$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa File: 2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa (raw, json) Hash identifier: V2LWG6pznam81UtuS/PaxWlHJuBXz5fNWACRjGvp2M8= Subject key identifier: E4:7E:50:FD:6D:B8:DF:E6:BB:D7:3D:10:0E:30:87:16:B5:05:AD:F7 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B9E07B2C708A139EF5FB8EE00 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 161.38.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b2:c7:08:a1:39:ef:5f:b8:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=526178ad-a23f-4ef6-9f42-5b98f25f66f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:6f:84:c1:c4:ac:d1:80:0f:5e:2a:1d:97: 29:b4:0b:33:99:68:97:66:7c:00:23:47:05:d9:87: d0:10:3c:6e:c0:21:bd:aa:3d:3f:1c:1e:8a:04:c2: 95:68:19:48:06:d4:c7:6c:71:5e:d9:6b:6b:23:cd: c7:74:16:1f:98:07:f1:ce:6b:32:69:44:97:d0:05: ee:c7:a4:67:e1:75:ea:6c:66:e2:dd:ea:46:74:7e: 90:75:dd:d7:76:b9:ff:24:92:63:e6:7e:e8:d8:b9: d9:d4:55:c3:53:ac:0b:2f:99:71:da:85:cf:ce:47: c2:09:27:57:cd:ca:bf:25:13:ac:ba:bc:19:84:05: 34:97:fe:2c:fa:ef:7c:52:96:a5:74:5e:08:4d:00: 09:28:30:f2:20:c8:99:6e:60:b9:fc:03:ee:0a:73: 54:cd:d3:91:a1:d2:ca:3d:24:9e:f8:97:ad:a7:f3: b9:b1:dd:e5:77:cc:12:58:93:ef:2b:02:60:92:17: 71:38:0d:90:04:50:02:91:75:97:2d:e9:f6:0d:0a: 15:fa:5e:62:82:a1:e3:38:35:9b:99:77:0e:c2:8e: 09:11:2e:91:49:39:32:3e:f4:29:d0:f5:e3:21:7f: 15:8f:fe:e8:bf:6a:ab:bd:f0:5f:39:a5:76:95:06: f0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7E:50:FD:6D:B8:DF:E6:BB:D7:3D:10:0E:30:87:16:B5:05:AD:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:fa:d4:c9:f1:b5:bb:97:83:c9:1d:bb:75:fb:2a:7a:90:14: 58:82:f5:7f:0b:fd:e9:a7:bc:b9:58:f5:46:0c:28:a1:8e:0e: 25:ad:d0:88:bd:83:1d:71:75:cf:7e:67:fe:b0:21:11:8c:fc: 61:76:b5:8b:9e:ca:68:52:73:d5:dc:15:85:5b:e5:89:62:dd: bb:96:41:08:0d:d1:c5:fa:95:68:50:35:aa:f3:96:4b:8f:2a: 69:8a:bd:7f:ab:7f:63:3a:69:bc:13:1c:2c:13:00:17:67:57: d3:4e:f1:81:07:e1:2a:41:fb:19:c7:70:33:5b:25:4a:0e:54: de:86:d8:dd:5b:1d:3b:25:41:45:33:b0:45:a9:78:c2:66:3b: 6c:63:a9:76:f1:cc:ea:95:94:5d:5c:b9:75:13:07:85:b5:9a: b2:2f:da:fb:78:f3:ba:72:d0:5c:5d:00:3b:fe:d2:f6:a5:0c: 3d:07:fb:d5:ca:04:e0:9f:37:cb:ec:c1:51:77:68:98:3e:cd: 32:c6:d6:97:3a:89:8d:96:7e:62:25:3a:fe:3e:3b:cd:99:aa: c7:c9:51:c7:c5:37:1a:76:4d:c6:34:74:6c:86:24:7c:d1:79: 58:4d:d7:dc:2b:d2:b8:0b:e3:72:87:5c:30:e8:dd:d1:ce:83: 6e:81:51:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7LHCKE571+47gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NTI2MTc4YWQtYTIzZi00ZWY2LTlmNDItNWI5OGYyNWY2NmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXNvhMHErNGAD14qHZcptAszmWiXZnwAI0cF 2YfQEDxuwCG9qj0/HB6KBMKVaBlIBtTHbHFe2WtrI83HdBYfmAfxzmsyaUSX0AXu x6Rn4XXqbGbi3epGdH6Qdd3Xdrn/JJJj5n7o2LnZ1FXDU6wLL5lx2oXPzkfCCSdX zcq/JROsurwZhAU0l/4s+u98UpaldF4ITQAJKDDyIMiZbmC5/APuCnNUzdORodLK PSSe+Jetp/O5sd3ld8wSWJPvKwJgkhdxOA2QBFACkXWXLen2DQoV+l5igqHjODWb mXcOwo4JES6RSTkyPvQp0PXjIX8Vj/7ov2qrvfBfOaV2lQbwyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOR+UP1tuN/mu9c9EA4whxa1Ba33MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMmU4ZGYzZDQtMzAyNS0z MzgwLTliMWEtMmM0MjI3NWYwYjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD61MnxtbuXg8kdu3X7KnqQFFiC9X8L/emnvLlY9UYMKKGODiWt0Ii9 gx1xdc9+Z/6wIRGM/GF2tYueymhSc9XcFYVb5Yli3buWQQgN0cX6lWhQNarzlkuP KmmKvX+rf2M6abwTHCwTABdnV9NO8YEH4SpB+xnHcDNbJUoOVN6G2N1bHTslQUUz sEWpeMJmO2xjqXbxzOqVlF1cuXUTB4W1mrIv2vt487py0FxdADv+0valDD0H+9XK BOCfN8vswVF3aJg+zTLG1pc6iY2WfmIlOv4+O82ZqsfJUcfFNxp2TcY0dGyGJHzR eVhN19wr0rgL43KHXDDo3dHOg26BUbM= -----END CERTIFICATE-----Generated at Mon Nov 3 08:50:06 2025 by rpki-client