMJl7qc+7tsigUy1IkZ89nSUBOBjsKY0Daokd+DRBbTd +Illlzt+e6baFuZ/0KOC9WybMYTeXL0nlfTvmOceoGGPiPohdYqZ+ZAV6o1ag5cG +4Cdae7ebznUoYzfWYr/+EiqwdstTOXHFwK+RNNmt6f1vD+y0vsGGYWA7EWGwNS0 YhvenuupA5YSM1RwFQC7lZ5+Wt1YzALDiWR8RdkZ2UBX//Lf7BCkbot3TLCn7psh b/ZGgiwBlqt25Mc21NOaMY1hOQPeA5fGe45KwEtlz6KN8Mp3wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/yp0+w+zIJZAAoF96BH5ieBPkOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMmU4ZGYzZDQtMzAyNS0z MzgwLTliMWEtMmM0MjI3NWYwYjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz+ro0ODbu8DA6OEP/R83dcQlOWd7M1X4d8SIx7RdzHb9dWL4i6V0Eq rby8C+vjyhwuJ5XRtu3zQ+Uu8bebHZ9sbCh1j1O8ekKMv9aWpTCH7KanKuYmiS49 q3nT9JndT946GTkWm4cgIDIy5QYSe/a5vAjmOMTR36IK+0qt5i33cDeor1UXGsXL x0DHyLwTrupFTTaT6IyOiaSkqQz75dUb6joySW0GTXZV85EJeXSyISGoZgBc+rta 3hMrf2sAnqH4aGMIDi8YdqzMSRNYwFpGNXPZL+UV+1Dce4cmUdJU9Y3yYp1sSASU FRDW5T0jAAsq/6p7poV0uALrtm+5f7A= -----END CERTIFICATE-----Generated at Thu Sep 24 23:04:37 2026 by rpki-client