$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa File: 035def30-19a3-3770-96c6-3387b1f7f2e2.roa (raw, json) Hash identifier: 0tKyKpoDXyNYD8Sz7AY7WEGN+4bmx8VaKXcT8wPh5e0= Subject key identifier: 17:E9:80:D7:00:9E:9B:EC:FF:B9:03:05:6A:02:31:B1:6B:D6:2B:11 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D5E1A63DAEBF55BC873E90900 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 16696 IP address blocks: 161.38.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:63:da:eb:f5:5b:c8:73:e9:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=a2b1eb36-3974-49e8-9b53-27f2df4359c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:c0:9e:6b:8d:51:40:a8:7a:1e:53:e5:c6: 36:9f:77:2d:24:83:58:f7:fd:7c:d9:9f:4b:2a:37: aa:47:5b:bf:97:da:f0:e7:95:e1:19:4c:87:c8:6b: b4:5d:11:54:74:dd:47:de:54:33:4b:56:ad:26:9f: 8b:d9:72:99:08:8f:9c:8e:76:de:00:2f:22:28:44: a5:be:7c:bf:a4:e3:72:75:e6:07:67:ae:df:7a:de: fc:ef:0b:88:e5:5b:a8:f1:ac:c0:c9:01:bc:ce:37: b8:98:f1:c4:c3:63:06:00:e8:9d:79:a2:f1:e3:ce: 99:31:3c:68:6a:e1:7c:b8:e3:4f:11:2c:5d:4b:f7: 02:e3:3f:b2:6c:00:68:06:d4:06:4f:34:f5:d3:64: 59:c4:b4:14:18:29:6a:8f:81:5c:94:54:69:79:ba: 0e:15:9f:b7:30:69:b9:e2:cd:d5:71:d0:0a:4f:df: e2:00:83:96:cc:16:98:db:d3:d9:22:8b:7a:05:f5: 20:d7:29:69:94:8b:bc:6f:20:00:6d:fa:46:ca:ff: 61:29:f5:78:c7:0c:56:a0:87:47:53:c1:d9:15:dd: a0:68:71:58:96:eb:f1:9b:a2:ef:32:e5:da:b6:a0: 26:7e:8c:81:d2:c7:f3:4c:bf:dd:ac:03:e0:8f:b5: 11:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E9:80:D7:00:9E:9B:EC:FF:B9:03:05:6A:02:31:B1:6B:D6:2B:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:3e:00:e8:10:de:d6:7b:c2:87:2d:d0:96:3f:1a:89:e0:a5: 15:ff:74:f5:6c:ec:14:0a:bf:a7:1e:b5:99:4a:87:e1:f9:5a: 55:2c:bd:bd:e6:15:02:d8:b2:f8:06:a7:04:bc:16:6f:19:6e: 4d:71:97:43:70:cb:08:aa:29:88:c9:a0:b8:61:90:2a:ad:a1: 0a:db:52:44:13:8b:b7:f9:25:22:03:2f:7d:19:15:f4:bb:9f: 58:62:5f:d2:7b:64:97:76:cb:00:27:62:62:bb:3c:8e:91:b0: e1:31:bc:f1:f1:6e:6f:19:9f:8a:e4:6a:41:e0:26:3e:ab:6d: 62:26:8e:27:dd:ac:93:cd:3d:50:df:5e:d3:1f:36:6c:c8:49: 1e:b7:c7:a3:3d:77:58:6c:95:11:43:5f:fb:0b:21:e2:a2:6e: a9:14:16:a4:26:35:19:91:04:60:1c:a6:a1:48:83:8f:57:83: 98:07:3c:78:c0:53:9b:1b:94:ec:02:69:4e:cc:20:2e:9f:7c: 01:34:56:dc:36:0d:19:df:99:ff:88:e7:70:b5:df:31:51:3d: a4:61:21:2d:f3:a1:c4:42:ab:4b:64:75:c1:f1:3e:66:77:b5: 62:89:89:b4:4b:88:91:f7:f4:4d:a3:4d:70:e0:ab:dd:63:ab: 59:77:26:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmPa6/VbyHPpCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YTJiMWViMzYtMzk3NC00OWU4LTliNTMtMjdmMmRmNDM1OWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUjAnmuNUUCoeh5T5cY2n3ctJINY9/182Z9L KjeqR1u/l9rw55XhGUyHyGu0XRFUdN1H3lQzS1atJp+L2XKZCI+cjnbeAC8iKESl vny/pONydeYHZ67fet787wuI5Vuo8azAyQG8zje4mPHEw2MGAOideaLx486ZMTxo auF8uONPESxdS/cC4z+ybABoBtQGTzT102RZxLQUGClqj4FclFRpeboOFZ+3MGm5 4s3VcdAKT9/iAIOWzBaY29PZIot6BfUg1ylplIu8byAAbfpGyv9hKfV4xwxWoIdH U8HZFd2gaHFYluvxm6LvMuXatqAmfoyB0sfzTL/drAPgj7URQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfpgNcAnpvs/7kDBWoCMbFr1isRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDM1ZGVmMzAtMTlhMy0z NzcwLTk2YzYtMzM4N2IxZjdmMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADM+AOgQ3tZ7woct0JY/GongpRX/dPVs7BQKv6cetZlKh+H5WlUsvb3m FQLYsvgGpwS8Fm8Zbk1xl0NwywiqKYjJoLhhkCqtoQrbUkQTi7f5JSIDL30ZFfS7 n1hiX9J7ZJd2ywAnYmK7PI6RsOExvPHxbm8Zn4rkakHgJj6rbWImjifdrJPNPVDf XtMfNmzISR63x6M9d1hslRFDX/sLIeKibqkUFqQmNRmRBGAcpqFIg49Xg5gHPHjA U5sblOwCaU7MIC6ffAE0Vtw2DRnfmf+I53C13zFRPaRhIS3zocRCq0tkdcHxPmZ3 tWKJibRLiJH39E2jTXDgq91jq1l3Jho= -----END CERTIFICATE-----Generated at Thu Apr 2 22:35:04 2026 by rpki-client