$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa File: df81f8d2-6da0-3290-b864-c6d6e634429c.roa (raw, json) Hash identifier: GOHcIYNzN//4+WFRSDRHvA+Cb0v8KCZPXhbjRMH7pMA= Subject key identifier: 89:79:61:AC:3A:D2:1D:18:8A:0C:91:FD:99:B0:20:9D:1C:C3:5C:1E Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584ABD4B938F0CF8F874C2E23040 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 16696 IP address blocks: 161.38.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:93:8f:0c:f8:f8:74:c2:e2:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=a1e49294-2bde-4074-b939-b01a534b6568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:77:f4:a9:e0:7f:24:ab:1b:17:3f:df:b3:10: 48:cb:a8:f6:8f:ee:81:47:d8:f3:bc:b4:8b:ca:d9: 99:07:ad:e5:38:de:66:0e:df:97:f2:9d:99:dd:38: c7:7a:0c:31:78:be:47:2d:8d:82:d1:6a:9a:03:ad: 95:3d:21:1f:98:46:d6:49:40:40:10:c4:1e:ea:81: df:7f:e3:de:e9:54:57:40:4f:0f:4b:47:15:1e:d8: e2:e6:bd:7d:60:86:9e:dc:1e:37:97:51:ae:6b:58: 51:20:47:97:f6:74:77:df:f4:b7:a1:62:07:dc:37: b7:1f:41:39:13:9c:2d:a2:cd:95:96:df:a9:df:ad: be:b9:56:ad:a2:7a:47:fa:48:11:cb:96:d7:43:54: 11:86:18:3b:f2:e9:c8:54:97:16:46:db:13:5d:9e: f8:e8:0d:0b:07:70:8c:b2:7b:ca:99:2b:e7:7d:af: 1b:2d:b2:ba:df:5e:de:c6:fb:74:89:31:ac:95:2b: 30:9a:79:8c:79:bd:37:74:a9:d3:73:20:da:ee:25: ad:92:6b:8e:8d:31:fd:a9:bf:be:2a:bb:de:c4:40: e3:c9:35:e2:07:bf:58:ee:31:18:ca:3d:7c:66:81: ed:3d:bd:ec:a1:ff:c9:21:7e:cb:e6:09:f2:84:ea: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:79:61:AC:3A:D2:1D:18:8A:0C:91:FD:99:B0:20:9D:1C:C3:5C:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e3:d1:aa:fe:a2:6e:51:62:a4:8b:bf:30:d5:8a:6a:f4:ef: 83:a1:b8:d7:5a:01:9e:30:7b:f8:93:b0:1c:90:ec:40:08:e3: 55:9c:da:0d:31:af:f3:01:e6:69:63:3b:99:8c:10:3e:fd:c9: 63:35:73:f6:ac:6d:f2:89:9d:26:ef:75:7e:13:54:29:d0:75: 71:de:c2:2e:d8:b0:c8:06:c6:88:3a:ec:9f:0f:7a:38:6a:9d: f0:06:6a:b8:f6:b6:34:e5:ae:f5:47:a0:ac:79:95:e9:b1:9b: 1c:f7:0c:fd:d0:4d:d2:61:eb:d4:17:b0:63:6e:21:39:0e:9d: b7:d7:c7:67:91:ef:3e:e1:9a:5b:c5:98:ae:42:2e:a3:5b:77: 6f:60:e1:fc:72:8d:da:7a:8c:1c:0a:b3:6b:02:a4:96:43:34: 3c:42:a1:bf:85:7c:50:ae:99:43:a3:a7:9f:e0:de:ea:f8:a1: b8:cf:c4:2e:a5:5d:48:df:41:c9:e7:db:d9:68:e9:4a:d3:70: 23:f2:57:9f:39:41:1a:8f:3c:f5:52:d2:09:55:c1:3a:2c:43: fb:ba:ec:11:53:3b:15:02:f2:b4:84:e7:a9:4b:17:2d:dd:5d: f3:cf:52:85:0c:d6:50:55:2a:e1:69:07:1a:1e:9e:d4:35:12: c0:37:3f:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5OPDPj4dMLiMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk YTFlNDkyOTQtMmJkZS00MDc0LWI5MzktYjAxYTUzNGI2NTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnf0qeB/JKsbFz/fsxBIy6j2j+6BR9jzvLSL ytmZB63lON5mDt+X8p2Z3TjHegwxeL5HLY2C0WqaA62VPSEfmEbWSUBAEMQe6oHf f+Pe6VRXQE8PS0cVHtji5r19YIae3B43l1Gua1hRIEeX9nR33/S3oWIH3De3H0E5 E5wtos2Vlt+p362+uVatonpH+kgRy5bXQ1QRhhg78unIVJcWRtsTXZ746A0LB3CM snvKmSvnfa8bLbK6317exvt0iTGslSswmnmMeb03dKnTcyDa7iWtkmuOjTH9qb++ KrvexEDjyTXiB79Y7jEYyj18ZoHtPb3sof/JIX7L5gnyhOrgHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIl5Yaw60h0YigyR/ZmwIJ0cw1weMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZGY4MWY4ZDItNmRhMC0z MjkwLWI4NjQtYzZkNmU2MzQ0MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbj0ar+om5RYqSLvzDVimr074OhuNdaAZ4we/iTsByQ7EAI41Wc2g0x r/MB5mljO5mMED79yWM1c/asbfKJnSbvdX4TVCnQdXHewi7YsMgGxog67J8Pejhq nfAGarj2tjTlrvVHoKx5lemxmxz3DP3QTdJh69QXsGNuITkOnbfXx2eR7z7hmlvF mK5CLqNbd29g4fxyjdp6jBwKs2sCpJZDNDxCob+FfFCumUOjp5/g3ur4objPxC6l XUjfQcnn29lo6UrTcCPyV585QRqPPPVS0glVwTosQ/u67BFTOxUC8rSE56lLFy3d XfPPUoUM1lBVKuFpBxoentQ1EsA3Py8= -----END CERTIFICATE-----Generated at Mon Aug 4 15:04:09 2025 by rpki-client