$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa File: df81f8d2-6da0-3290-b864-c6d6e634429c.roa (raw, json) Hash identifier: FpbLqiOrDVnTkutzMMKuvCu80/hbjwJ7tfSjLdzV68o= Subject key identifier: F8:C1:E0:48:A5:13:81:C8:0A:EE:96:13:BA:34:70:83:FA:16:C1:51 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D5E1A63CEF26AC958FAD4BF98 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 16696 IP address blocks: 161.38.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:63:ce:f2:6a:c9:58:fa:d4:bf:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=d6019d4f-5899-4a79-bc41-821e0c192dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:63:a1:0e:54:96:91:b2:40:55:0d:db:ad: ed:e8:0f:d5:b1:8d:22:a6:98:4f:16:0e:c0:99:61: 8f:2e:09:29:52:56:d8:e1:78:b0:27:09:bd:29:30: f2:ee:aa:84:8e:bf:5c:1e:2f:76:51:39:a4:c1:fb: 39:54:91:49:e2:2e:0e:90:63:b1:cd:23:89:ab:a4: ec:6a:c8:57:0b:b9:9a:ee:5f:81:e0:e2:d6:df:12: e7:77:0f:76:e5:14:db:7f:bf:c3:23:80:6e:ff:3c: 67:c2:7e:f9:1e:dd:e7:cd:bc:f1:db:d4:4e:5a:07: a1:29:fa:94:93:53:41:69:fe:53:7c:92:47:4d:9d: 93:08:52:84:fb:73:eb:06:54:39:e5:bc:c5:80:ea: 68:bb:b0:95:20:6f:2f:95:02:24:6d:33:aa:be:e2: 6b:23:36:ce:ae:33:8d:bd:f7:62:eb:ec:ac:fd:b1: aa:0a:d5:be:9a:6e:61:93:2b:3a:b8:21:d5:cd:ca: 93:af:a0:57:4c:59:e6:c1:9d:92:f7:be:c8:11:e3: 8e:fd:c9:dc:51:23:7b:90:fd:e6:f4:19:13:fe:0e: 56:28:e3:11:d5:b7:50:06:ab:7c:0b:f4:81:c2:1f: 0c:a5:58:f4:df:2a:b0:ec:39:11:a0:6f:9b:94:de: a6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C1:E0:48:A5:13:81:C8:0A:EE:96:13:BA:34:70:83:FA:16:C1:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:05:3e:bd:5e:82:6e:d3:b0:49:94:4a:cb:32:e6:f6:a2:87: 97:af:76:41:68:31:02:c2:af:30:61:ed:a8:8d:32:dd:de:73: d2:07:e8:63:44:8e:bc:f1:b3:8f:d6:8c:89:bf:8c:ab:98:54: 72:e1:29:a7:f0:36:33:b9:6a:ca:72:00:5a:36:c2:4f:d6:a9: 47:a4:d9:3a:d0:79:29:78:97:d6:09:51:07:d8:7c:34:bd:ba: 63:eb:3d:df:01:28:05:ab:26:0a:95:36:79:33:b5:ee:3a:bb: 58:49:a0:07:b5:33:77:df:e8:bf:1b:17:c0:f1:fa:ef:15:8b: 21:3a:91:54:1d:43:97:43:d1:3c:f3:e8:b8:30:6d:00:ab:d0: a3:2b:28:72:60:53:92:9b:3a:a2:39:02:fe:58:16:44:26:45: fa:4d:f3:1c:d5:58:33:38:fe:db:d0:65:2b:15:ce:c4:b8:74: 6e:68:e1:dd:08:8c:b2:f6:c5:f7:12:e1:4e:be:7d:fb:f8:b7: af:0c:c2:b7:7b:bc:17:4b:1e:76:f1:93:1c:23:4a:e0:93:cc: c8:6d:2f:0f:21:79:82:83:fd:cd:b1:02:0d:b0:b1:bb:9a:10: 25:e2:89:cb:81:21:a4:ef:e9:29:23:7d:9b:82:6d:d9:57:e5: 81:cb:29:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmPO8mrJWPrUv5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk ZDYwMTlkNGYtNTg5OS00YTc5LWJjNDEtODIxZTBjMTkyZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOxjoQ5UlpGyQFUN263t6A/VsY0ipphPFg7A mWGPLgkpUlbY4XiwJwm9KTDy7qqEjr9cHi92UTmkwfs5VJFJ4i4OkGOxzSOJq6Ts ashXC7ma7l+B4OLW3xLndw925RTbf7/DI4Bu/zxnwn75Ht3nzbzx29ROWgehKfqU k1NBaf5TfJJHTZ2TCFKE+3PrBlQ55bzFgOpou7CVIG8vlQIkbTOqvuJrIzbOrjON vfdi6+ys/bGqCtW+mm5hkys6uCHVzcqTr6BXTFnmwZ2S977IEeOO/cncUSN7kP3m 9BkT/g5WKOMR1bdQBqt8C/SBwh8MpVj03yqw7DkRoG+blN6maQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjB4EilE4HICu6WE7o0cIP6FsFRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZGY4MWY4ZDItNmRhMC0z MjkwLWI4NjQtYzZkNmU2MzQ0MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQFPr1egm7TsEmUSssy5vaih5evdkFoMQLCrzBh7aiNMt3ec9IH6GNE jrzxs4/WjIm/jKuYVHLhKafwNjO5aspyAFo2wk/WqUek2TrQeSl4l9YJUQfYfDS9 umPrPd8BKAWrJgqVNnkzte46u1hJoAe1M3ff6L8bF8Dx+u8ViyE6kVQdQ5dD0Tzz 6LgwbQCr0KMrKHJgU5KbOqI5Av5YFkQmRfpN8xzVWDM4/tvQZSsVzsS4dG5o4d0I jLL2xfcS4U6+ffv4t68Mwrd7vBdLHnbxkxwjSuCTzMhtLw8heYKD/c2xAg2wsbua ECXiicuBIaTv6SkjfZuCbdlX5YHLKZs= -----END CERTIFICATE-----Generated at Thu Apr 2 22:35:04 2026 by rpki-client