$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/24e50275-08d8-38a2-a053-3a76fa2cbac3.roa File: 24e50275-08d8-38a2-a053-3a76fa2cbac3.roa (raw, json) Hash identifier: ts2S1XIGUKFuM3dyHkj6FnBodhiD7MEcIzNwVKPw5RA= Subject key identifier: 3A:9A:C8:3E:38:F1:7F:9B:C5:94:49:93:B9:49:1D:FF:9B:89:51:0D Certificate issuer: /CN=06795d2e-ca43-4b22-8995-31898670bf14 Certificate serial: 010D0C9F4328584AF9513BA3E5566DAE2AA81A80 Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/24e50275-08d8-38a2-a053-3a76fa2cbac3.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 396982 IP address blocks: 161.38.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:3b:a3:e5:56:6d:ae:2a:a8:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=fb1017b1-54c5-4099-8da9-52ecec7270e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:dc:4b:34:06:8e:db:f8:43:bd:6b:5b:9f: 8d:56:fc:bb:bf:43:ea:ee:4c:e7:2c:51:d3:1f:0a: ed:53:2b:f0:88:d2:1b:7f:83:f7:3d:c5:e3:52:2f: 46:6a:c8:11:c7:92:4b:59:78:40:1e:60:83:20:53: 8d:81:6b:93:3e:8f:6d:38:f2:d9:ec:8c:2a:47:1e: 2a:51:66:a1:7d:7d:83:2b:9a:03:c4:38:85:e8:b7: d1:e7:15:1e:00:e2:6d:43:a1:bd:b1:17:fa:3d:d8: da:b3:9a:38:d4:7a:91:b3:fd:b1:9d:f7:69:32:93: 5b:aa:a3:3a:72:4e:cd:e4:20:af:a6:6f:25:ca:5f: 24:2e:89:45:07:94:c6:e4:43:c5:19:bd:3c:58:a9: e5:14:3d:c7:29:23:cc:34:68:ed:1c:0d:e6:f9:75: 6f:1a:c8:8d:e2:55:61:a0:4e:d0:76:2b:00:94:cd: 22:5b:02:68:7b:7b:13:32:f7:1f:b3:b2:09:c0:60: 4a:23:9e:52:45:61:17:a0:b6:33:ba:b5:e1:1c:09: 33:27:63:53:45:83:91:03:af:20:98:d5:94:d0:7f: 75:96:a7:59:65:3c:21:46:9c:5f:b2:2c:8a:c3:6f: 8a:e4:0a:4f:b8:30:c1:bf:38:d3:aa:e7:55:e7:f7: 8b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9A:C8:3E:38:F1:7F:9B:C5:94:49:93:B9:49:1D:FF:9B:89:51:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/24e50275-08d8-38a2-a053-3a76fa2cbac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl X509v3 Authority Key Identifier: keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer sbgp-ipAddrBlock: critical IPv4: 161.38.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e9:0c:aa:b2:16:37:d5:46:9c:a8:c0:a4:86:8f:6f:f9:d2: ca:35:c6:c0:f1:a3:e0:77:2e:eb:13:2e:ff:6c:bb:af:6e:e1: 5a:c3:23:ae:aa:ce:21:15:99:d9:97:d5:66:b2:4c:ba:23:b0: d2:32:bb:09:4d:ca:10:34:da:80:d2:48:0d:07:bb:1d:46:c1: be:7b:c2:29:9c:c2:d3:a2:0d:61:ea:1a:5f:d7:a9:95:da:01: 42:51:fb:36:0c:b5:6f:bc:91:b2:19:bd:7b:f1:76:2a:9a:7b: c7:97:e9:70:78:42:16:6e:2f:f4:4b:65:e2:4d:47:1f:21:74: 08:bb:59:58:e7:5e:9b:61:91:33:b0:96:73:37:8a:96:d9:65: 97:1b:ad:f9:ae:1d:da:90:f4:8e:58:f6:1c:aa:d7:46:7d:69: bc:10:14:a1:21:7a:95:47:0e:19:5f:13:6b:85:82:ed:34:6c: 1c:61:78:17:10:c6:06:6e:a0:00:cf:39:86:eb:1b:d4:e3:4a: 1e:d5:02:45:1f:24:f5:a2:0c:ba:7a:35:6f:00:ba:ea:70:1e: 27:eb:44:21:b1:87:c3:ac:de:29:35:25:f3:be:07:dd:7c:fc: 75:c9:0d:f8:e7:00:6c:de:36:14:21:f5:c9:61:07:eb:fb:34: bc:5e:92:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UTuj5VZtriqoGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3OTVkMmUtY2E0My00YjIyLTg5OTUtMzE4OTg2NzBi ZjE0MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZmIxMDE3YjEtNTRjNS00MDk5LThkYTktNTJlY2VjNzI3MGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybncSzQGjtv4Q71rW5+NVvy7v0Pq7kznLFHT HwrtUyvwiNIbf4P3PcXjUi9GasgRx5JLWXhAHmCDIFONgWuTPo9tOPLZ7IwqRx4q UWahfX2DK5oDxDiF6LfR5xUeAOJtQ6G9sRf6Pdjas5o41HqRs/2xnfdpMpNbqqM6 ck7N5CCvpm8lyl8kLolFB5TG5EPFGb08WKnlFD3HKSPMNGjtHA3m+XVvGsiN4lVh oE7QdisAlM0iWwJoe3sTMvcfs7IJwGBKI55SRWEXoLYzurXhHAkzJ2NTRYORA68g mNWU0H91lqdZZTwhRpxfsiyKw2+K5ApPuDDBvzjTqudV5/eLYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqayD448X+bxZRJk7lJHf+biVENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5 NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5ODY3MGJmMTQvMjRlNTAyNzUtMDhkOC0z OGEyLWEwNTMtM2E3NmZhMmNiYWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDY3OTVkMmUtY2E0My00YjIyLTg5 OTUtMzE4OTg2NzBiZjE0LzA2Nzk1ZDJlLWNhNDMtNGIyMi04OTk1LTMxODk4Njcw YmYxNC5jcmwwHwYDVR0jBBgwFoAUyI/zyCB542XU7+tGAEBbLEdi/iMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5 ODY3MGJmMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfpDKqyFjfVRpyowKSGj2/50so1xsDxo+B3LusTLv9su69u4VrDI66q ziEVmdmX1WayTLojsNIyuwlNyhA02oDSSA0Hux1Gwb57wimcwtOiDWHqGl/XqZXa AUJR+zYMtW+8kbIZvXvxdiqae8eX6XB4QhZuL/RLZeJNRx8hdAi7WVjnXpthkTOw lnM3ipbZZZcbrfmuHdqQ9I5Y9hyq10Z9abwQFKEhepVHDhlfE2uFgu00bBxheBcQ xgZuoADPOYbrG9TjSh7VAkUfJPWiDLp6NW8AuupwHifrRCGxh8Os3ik1JfO+B918 /HXJDfjnAGzeNhQh9clhB+v7NLxekhY= -----END CERTIFICATE-----Generated at Wed Oct 8 23:36:00 2025 by rpki-client