$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa File: df81f8d2-6da0-3290-b864-c6d6e634429c.roa (raw, json) Hash identifier: X2m2HKhg68130KZLnbjnETi6Lbnu2vZux2WD0/IWIEM= Subject key identifier: 78:1C:2E:C4:9B:FA:DC:47:FF:4E:38:E8:8D:8B:BB:8C:F5:CD:7F:E6 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584B9E07B2FEE0EB4DD31C776D00 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16696 IP address blocks: 161.38.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b2:fe:e0:eb:4d:d3:1c:77:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=6dd2397a-9b1a-428b-9467-55715a1a8150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:61:24:53:e1:12:74:43:82:50:81:43:48:2f: cd:b3:48:82:76:2d:82:c2:6c:5c:7a:2c:96:52:2d: b6:58:04:ad:00:ec:ce:bb:a8:2d:b6:ba:76:9b:94: 8b:f2:82:c7:63:a1:96:59:7a:d8:55:05:bc:cf:1b: 39:fe:a1:9c:52:6f:f6:92:83:67:19:f5:4b:21:a4: 6b:20:60:1e:98:14:2d:3b:c5:bd:52:11:73:65:bd: 3b:84:51:24:de:8f:53:cc:ce:24:eb:34:86:26:87: 41:34:8f:ce:aa:16:32:dc:d9:7e:0a:a6:9d:5e:45: 9f:b6:2a:f9:b1:e2:82:c9:9c:41:fa:63:55:0e:30: d4:33:6c:61:9d:f2:ac:3b:9c:b1:82:b5:ed:a5:a1: ba:19:19:40:50:2a:9c:59:83:b1:a5:98:4c:a5:21: 13:4f:bf:d7:7a:40:01:26:64:eb:d9:84:12:08:e6: d0:2d:2b:67:27:85:e8:a6:1d:cb:68:d7:24:64:9f: 33:ee:d3:5a:2e:e3:3e:93:b9:13:24:8d:9b:d8:1a: 93:7c:81:5d:1a:3b:3a:98:a1:2c:35:0b:22:f5:84: be:e5:5d:7c:88:36:d9:c5:24:d9:af:b5:cf:43:5d: 22:a7:5d:ac:5b:48:d9:af:bf:2f:42:c9:74:25:77: 51:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1C:2E:C4:9B:FA:DC:47:FF:4E:38:E8:8D:8B:BB:8C:F5:CD:7F:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/df81f8d2-6da0-3290-b864-c6d6e634429c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:45:5f:cc:c0:11:6b:0d:de:c5:fc:47:f3:12:5f:b3:5a:66: 43:42:09:18:90:95:7c:29:a4:1e:12:54:4d:76:3f:dd:d5:5c: 02:9d:d4:5a:4e:03:c8:85:58:10:75:e0:a4:e0:78:13:c7:e0: df:1a:56:3a:7c:39:bf:0d:80:d4:2b:7d:09:78:0b:6d:60:74: 45:4c:72:ed:bc:26:15:21:df:0e:35:a6:8b:8f:54:9b:4c:66: 64:40:c3:52:5b:10:1e:f7:33:94:94:f7:4a:1f:b1:9e:db:cb: fc:06:84:95:d4:98:75:02:c4:32:40:38:83:28:1f:34:9c:11: d6:d5:e3:9a:32:81:89:14:51:fe:a0:ed:74:6d:e9:7f:42:e9: 7a:14:a5:22:28:42:03:c3:ad:57:7c:9f:4f:2c:a4:40:3e:6e: 64:1b:3e:8a:0d:7c:ed:d9:2d:bc:c0:34:4d:26:ca:a6:a4:a3: c1:c9:2d:1d:60:6d:83:20:5d:53:bf:d5:39:15:a0:6a:2d:60: 5e:94:79:b0:9f:9e:46:ba:23:3e:f4:91:6b:5b:eb:40:df:da: 9b:cf:1a:11:1c:60:ad:4a:03:db:29:87:68:f5:d8:ba:41:4e: 23:15:e3:26:88:11:5f:b1:45:15:8b:bf:17:a2:08:b0:e8:eb: c4:b3:a0:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7L+4OtN0xx3bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NmRkMjM5N2EtOWIxYS00MjhiLTk0NjctNTU3MTVhMWE4MTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2EkU+ESdEOCUIFDSC/Ns0iCdi2CwmxceiyW Ui22WAStAOzOu6gttrp2m5SL8oLHY6GWWXrYVQW8zxs5/qGcUm/2koNnGfVLIaRr IGAemBQtO8W9UhFzZb07hFEk3o9TzM4k6zSGJodBNI/OqhYy3Nl+CqadXkWftir5 seKCyZxB+mNVDjDUM2xhnfKsO5yxgrXtpaG6GRlAUCqcWYOxpZhMpSETT7/XekAB JmTr2YQSCObQLStnJ4Xoph3LaNckZJ8z7tNaLuM+k7kTJI2b2BqTfIFdGjs6mKEs NQsi9YS+5V18iDbZxSTZr7XPQ10ip12sW0jZr78vQsl0JXdRgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgcLsSb+txH/0446I2Lu4z1zX/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZGY4MWY4ZDItNmRhMC0z MjkwLWI4NjQtYzZkNmU2MzQ0MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVFX8zAEWsN3sX8R/MSX7NaZkNCCRiQlXwppB4SVE12P93VXAKd1FpO A8iFWBB14KTgeBPH4N8aVjp8Ob8NgNQrfQl4C21gdEVMcu28JhUh3w41pouPVJtM ZmRAw1JbEB73M5SU90ofsZ7by/wGhJXUmHUCxDJAOIMoHzScEdbV45oygYkUUf6g 7XRt6X9C6XoUpSIoQgPDrVd8n08spEA+bmQbPooNfO3ZLbzANE0myqako8HJLR1g bYMgXVO/1TkVoGotYF6UebCfnka6Iz70kWtb60Df2pvPGhEcYK1KA9sph2j12LpB TiMV4yaIEV+xRRWLvxeiCLDo68SzoFo= -----END CERTIFICATE-----Generated at Mon Nov 3 08:45:38 2025 by rpki-client