$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa File: 035def30-19a3-3770-96c6-3387b1f7f2e2.roa (raw, json) Hash identifier: jfYsNRIUMtiZo31mPXrQHhXXp/pSpwVRxxyhe3pRLBk= Subject key identifier: F0:D1:D3:46:EA:12:FA:79:E2:ED:99:31:C8:67:41:94:2F:FB:EE:BD Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B9E07B3137E3ABFB1F9819480 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 161.38.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b3:13:7e:3a:bf:b1:f9:81:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=b7d2a5ad-c395-420b-94eb-418aef63f2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:58:d4:89:b2:85:f9:b1:2f:58:0d:22:ea:1b: 0d:93:f4:04:dc:50:73:fe:e9:5a:52:5b:0a:89:13: 8b:2e:f7:c7:ed:c0:98:e5:8b:3e:b7:d6:c5:b9:8e: 10:4c:a4:3f:3a:b9:65:43:20:9e:d1:fe:a0:e9:fb: 30:60:70:61:0b:c2:27:f1:f3:58:27:d5:dd:3f:65: 11:90:2a:d0:1b:56:ee:97:19:34:8b:43:05:89:32: 94:73:cc:31:18:35:2f:ed:18:16:f9:79:81:76:b5: c2:22:6c:a5:a7:27:30:c6:2e:db:61:84:51:e4:3a: 03:71:37:9d:75:c7:af:4e:b2:8a:66:46:52:ad:5b: d1:da:78:71:47:8c:d9:f6:21:e6:6f:10:ec:6b:7a: ad:f7:65:35:3b:79:21:02:2b:16:88:8d:2f:ec:4b: 2c:70:0d:1a:eb:38:0a:62:f3:5a:aa:c8:8a:e0:f7: 93:7f:f3:71:66:dc:25:22:4e:29:39:5b:a5:1d:5e: 8c:e3:e8:43:71:d8:99:34:14:21:3d:c2:e5:12:e3: 7a:e3:62:30:5e:f7:72:26:31:5d:0e:c1:dd:17:e1: ae:78:d7:94:b8:4a:6f:0a:f7:de:d3:93:fa:77:79: 0d:09:3f:80:da:61:91:98:dd:1d:c0:cb:4c:41:89: ee:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D1:D3:46:EA:12:FA:79:E2:ED:99:31:C8:67:41:94:2F:FB:EE:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:3d:7d:ca:5d:fb:1c:8f:e8:90:c7:2f:22:d9:a7:8f:e2:8e: b0:99:fb:58:36:0b:98:17:33:34:a4:44:c9:a0:40:fc:5f:9a: 73:50:c6:63:5c:ba:14:2b:a3:b5:16:a6:88:38:c0:9a:58:12: 75:6a:c9:33:8a:b7:7b:f3:ef:07:70:f0:4c:53:aa:bd:80:f5: 73:2b:75:81:9b:8c:2f:a7:91:c7:f3:3e:78:5a:fc:ae:fa:01: 08:54:6d:c1:b1:87:7e:3b:66:96:e2:a2:3f:5a:c9:58:9c:28: 7f:f3:4d:b6:11:33:db:0c:fe:d0:d7:19:3a:02:74:0e:95:63: d4:5d:17:21:3a:fe:89:96:0a:48:2d:6a:0b:55:22:09:a6:f8: 2f:1a:ed:18:ed:5e:b9:e8:69:e8:3c:f6:00:12:be:d5:6c:31: 3e:fd:84:72:6e:9d:af:0a:a2:0e:c0:c3:0b:8a:58:a1:b5:9c: 21:0f:be:a1:e8:38:43:15:0b:ef:5e:d6:2f:5e:cf:9f:ca:f3: 3a:87:fc:2d:c3:ee:bc:76:88:29:f1:86:e6:ad:de:04:2a:d4: 34:dc:f1:ab:e5:e9:44:84:95:07:69:e5:f5:b7:ad:83:d5:a5: e9:64:52:90:24:d9:37:d6:9c:98:f2:67:3a:e6:a2:19:49:b2: 81:9e:80:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7MTfjq/sfmBlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YjdkMmE1YWQtYzM5NS00MjBiLTk0ZWItNDE4YWVmNjNmMmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FjUibKF+bEvWA0i6hsNk/QE3FBz/ulaUlsK iROLLvfH7cCY5Ys+t9bFuY4QTKQ/OrllQyCe0f6g6fswYHBhC8In8fNYJ9XdP2UR kCrQG1bulxk0i0MFiTKUc8wxGDUv7RgW+XmBdrXCImylpycwxi7bYYRR5DoDcTed dcevTrKKZkZSrVvR2nhxR4zZ9iHmbxDsa3qt92U1O3khAisWiI0v7EsscA0a6zgK YvNaqsiK4PeTf/NxZtwlIk4pOVulHV6M4+hDcdiZNBQhPcLlEuN642IwXvdyJjFd DsHdF+GueNeUuEpvCvfe05P6d3kNCT+A2mGRmN0dwMtMQYnuJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDR00bqEvp54u2ZMchnQZQv++69MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDM1ZGVmMzAtMTlhMy0z NzcwLTk2YzYtMzM4N2IxZjdmMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGA9fcpd+xyP6JDHLyLZp4/ijrCZ+1g2C5gXMzSkRMmgQPxfmnNQxmNc uhQro7UWpog4wJpYEnVqyTOKt3vz7wdw8ExTqr2A9XMrdYGbjC+nkcfzPnha/K76 AQhUbcGxh347Zpbioj9ayVicKH/zTbYRM9sM/tDXGToCdA6VY9RdFyE6/omWCkgt agtVIgmm+C8a7RjtXrnoaeg89gASvtVsMT79hHJuna8Kog7AwwuKWKG1nCEPvqHo OEMVC+9e1i9ez5/K8zqH/C3D7rx2iCnxhuat3gQq1DTc8avl6USElQdp5fW3rYPV pelkUpAk2TfWnJjyZzrmohlJsoGegEM= -----END CERTIFICATE-----Generated at Mon Nov 3 08:47:03 2025 by rpki-client