$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa File: 2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa (raw, json) Hash identifier: mNukA3WcRcs0mt/X9Iero43ho+xAFEI2GocOiL/ddXI= Subject key identifier: 5B:5C:9A:A5:4A:E7:1A:F2:18:2F:0B:95:68:30:90:B5:77:82:21:07 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584ABD4B93561F028248A08D0DE0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 16696 IP address blocks: 161.38.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:93:56:1f:02:82:48:a0:8d:0d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=86fd4640-8ee7-43ab-b592-c928ec5754d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:25:bb:dd:79:b5:a5:32:ea:a6:fc:70:d1:77: 8d:04:5e:96:c2:ab:83:4c:4f:97:42:15:d5:54:3e: fc:e8:bf:20:2d:83:ea:da:f0:fd:74:5d:b7:1b:d2: 6c:1d:d7:44:9a:2c:77:b8:4a:ea:fc:c5:a2:a9:37: 84:1e:29:8a:6e:9a:c5:9c:f8:1b:85:d8:71:48:f5: f4:2b:36:51:d6:fd:1d:33:81:18:23:99:db:72:9a: cb:6b:fd:19:c5:9b:ce:bf:b5:1f:1e:e1:98:f9:9c: 71:37:0d:2a:3f:4a:c1:66:7f:ad:22:8b:99:b0:a5: 57:b6:be:86:6e:67:9a:18:b9:40:df:7c:21:1d:1c: 59:82:e7:11:37:7e:9d:bc:48:0c:33:35:82:11:34: 20:43:0e:12:9e:48:ce:b5:6d:c4:99:47:3e:a7:37: fa:28:ad:38:ac:76:26:76:fd:c3:b5:25:51:19:3a: 02:93:f7:dc:08:a1:fe:b9:ed:f8:c0:87:27:cd:4a: fd:83:14:d4:96:f6:ed:c5:1e:04:52:c6:e4:a6:2f: cc:19:f2:0d:c8:35:dc:64:f3:7e:b6:c3:ca:31:b8: ad:c6:eb:84:d7:09:21:d0:e9:f7:e6:66:65:a2:44: 8e:23:d6:bb:76:45:a0:ee:70:13:a0:ca:95:4e:89: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5C:9A:A5:4A:E7:1A:F2:18:2F:0B:95:68:30:90:B5:77:82:21:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:7a:14:5f:3f:e0:29:e4:83:99:6d:c1:b2:58:25:f9:c7:6e: 6b:2d:a9:93:8b:ca:73:fc:b6:2b:21:4a:fd:41:c4:66:be:a2: 00:6b:c0:af:d6:ce:56:6c:e7:f7:a1:3d:e5:43:47:8c:00:19: 34:a1:f8:45:05:8f:8a:a6:42:6f:b5:17:5f:4f:83:f6:7d:98: 1d:d0:3c:fd:9f:58:09:80:e1:3d:f8:ff:44:71:c4:f5:62:3f: 21:94:ae:59:6d:12:87:a1:56:1e:7b:8c:50:88:b7:86:c4:06: aa:35:e7:1f:85:fb:12:57:f1:cc:2d:4a:68:f4:6f:bb:0b:c1: 85:1c:5f:00:f2:74:bb:f7:65:f4:7f:6f:99:d9:ed:8b:9f:8b: 23:3a:e8:f1:67:74:21:a1:ad:c9:8f:0e:e3:c6:bb:2c:d3:d3: 0f:60:66:8e:84:0a:e2:e1:86:2d:d8:43:d7:6e:5d:e7:ab:b8: 60:35:c2:54:ad:52:5e:d7:4d:bb:c2:9b:8a:6a:06:88:58:b6: 6c:b3:3c:3d:d6:7e:fd:68:cb:63:8d:ff:92:37:2a:c1:18:4e: 35:b6:a8:0d:8b:4e:e0:35:a4:e1:39:ea:fb:08:9f:6a:0f:a9: 15:68:fb:98:c2:a6:ca:3a:02:ae:4c:76:36:7f:43:ad:cb:ff: 1b:b4:1c:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5NWHwKCSKCNDeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk ODZmZDQ2NDAtOGVlNy00M2FiLWI1OTItYzkyOGVjNTc1NGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSW73Xm1pTLqpvxw0XeNBF6WwquDTE+XQhXV VD786L8gLYPq2vD9dF23G9JsHddEmix3uErq/MWiqTeEHimKbprFnPgbhdhxSPX0 KzZR1v0dM4EYI5nbcprLa/0ZxZvOv7UfHuGY+ZxxNw0qP0rBZn+tIouZsKVXtr6G bmeaGLlA33whHRxZgucRN36dvEgMMzWCETQgQw4SnkjOtW3EmUc+pzf6KK04rHYm dv3DtSVRGToCk/fcCKH+ue34wIcnzUr9gxTUlvbtxR4EUsbkpi/MGfINyDXcZPN+ tsPKMbitxuuE1wkh0On35mZlokSOI9a7dkWg7nAToMqVTol6xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtcmqVK5xryGC8LlWgwkLV3giEHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMmU4ZGYzZDQtMzAyNS0z MzgwLTliMWEtMmM0MjI3NWYwYjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH56FF8/4Cnkg5ltwbJYJfnHbmstqZOLynP8tishSv1BxGa+ogBrwK/W zlZs5/ehPeVDR4wAGTSh+EUFj4qmQm+1F19Pg/Z9mB3QPP2fWAmA4T34/0RxxPVi PyGUrlltEoehVh57jFCIt4bEBqo15x+F+xJX8cwtSmj0b7sLwYUcXwDydLv3ZfR/ b5nZ7YufiyM66PFndCGhrcmPDuPGuyzT0w9gZo6ECuLhhi3YQ9duXeeruGA1wlSt Ul7XTbvCm4pqBohYtmyzPD3Wfv1oy2ON/5I3KsEYTjW2qA2LTuA1pOE56vsIn2oP qRVo+5jCpso6Aq5MdjZ/Q63L/xu0HIo= -----END CERTIFICATE-----Generated at Mon Aug 4 15:36:25 2025 by rpki-client