$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa File: 53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa (raw, json) Hash identifier: j5rqqCtzZSjhiocm1vZHwxkiL1gotxCGzLRGzxPD0Ro= Subject key identifier: D2:CE:E6:70:CB:52:A9:E6:04:F1:11:C2:17:35:B3:0F:7B:36:A5:1B Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584AB4EB6AF876262ACF188724C0 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 25649 IP address blocks: 161.38.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:6a:f8:76:26:2a:cf:18:87:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=062ffca7-368a-407e-a395-f8c4ff4ae149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d0:8a:b7:09:d8:4c:3d:94:66:24:65:d3:af: c5:69:de:34:04:17:1c:6c:a4:a6:56:2f:6b:7a:77: a2:4f:da:47:10:96:2d:16:ae:33:38:19:37:58:59: de:ce:82:63:70:53:3b:27:b7:34:a7:c5:b9:ac:aa: 59:48:53:2f:ce:17:1c:e4:38:fa:bd:84:68:03:1d: 03:d2:22:6d:2c:98:66:a5:e5:fe:02:77:4b:9c:91: c3:9d:e9:99:52:4f:07:f2:a8:1d:b0:87:57:a8:b2: 20:22:bc:6b:c8:a8:a7:f0:ac:22:e8:47:76:bb:9a: c7:0f:79:98:9a:68:a3:1d:2f:3b:27:b7:85:44:e1: 5d:bc:b8:9f:81:93:94:1f:0c:d9:f4:ae:ef:09:1f: 9c:09:bd:21:f4:59:a4:9c:42:7b:f4:66:0e:33:a1: 6c:ec:da:06:fc:0d:5c:1a:3d:a9:54:0a:a1:cf:3f: 7f:c3:38:a9:c5:ec:a4:01:98:b9:70:17:57:15:ad: 8d:76:f8:15:3a:de:fd:16:19:3e:a3:96:4a:9f:c3: a1:9a:d5:d9:05:0e:de:fb:de:bc:1b:93:95:2d:87: 72:fe:9c:b8:f8:f1:98:5f:46:d2:7f:2d:a0:0f:86: c1:32:b3:da:c4:c6:83:0f:51:5f:aa:3c:ab:57:24: 5e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CE:E6:70:CB:52:A9:E6:04:F1:11:C2:17:35:B3:0F:7B:36:A5:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/53c8f6dd-71ef-3d56-ac98-cc4c5ea4f8d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 161.38.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e3:f8:87:53:9e:9d:2f:85:49:d0:d4:3f:a8:24:f4:30:2c: bc:77:43:5a:ff:2c:f0:ee:73:d3:df:55:1b:c5:c5:d4:29:19: 8d:75:1f:14:55:b2:1a:2f:f9:45:d1:1b:02:84:f6:dc:f0:64: 5b:48:7a:cb:a6:ba:b9:6f:2e:24:d2:2c:1c:84:34:1a:7b:ed: cb:49:ea:f6:88:14:b3:0a:30:d6:05:c8:97:a0:87:30:59:b5: a9:d0:40:1d:f2:89:eb:c0:4f:a0:4b:5c:d9:38:fc:df:0c:35: d8:ad:b5:33:a6:d8:10:85:fc:72:36:14:ba:0e:68:6a:00:74: 87:92:79:14:0c:ff:2b:4b:47:cd:2e:d4:49:fe:4c:3d:8e:0a: 4e:fa:47:4d:3f:d0:4a:f0:16:0a:00:38:fa:b2:55:f1:19:8c: c5:04:0e:f6:84:4e:39:11:13:46:6e:8f:69:be:a3:43:01:cb: 54:7d:25:b9:64:4b:9c:da:82:4d:9e:56:74:49:ec:3a:b0:4f: c8:b2:f0:4f:7b:37:8e:4d:06:47:51:f3:a0:91:71:81:23:1d: 42:51:72:b0:43:df:9c:1e:80:08:31:85:d7:21:f1:01:f8:c1: e8:22:90:92:00:3a:13:81:ae:87:6e:2c:fd:4c:e3:7f:43:4e: ac:c4:bf:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq062r4diYqzxiHJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MDYyZmZjYTctMzY4YS00MDdlLWEzOTUtZjhjNGZmNGFlMTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9CKtwnYTD2UZiRl06/Fad40BBccbKSmVi9r eneiT9pHEJYtFq4zOBk3WFnezoJjcFM7J7c0p8W5rKpZSFMvzhcc5Dj6vYRoAx0D 0iJtLJhmpeX+AndLnJHDnemZUk8H8qgdsIdXqLIgIrxryKin8Kwi6Ed2u5rHD3mY mmijHS87J7eFROFdvLifgZOUHwzZ9K7vCR+cCb0h9FmknEJ79GYOM6Fs7NoG/A1c Gj2pVAqhzz9/wzipxeykAZi5cBdXFa2NdvgVOt79Fhk+o5ZKn8OhmtXZBQ7e+968 G5OVLYdy/py4+PGYX0bSfy2gD4bBMrPaxMaDD1FfqjyrVyRehwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLO5nDLUqnmBPERwhc1sw97NqUbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNTNjOGY2ZGQtNzFlZi0z ZDU2LWFjOTgtY2M0YzVlYTRmOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoSYqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXj+IdTnp0vhUnQ1D+oJPQwLLx3Q1r/LPDuc9PfVRvFxdQpGY11HxRV shov+UXRGwKE9tzwZFtIesumurlvLiTSLByENBp77ctJ6vaIFLMKMNYFyJeghzBZ tanQQB3yievAT6BLXNk4/N8MNdittTOm2BCF/HI2FLoOaGoAdIeSeRQM/ytLR80u 1En+TD2OCk76R00/0ErwFgoAOPqyVfEZjMUEDvaETjkRE0Zuj2m+o0MBy1R9Jblk S5zagk2eVnRJ7DqwT8iy8E97N45NBkdR86CRcYEjHUJRcrBD35wegAgxhdch8QH4 wegikJIAOhOBroduLP1M439DTqzEv0g= -----END CERTIFICATE-----Generated at Mon Aug 4 14:11:54 2025 by rpki-client