$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff19e3ea-96bb-3d31-86a9-e712cd2c37f6.roa File: ff19e3ea-96bb-3d31-86a9-e712cd2c37f6.roa (raw, json) Hash identifier: QMl63NLiqlMEp5HIr9vmcpObJi5HzEeGVhRbvWyPl4A= Subject key identifier: 77:A6:4C:90:CD:BB:1F:B1:49:87:88:00:76:9F:3B:CD:99:3B:EE:58 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285849DC8FBFA0F29C54CB7EF09340 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff19e3ea-96bb-3d31-86a9-e712cd2c37f6.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 16696 IP address blocks: 161.38.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:bf:a0:f2:9c:54:cb:7e:f0:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=b16456ce-aeeb-4be6-8b45-548570b4f5b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bb:41:62:0a:52:ae:1e:45:92:32:83:d9:f1: 09:6e:73:1a:66:18:11:ba:d7:0e:d0:d2:82:59:32: c4:fa:ed:a0:d7:99:f1:18:db:d6:69:e9:e9:1a:7c: 2b:7e:0a:ed:61:90:9c:52:8d:a2:2d:9c:25:a1:c3: f8:00:b5:61:54:57:bf:35:5e:21:d7:7c:21:32:ef: ec:70:ef:b1:25:58:c3:0b:b1:b0:b7:53:14:19:81: 56:de:36:f1:01:8e:3a:84:43:83:74:bd:58:40:9e: fc:5b:36:c9:ab:45:10:55:a6:c6:ce:e5:e3:d3:46: 11:8f:62:16:f0:f4:c2:d3:f3:47:02:e9:81:77:1b: 43:7b:b4:ed:dc:c3:ab:a1:41:13:ae:78:d9:19:c8: 5f:1f:de:9d:71:d7:6a:9d:31:7d:2e:d1:38:b0:6b: 2f:61:6e:78:18:90:5a:48:df:b9:ae:df:44:b5:3e: 27:e2:0d:fe:af:ea:3a:39:f7:cf:6e:6b:91:92:20: 21:71:7b:a8:22:37:9f:9a:a6:26:9d:58:56:80:c0: 64:99:69:3f:74:ef:1a:71:fc:b3:4e:26:ab:f0:20: 07:ba:a9:99:00:3b:29:0c:b1:3b:5a:00:05:6d:b4: ba:53:8d:d1:83:36:ad:9a:de:fb:2b:d5:3a:45:5d: 84:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A6:4C:90:CD:BB:1F:B1:49:87:88:00:76:9F:3B:CD:99:3B:EE:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff19e3ea-96bb-3d31-86a9-e712cd2c37f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:d8:8a:14:7e:aa:0e:f2:7b:5e:db:8d:d8:8c:49:a2:d2:53: e1:c1:66:c3:54:b4:5e:d6:12:52:e6:8e:05:14:e9:23:72:32: bf:43:77:8b:f1:1a:9e:f3:90:df:2f:e4:1f:ea:7f:c1:49:c1: 55:83:5e:51:ea:cc:8b:a1:ca:ca:3c:2a:af:bd:d1:12:62:a9: 2f:e8:52:89:3e:01:90:e9:5c:71:53:5a:9e:77:c6:b5:0b:90: 10:fe:53:09:b0:bb:96:e7:3d:b5:aa:03:ab:79:7e:cc:7e:05: c4:b3:6f:c1:9f:a3:32:ec:82:e5:81:a5:cb:5e:43:18:7b:fc: aa:4f:23:ac:51:79:0e:6f:45:07:4c:68:1f:89:9a:e3:8d:fe: 78:6b:5d:af:f6:53:de:9a:97:8f:52:6c:31:a5:a8:4f:12:46: 5d:b8:43:d4:a9:6c:45:e9:93:c6:8e:60:37:75:ce:87:90:eb: bd:44:5f:56:59:4e:0c:ad:b0:f5:48:b7:cd:09:3c:f6:87:b8: f6:0c:78:90:4c:3a:4b:77:a0:d0:2b:2e:01:12:81:20:19:e7: 4f:b8:07:19:1f:2b:a2:85:55:2d:d9:f2:7d:66:ba:e3:6e:6f: a4:52:01:2f:58:f3:35:1e:c6:a1:d4:ea:f4:24:01:5d:30:fb: 36:27:30:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7+g8pxUy37wk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk YjE2NDU2Y2UtYWVlYi00YmU2LThiNDUtNTQ4NTcwYjRmNWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbtBYgpSrh5FkjKD2fEJbnMaZhgRutcO0NKC WTLE+u2g15nxGNvWaenpGnwrfgrtYZCcUo2iLZwlocP4ALVhVFe/NV4h13whMu/s cO+xJVjDC7Gwt1MUGYFW3jbxAY46hEODdL1YQJ78WzbJq0UQVabGzuXj00YRj2IW 8PTC0/NHAumBdxtDe7Tt3MOroUETrnjZGchfH96dcddqnTF9LtE4sGsvYW54GJBa SN+5rt9EtT4n4g3+r+o6OffPbmuRkiAhcXuoIjefmqYmnVhWgMBkmWk/dO8acfyz Tiar8CAHuqmZADspDLE7WgAFbbS6U43Rgzatmt77K9U6RV2EcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHemTJDNux+xSYeIAHafO82ZO+5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZmYxOWUzZWEtOTZiYi0z ZDMxLTg2YTktZTcxMmNkMmMzN2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3YihR+qg7ye17bjdiMSaLSU+HBZsNUtF7WElLmjgUU6SNyMr9Dd4vx Gp7zkN8v5B/qf8FJwVWDXlHqzIuhyso8Kq+90RJiqS/oUok+AZDpXHFTWp53xrUL kBD+Uwmwu5bnPbWqA6t5fsx+BcSzb8GfozLsguWBpcteQxh7/KpPI6xReQ5vRQdM aB+JmuON/nhrXa/2U96al49SbDGlqE8SRl24Q9SpbEXpk8aOYDd1zoeQ671EX1ZZ TgytsPVIt80JPPaHuPYMeJBMOkt3oNArLgESgSAZ50+4BxkfK6KFVS3Z8n1muuNu b6RSAS9Y8zUexqHU6vQkAV0w+zYnMEg= -----END CERTIFICATE-----Generated at Sun Jun 15 16:12:13 2025 by rpki-client