$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3c82a2e5-4459-326e-a294-8d36bee193c9.roa File: 3c82a2e5-4459-326e-a294-8d36bee193c9.roa (raw, json) Hash identifier: MsBJtBsbPL7xHBiXv64hfd8URmaoVj5VA5JLE2JjrW0= Subject key identifier: EC:C3:04:3B:CA:54:AB:2E:8F:E2:9E:27:8E:CD:C0:BD:49:E2:FC:D0 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B9E07B492B8D5044865ABC6A0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3c82a2e5-4459-326e-a294-8d36bee193c9.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 399063 IP address blocks: 161.38.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b4:92:b8:d5:04:48:65:ab:c6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=a55f1555-3e52-4ca3-8475-a66334a25de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c8:ad:3d:b1:d7:f7:b5:cc:e2:97:9e:5b:7d: e0:9b:e6:7d:7e:ec:e9:36:0d:21:7d:db:da:7a:5d: b9:25:cf:96:53:6d:44:79:4d:52:b1:5a:1a:90:d6: 3e:1b:f1:4f:83:8e:06:33:bf:36:f1:d4:30:96:71: c5:fd:5b:f7:14:7d:98:3f:cf:35:17:4f:8e:c4:42: 89:ee:18:1c:0b:3b:75:bc:ad:41:5d:c2:a3:1a:02: 95:fb:53:c6:39:86:76:9b:af:ab:88:fe:b2:3d:15: f9:a6:2c:18:20:bf:7f:ed:ad:ca:c3:5a:ed:22:05: 2c:d9:c7:00:00:36:e7:fe:56:d9:64:d4:6c:a5:b7: 2f:43:06:3f:f3:9d:ed:1a:fc:f3:41:17:ec:a7:31: 63:2a:84:36:fe:0a:d5:72:c9:73:51:72:e1:bc:d4: 31:74:91:9c:a2:b6:e1:ad:15:c9:06:22:15:ed:07: 47:5c:76:fa:1f:cf:b2:67:e5:1e:b0:bc:2e:b0:7c: 4e:c0:39:7a:08:36:04:84:3e:d9:cc:4a:bd:b7:32: 22:b6:7c:1a:e8:dc:67:15:76:f0:b7:a1:00:27:42: b9:5d:5e:86:fe:4f:27:0e:c4:da:66:c5:a4:7a:5a: 08:a5:c7:27:b1:a0:d2:44:57:e0:ab:43:d6:fe:62: fe:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C3:04:3B:CA:54:AB:2E:8F:E2:9E:27:8E:CD:C0:BD:49:E2:FC:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3c82a2e5-4459-326e-a294-8d36bee193c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:45:93:23:f1:6c:b2:9d:a6:d9:d7:47:35:fb:2b:bb:a6:92: 1d:1f:49:8c:2b:f3:b3:f1:07:9e:13:c5:bc:b3:42:17:ea:d2: 27:a6:c9:56:7f:02:5a:5b:a8:fa:0e:03:5e:2b:98:0e:cd:a3: fb:47:a0:05:13:74:28:c0:a3:a6:49:79:64:bc:33:8b:c9:ca: 2c:3b:e9:48:cd:ea:73:77:e3:57:72:86:17:87:c2:fd:42:a4: 42:c4:39:cf:da:9a:be:bd:ae:d6:db:5b:18:2f:44:b7:77:21: 13:74:cb:b7:db:23:e5:c3:f9:c0:6a:9e:74:92:49:b4:bf:88: 4d:4e:19:6c:75:64:b1:32:7a:4c:86:af:f9:fe:5c:2a:6d:09: 58:a9:b2:e5:c7:d8:c5:7c:95:8f:06:1c:17:9f:51:1e:45:1b: 22:bc:60:18:74:98:59:bd:cd:59:b6:68:5d:bb:d5:22:6c:a7: a3:06:4c:8d:e9:d3:bf:00:75:c2:5f:5f:de:fb:fd:1a:2f:47: 84:38:7a:08:44:92:a2:81:dc:c3:0b:2e:65:31:e1:13:63:56: e9:51:f5:fa:ba:16:de:97:c9:00:fc:0a:1b:9d:5a:f9:4f:2b: 4b:05:29:97:e4:7a:47:fb:83:b1:8a:db:f0:fd:a9:8b:80:3d: eb:5b:7d:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7SSuNUESGWrxqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YTU1ZjE1NTUtM2U1Mi00Y2EzLTg0NzUtYTY2MzM0YTI1ZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcitPbHX97XM4peeW33gm+Z9fuzpNg0hfdva el25Jc+WU21EeU1SsVoakNY+G/FPg44GM7828dQwlnHF/Vv3FH2YP881F0+OxEKJ 7hgcCzt1vK1BXcKjGgKV+1PGOYZ2m6+riP6yPRX5piwYIL9/7a3Kw1rtIgUs2ccA ADbn/lbZZNRspbcvQwY/853tGvzzQRfspzFjKoQ2/grVcslzUXLhvNQxdJGcorbh rRXJBiIV7QdHXHb6H8+yZ+UesLwusHxOwDl6CDYEhD7ZzEq9tzIitnwa6NxnFXbw t6EAJ0K5XV6G/k8nDsTaZsWkeloIpccnsaDSRFfgq0PW/mL+NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzDBDvKVKsuj+KeJ47NwL1J4vzQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvM2M4MmEyZTUtNDQ1OS0z MjZlLWEyOTQtOGQzNmJlZTE5M2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtFkyPxbLKdptnXRzX7K7umkh0fSYwr87PxB54TxbyzQhfq0iemyVZ/ AlpbqPoOA14rmA7No/tHoAUTdCjAo6ZJeWS8M4vJyiw76UjN6nN341dyhheHwv1C pELEOc/amr69rtbbWxgvRLd3IRN0y7fbI+XD+cBqnnSSSbS/iE1OGWx1ZLEyekyG r/n+XCptCVipsuXH2MV8lY8GHBefUR5FGyK8YBh0mFm9zVm2aF271SJsp6MGTI3p 078AdcJfX977/RovR4Q4eghEkqKB3MMLLmUx4RNjVulR9fq6Ft6XyQD8ChudWvlP K0sFKZfkekf7g7GK2/D9qYuAPetbfQ0= -----END CERTIFICATE-----Generated at Mon Nov 3 08:47:03 2025 by rpki-client