$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f585be5d-4b82-3039-bcb5-12d932832a7c.roa File: f585be5d-4b82-3039-bcb5-12d932832a7c.roa (raw, json) Hash identifier: XDcrIUvceyt/KS2l0+RgX2qAaPUIeR6ySANZkkFcZDQ= Subject key identifier: 0B:3A:AF:9E:0E:CC:3D:34:77:01:CA:CB:6F:F1:62:08:3A:B8:46:F8 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584ABD4B932FA0CE5AA0966D7920 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f585be5d-4b82-3039-bcb5-12d932832a7c.roa Signing time: Mon 04 Aug 2025 01:00:32 +0000 ROA not before: Mon 04 Aug 2025 01:00:32 +0000 ROA not after: Sun 02 Nov 2025 01:00:32 +0000 asID: 16696 IP address blocks: 161.38.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bd:4b:93:2f:a0:ce:5a:a0:96:6d:79:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 4 01:00:32 2025 GMT Not After : Nov 2 01:00:32 2025 GMT Subject: CN=ce7b9bc3-302b-430d-8497-d64875a92aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2e:ac:2e:4c:1c:be:56:3f:ff:0e:c0:7e:e0: 16:95:67:a8:ce:37:ae:d7:f5:21:eb:d4:08:92:7b: ea:a0:f7:b4:41:e7:e4:f6:f9:8b:5b:37:07:67:03: d9:d1:4b:02:b2:a0:7b:77:0f:89:c3:3f:9d:50:a9: bf:5c:55:c4:65:96:9d:4c:cc:4f:6c:27:f4:68:0a: ba:95:e7:db:ea:a2:99:6e:49:1c:74:cd:08:7b:f0: cb:18:fd:71:66:f2:a4:4b:26:05:dd:a4:b7:f5:d3: c8:d6:9d:a5:b8:9c:0d:0b:d8:af:ad:0c:2b:38:82: c6:3a:1b:fe:7b:cf:a3:83:40:2a:53:ce:0f:8a:31: ac:75:d8:44:53:42:88:aa:9d:4e:d4:c1:74:40:5c: 67:84:db:04:9d:9a:61:2f:80:a0:00:b2:3d:9a:95: ec:1a:90:5d:0a:ff:14:34:d6:7b:d4:bf:87:21:9d: 2a:78:47:d1:9e:c9:1b:5f:5e:28:87:05:13:a4:55: 10:60:46:8f:1e:15:99:e5:ab:a0:ef:68:8e:0c:b3: 33:ea:61:fd:34:c1:ff:73:f8:f9:b6:22:f4:26:66: 11:ea:8f:29:c8:6c:ee:29:f7:29:be:2e:67:0c:88: fc:01:c1:6c:53:bd:22:3f:b4:9a:5d:16:55:92:c9: f0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3A:AF:9E:0E:CC:3D:34:77:01:CA:CB:6F:F1:62:08:3A:B8:46:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/f585be5d-4b82-3039-bcb5-12d932832a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:e6:3e:3b:ca:a7:e3:24:c1:0a:6a:6b:16:96:e8:e1:da:82: 82:f2:ff:0b:d4:fe:72:0d:93:12:ec:40:51:22:9b:3f:da:c5: 92:74:8b:aa:d7:62:70:20:f1:f4:bb:f7:65:38:f4:7b:00:66: e4:f8:1b:1d:08:d5:d3:b6:20:76:85:e5:f7:8c:2f:f2:8f:a0: 62:17:5c:20:1b:57:02:fc:c0:9d:7b:75:71:5a:66:02:be:07: 93:d9:43:35:b3:a1:72:c9:99:b5:09:8a:47:8e:9e:f5:ce:1b: 05:71:98:cc:72:51:87:78:16:7e:e4:47:2a:f1:e1:56:42:85: 9e:53:98:c7:ea:5d:fe:19:1a:94:2d:42:93:d5:46:ea:e3:b4: fd:f0:9d:87:be:9b:c9:58:15:be:61:d5:fe:cf:ac:78:22:f7: dd:72:15:29:e4:32:61:db:15:ee:02:1b:1f:02:79:7c:09:da: cc:99:89:15:d9:ab:a9:95:53:f2:b7:b3:7f:45:cf:81:3e:c5: 00:d8:3d:16:8a:00:cd:09:1a:8c:71:df:53:7f:9d:2b:f3:95: c5:b3:9a:05:4d:76:11:b3:5f:a9:e2:0f:dd:85:a5:44:6f:44: 77:04:1c:5e:17:60:2b:d7:3d:b3:b9:36:09:d0:4a:be:10:6a: ee:8e:5b:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5MvoM5aoJZteSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk Y2U3YjliYzMtMzAyYi00MzBkLTg0OTctZDY0ODc1YTkyYWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy6sLkwcvlY//w7AfuAWlWeozjeu1/Uh69QI knvqoPe0Qefk9vmLWzcHZwPZ0UsCsqB7dw+Jwz+dUKm/XFXEZZadTMxPbCf0aAq6 lefb6qKZbkkcdM0Ie/DLGP1xZvKkSyYF3aS39dPI1p2luJwNC9ivrQwrOILGOhv+ e8+jg0AqU84PijGsddhEU0KIqp1O1MF0QFxnhNsEnZphL4CgALI9mpXsGpBdCv8U NNZ71L+HIZ0qeEfRnskbX14ohwUTpFUQYEaPHhWZ5aug72iODLMz6mH9NMH/c/j5 tiL0JmYR6o8pyGzuKfcpvi5nDIj8AcFsU70iP7SaXRZVksnwzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAs6r54OzD00dwHKy2/xYgg6uEb4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZjU4NWJlNWQtNGI4Mi0z MDM5LWJjYjUtMTJkOTMyODMyYTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoSYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPmPjvKp+MkwQpqaxaW6OHagoLy/wvU/nINkxLsQFEimz/axZJ0i6rX YnAg8fS792U49HsAZuT4Gx0I1dO2IHaF5feML/KPoGIXXCAbVwL8wJ17dXFaZgK+ B5PZQzWzoXLJmbUJikeOnvXOGwVxmMxyUYd4Fn7kRyrx4VZChZ5TmMfqXf4ZGpQt QpPVRurjtP3wnYe+m8lYFb5h1f7PrHgi991yFSnkMmHbFe4CGx8CeXwJ2syZiRXZ q6mVU/K3s39Fz4E+xQDYPRaKAM0JGoxx31N/nSvzlcWzmgVNdhGzX6niD92FpURv RHcEHF4XYCvXPbO5NgnQSr4Qau6OWzc= -----END CERTIFICATE-----Generated at Mon Aug 4 14:44:15 2025 by rpki-client