$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff19e3ea-96bb-3d31-86a9-e712cd2c37f6.roa File: ff19e3ea-96bb-3d31-86a9-e712cd2c37f6.roa (raw, json) Hash identifier: W/m39slEsGpVN6B0cV7Xf2K8o3khScYuWn0uNmjP3Os= Subject key identifier: 8D:EB:56:BC:E7:72:44:CC:99:17:91:F7:4E:EF:CC:64:91:10:57:AF Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584EE0C2034DD9A22F8D1A2C97E0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff19e3ea-96bb-3d31-86a9-e712cd2c37f6.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 16696 IP address blocks: 161.38.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:03:4d:d9:a2:2f:8d:1a:2c:97:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=1d13d846-7d96-427b-a988-71bc184000a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:92:2d:d2:34:2f:90:84:3c:53:de:95:a5:fc: 46:05:90:74:bc:29:bf:64:35:36:ed:27:27:7d:a4: 2f:df:c9:59:ba:8a:f6:65:17:4d:e4:7f:bd:c6:79: 7c:be:97:22:c9:21:ae:7d:73:23:68:ed:63:f1:45: a1:24:51:79:a2:9a:01:0e:cd:9f:a7:3b:cc:12:d1: fc:ef:c3:81:d8:ce:f7:cc:2f:df:1a:5d:ea:85:83: c9:c8:f9:a4:d8:06:1b:00:59:eb:3d:3b:bd:b9:5d: 56:2c:e7:ab:64:d6:04:24:81:bb:9b:ba:e3:f0:d1: 34:68:a0:40:2f:26:9a:b7:fb:6e:ba:94:45:b7:b7: 14:5f:2d:98:37:92:b5:d1:03:7e:64:65:23:50:f0: 1f:24:76:0f:13:79:58:e3:7f:e1:0c:ba:58:09:4c: 75:9f:53:fb:30:7b:bd:58:ca:f1:ca:ed:0c:9c:9a: 16:26:77:1a:a4:f7:38:52:fb:f3:c2:e9:c8:b1:4a: d1:6d:df:f4:07:0a:43:44:7b:64:ac:d6:1b:10:80: 85:fa:c1:25:39:3d:65:5b:e6:b7:85:83:fe:d5:a0: db:cd:48:54:ec:16:2c:e4:c2:dc:94:df:4f:35:bf: b2:20:4f:b2:54:06:98:aa:e1:b8:e5:8d:00:63:da: 68:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EB:56:BC:E7:72:44:CC:99:17:91:F7:4E:EF:CC:64:91:10:57:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff19e3ea-96bb-3d31-86a9-e712cd2c37f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:77:b0:4a:6f:c3:42:65:19:07:8a:7c:d7:17:16:be:70:81: 00:21:42:7d:33:46:49:dc:1c:08:3a:82:eb:75:7b:93:4a:5d: 91:13:29:b2:2a:ef:62:4a:db:7e:e1:99:ff:54:2b:8c:06:59: a1:63:d2:b3:8a:53:79:fa:9f:69:6f:db:0c:f1:1a:46:10:00: f1:10:7c:61:17:66:93:d6:61:0d:a3:17:d0:91:dc:c3:78:4d: 15:a8:78:74:65:c1:ff:8d:19:d2:c9:78:80:8c:37:fd:6a:81: 71:ae:a9:d6:af:29:d2:5b:bf:b0:73:51:af:7e:77:d4:6a:28: 83:a9:8b:50:cf:95:91:eb:68:52:a9:cb:be:62:63:7a:01:e8: 6c:b6:ed:c8:67:2b:aa:fd:78:a3:94:e5:d0:8e:50:b8:17:97: 80:1f:cb:51:6c:51:c1:b7:69:1e:5f:98:93:c1:1e:da:e1:91: 3a:95:3b:ca:44:4b:bd:bd:98:60:dc:7a:a0:ff:9b:aa:03:8c: 14:f8:e3:c6:fb:af:60:6b:06:e5:e3:42:70:ea:7c:90:f9:f1: 41:95:ba:74:78:26:86:10:e7:87:ef:df:7c:ea:8a:39:a6:c9: 4e:57:72:64:71:98:c5:b3:b1:75:42:6c:2d:b3:77:f0:2d:89: e4:73:5f:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgNN2aIvjRosl+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk MWQxM2Q4NDYtN2Q5Ni00MjdiLWE5ODgtNzFiYzE4NDAwMGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZIt0jQvkIQ8U96VpfxGBZB0vCm/ZDU27Scn faQv38lZuor2ZRdN5H+9xnl8vpciySGufXMjaO1j8UWhJFF5opoBDs2fpzvMEtH8 78OB2M73zC/fGl3qhYPJyPmk2AYbAFnrPTu9uV1WLOerZNYEJIG7m7rj8NE0aKBA Lyaat/tuupRFt7cUXy2YN5K10QN+ZGUjUPAfJHYPE3lY43/hDLpYCUx1n1P7MHu9 WMrxyu0MnJoWJncapPc4UvvzwunIsUrRbd/0BwpDRHtkrNYbEICF+sElOT1lW+a3 hYP+1aDbzUhU7BYs5MLclN9PNb+yIE+yVAaYquG45Y0AY9poWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3rVrznckTMmReR907vzGSREFevMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZmYxOWUzZWEtOTZiYi0z ZDMxLTg2YTktZTcxMmNkMmMzN2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEt3sEpvw0JlGQeKfNcXFr5wgQAhQn0zRkncHAg6gut1e5NKXZETKbIq 72JK237hmf9UK4wGWaFj0rOKU3n6n2lv2wzxGkYQAPEQfGEXZpPWYQ2jF9CR3MN4 TRWoeHRlwf+NGdLJeICMN/1qgXGuqdavKdJbv7BzUa9+d9RqKIOpi1DPlZHraFKp y75iY3oB6Gy27chnK6r9eKOU5dCOULgXl4Afy1FsUcG3aR5fmJPBHtrhkTqVO8pE S729mGDceqD/m6oDjBT448b7r2BrBuXjQnDqfJD58UGVunR4JoYQ54fv33zqijmm yU5XcmRxmMWzsXVCbC2zd/AtieRzX/k= -----END CERTIFICATE-----Generated at Thu Sep 24 07:56:04 2026 by rpki-client