$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3c82a2e5-4459-326e-a294-8d36bee193c9.roa File: 3c82a2e5-4459-326e-a294-8d36bee193c9.roa (raw, json) Hash identifier: Q8jNlfaKPrIT3JawAWbMnE4j5lco5IW1ibSdN10gDVI= Subject key identifier: 7B:37:97:A9:59:A1:72:8E:B3:84:BA:B7:BB:0B:8A:B7:82:FF:FE:10 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584EE0C2049A2A90E6F1C28F0100 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3c82a2e5-4459-326e-a294-8d36bee193c9.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 399063 IP address blocks: 161.38.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:04:9a:2a:90:e6:f1:c2:8f:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=2bfde565-23a6-4f1d-a825-228563f066d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f1:62:5e:07:b1:df:dd:94:0e:15:bc:6b:e1: b1:8e:e7:09:2c:70:2f:c8:57:70:20:f4:71:3f:c2: 7d:63:e8:5a:68:8a:f5:8a:3a:75:da:38:b4:cd:0f: 31:61:68:17:75:73:ec:1c:b9:d7:ee:9b:0c:e6:33: ec:8d:5d:be:53:8a:61:48:80:84:f9:de:01:f3:0b: 73:27:84:04:57:5c:9d:60:33:e9:92:5b:25:b0:1c: 16:f6:0e:66:42:57:04:39:fe:ad:0f:15:b7:5c:10: af:5f:6e:c9:a9:64:ce:6b:02:4c:b1:46:a8:9f:e0: f3:7f:95:6b:e6:31:b5:50:65:85:0b:33:93:25:28: e5:9d:90:a9:37:89:ce:c9:b7:39:a6:a6:f1:e9:a6: 8b:d0:41:05:51:9d:2f:a8:0d:78:c4:d8:28:9a:bd: 1d:ad:31:c0:b8:7b:60:91:1f:8a:77:fc:40:62:fd: 4e:b3:7a:ff:cf:e2:2c:0b:e7:6d:6c:b3:b0:b1:d3: 10:c8:52:b3:e5:4c:8c:be:7f:ff:83:e0:ee:32:f8: 8f:5b:01:c4:6a:a9:05:f9:b2:cd:05:bf:f9:ea:ed: 9e:7f:90:4d:c6:17:3a:02:e9:e5:a7:cb:36:d8:80: 53:a8:9e:a1:ad:74:63:fc:2f:d7:c2:f9:d2:54:de: 11:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:37:97:A9:59:A1:72:8E:B3:84:BA:B7:BB:0B:8A:B7:82:FF:FE:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3c82a2e5-4459-326e-a294-8d36bee193c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:25:97:38:6e:d2:7c:29:b8:55:f1:97:4e:46:58:fd:9e:20: 5c:81:cc:38:8a:3d:e9:dc:64:7e:f6:21:77:f7:09:ac:db:4d: 04:7c:a4:dd:16:0e:e1:99:fe:d3:c2:6c:ad:ef:f0:93:c5:cd: 8a:0a:a2:85:ff:73:eb:71:13:07:cd:60:7d:98:2a:6f:7e:16: e1:b9:77:d6:e4:93:02:ae:fe:42:1b:fb:38:d3:19:5b:32:a2: 20:23:dc:ad:05:20:18:ac:d9:8e:b1:41:9d:44:7c:b7:1e:72: ff:fd:7a:d4:aa:f1:7d:f0:fe:6e:f6:a7:a3:2f:44:01:e7:39: 80:95:9c:d0:69:1e:5a:02:64:fe:db:5e:a9:c6:13:c1:5d:85: f4:93:f2:ad:cf:2a:2b:97:6a:38:38:61:b1:ea:2b:de:0f:7c: b8:8a:07:82:63:cd:26:58:13:56:6b:bb:c4:eb:2b:59:51:6e: 0c:62:e0:53:a6:5c:8e:d2:f9:c5:98:3c:32:a5:ec:8a:cb:95: 5e:69:66:35:e5:a0:b7:57:7f:db:61:2f:0a:de:f6:d6:8f:e7: b7:c0:98:a4:f1:5b:e4:46:71:41:5b:9b:a6:f4:3c:a9:5d:1f: 12:7d:c9:97:b8:bb:10:17:b7:a0:0b:76:59:c9:d4:8c:01:bd: b4:aa:0d:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgSaKpDm8cKPAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk MmJmZGU1NjUtMjNhNi00ZjFkLWE4MjUtMjI4NTYzZjA2NmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPFiXgex392UDhW8a+GxjucJLHAvyFdwIPRx P8J9Y+haaIr1ijp12ji0zQ8xYWgXdXPsHLnX7psM5jPsjV2+U4phSICE+d4B8wtz J4QEV1ydYDPpklslsBwW9g5mQlcEOf6tDxW3XBCvX27JqWTOawJMsUaon+Dzf5Vr 5jG1UGWFCzOTJSjlnZCpN4nOybc5pqbx6aaL0EEFUZ0vqA14xNgomr0drTHAuHtg kR+Kd/xAYv1Os3r/z+IsC+dtbLOwsdMQyFKz5UyMvn//g+DuMviPWwHEaqkF+bLN Bb/56u2ef5BNxhc6Aunlp8s22IBTqJ6hrXRj/C/XwvnSVN4RTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHs3l6lZoXKOs4S6t7sLireC//4QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvM2M4MmEyZTUtNDQ1OS0z MjZlLWEyOTQtOGQzNmJlZTE5M2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0llzhu0nwpuFXxl05GWP2eIFyBzDiKPencZH72IXf3CazbTQR8pN0W DuGZ/tPCbK3v8JPFzYoKooX/c+txEwfNYH2YKm9+FuG5d9bkkwKu/kIb+zjTGVsy oiAj3K0FIBis2Y6xQZ1EfLcecv/9etSq8X3w/m72p6MvRAHnOYCVnNBpHloCZP7b XqnGE8FdhfST8q3PKiuXajg4YbHqK94PfLiKB4JjzSZYE1Zru8TrK1lRbgxi4FOm XI7S+cWYPDKl7IrLlV5pZjXloLdXf9thLwre9taP57fAmKTxW+RGcUFbm6b0PKld HxJ9yZe4uxAXt6ALdlnJ1IwBvbSqDVg= -----END CERTIFICATE-----Generated at Thu Sep 24 10:17:45 2026 by rpki-client