$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3c82a2e5-4459-326e-a294-8d36bee193c9.roa File: 3c82a2e5-4459-326e-a294-8d36bee193c9.roa (raw, json) Hash identifier: oGLKEaW3Z8NzYJMNENklj5v2jGtAa7NDH+7dz8o1v6Y= Subject key identifier: 86:27:FF:2B:C8:A8:60:40:D0:6B:F4:5C:BF:E8:53:F1:0B:89:B6:BB Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285849DC8FC12ED99AFC2ECE2D9A40 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3c82a2e5-4459-326e-a294-8d36bee193c9.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 399063 IP address blocks: 161.38.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c1:2e:d9:9a:fc:2e:ce:2d:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=4bc52cc3-c08b-4b47-a2d0-aaee60260044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c9:d4:c2:73:0f:0f:3a:b8:83:fa:c1:7e:c5: 18:27:b5:db:2e:f4:f1:9f:4b:87:b7:09:bf:c5:d9: cf:a5:27:3e:54:b3:02:07:43:41:ab:33:00:c0:9a: 0e:60:22:7a:47:f6:1b:cf:cb:45:4a:99:a6:a2:b2: 2b:d4:b5:f4:c2:b6:0b:cd:48:ba:7a:04:ac:1f:ad: bb:a8:c1:7b:2c:ba:34:3e:e2:d5:0f:43:5f:b5:9f: f6:67:45:36:79:75:9c:17:95:d7:5f:dd:23:e2:fc: dd:94:76:dd:dd:34:6d:c2:5c:df:ef:ec:86:1e:e1: 4b:97:fe:c9:28:29:6f:78:6f:11:1c:f9:0c:11:36: 2e:9d:f1:4e:13:99:d6:9f:6a:bc:c0:1a:0a:ba:bd: 3b:d5:ad:e0:b4:79:dc:ca:14:24:c2:c3:92:d9:2c: 4d:bb:09:5b:a1:bf:92:63:a6:78:cf:86:7e:8d:fb: 91:d3:c2:c7:00:d0:4d:58:ef:0d:d0:64:4b:e5:2a: cd:0e:de:33:d3:80:e6:80:cf:0a:44:4a:89:2a:26: c5:18:4b:f1:b0:57:9b:d5:95:e8:e9:c4:25:f5:b7: d4:6b:aa:52:c5:ed:3d:b6:4f:40:85:01:bd:01:3e: 12:26:2b:26:f6:3e:5f:57:d7:72:37:37:ec:e0:dd: e7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:27:FF:2B:C8:A8:60:40:D0:6B:F4:5C:BF:E8:53:F1:0B:89:B6:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3c82a2e5-4459-326e-a294-8d36bee193c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:3f:01:51:9b:7c:64:3a:9d:c0:70:4e:38:d1:58:ec:bf:31: 3f:d4:49:10:ab:c7:29:8a:e3:92:79:0f:05:84:3f:61:5d:5b: f5:09:3f:6b:7d:e8:cc:77:31:48:f7:44:32:47:69:93:78:8f: 43:22:07:b3:c1:6d:97:5d:45:01:82:f6:3e:0b:44:16:93:c2: 27:32:d5:47:76:73:d2:9a:67:63:4b:82:92:2a:a8:bd:43:83: 30:dd:9f:b6:c8:99:76:85:c0:93:20:7f:1e:43:9d:0b:37:0d: 09:6f:3a:df:ff:9f:da:1d:f5:f6:4b:f6:f9:e0:69:8f:11:02: de:f6:19:3f:5b:b8:b8:67:a2:c4:1f:69:cd:07:3f:46:ce:12: 1c:0c:8e:ea:e4:93:7b:ab:13:61:0e:b1:31:38:d1:dc:59:8a: 6d:a4:5a:83:f7:04:d2:d2:d7:b7:85:51:10:8e:4c:b3:ba:de: 9d:59:ac:fd:20:bd:dd:1c:1f:86:97:ea:74:df:e9:61:a2:7f: 48:d9:c3:fa:3e:d3:a1:ce:58:f1:16:c4:86:aa:fb:d1:26:4d: 2f:1b:5b:cb:01:22:74:c1:d1:b5:ac:16:47:63:85:2a:d2:0b: 2c:b3:83:31:cc:a6:50:0e:57:97:14:ff:04:f4:ef:f4:36:ca: cc:81:47:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8Eu2Zr8Ls4tmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk NGJjNTJjYzMtYzA4Yi00YjQ3LWEyZDAtYWFlZTYwMjYwMDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosnUwnMPDzq4g/rBfsUYJ7XbLvTxn0uHtwm/ xdnPpSc+VLMCB0NBqzMAwJoOYCJ6R/Ybz8tFSpmmorIr1LX0wrYLzUi6egSsH627 qMF7LLo0PuLVD0NftZ/2Z0U2eXWcF5XXX90j4vzdlHbd3TRtwlzf7+yGHuFLl/7J KClveG8RHPkMETYunfFOE5nWn2q8wBoKur071a3gtHncyhQkwsOS2SxNuwlbob+S Y6Z4z4Z+jfuR08LHANBNWO8N0GRL5SrNDt4z04DmgM8KREqJKibFGEvxsFeb1ZXo 6cQl9bfUa6pSxe09tk9AhQG9AT4SJism9j5fV9dyNzfs4N3nbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYn/yvIqGBA0Gv0XL/oU/ELiba7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvM2M4MmEyZTUtNDQ1OS0z MjZlLWEyOTQtOGQzNmJlZTE5M2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGo/AVGbfGQ6ncBwTjjRWOy/MT/USRCrxymK45J5DwWEP2FdW/UJP2t9 6Mx3MUj3RDJHaZN4j0MiB7PBbZddRQGC9j4LRBaTwicy1Ud2c9KaZ2NLgpIqqL1D gzDdn7bImXaFwJMgfx5DnQs3DQlvOt//n9od9fZL9vngaY8RAt72GT9buLhnosQf ac0HP0bOEhwMjurkk3urE2EOsTE40dxZim2kWoP3BNLS17eFURCOTLO63p1ZrP0g vd0cH4aX6nTf6WGif0jZw/o+06HOWPEWxIaq+9EmTS8bW8sBInTB0bWsFkdjhSrS CyyzgzHMplAOV5cU/wT07/Q2ysyBR2A= -----END CERTIFICATE-----Generated at Sun Jun 15 17:45:35 2025 by rpki-client