$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa File: 035def30-19a3-3770-96c6-3387b1f7f2e2.roa (raw, json) Hash identifier: JUDZP4cCKgm9qA48cjCn7l6HF6HSlNH01PPPDS5KPTk= Subject key identifier: ED:22:93:44:38:86:E3:D5:48:FB:67:AE:77:1A:20:0B:89:AA:1C:77 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584EE0C20392258D6E48FF5C16D8 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 16696 IP address blocks: 161.38.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:03:92:25:8d:6e:48:ff:5c:16:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=821b0a15-5ff6-4ab8-bd04-40d0e422bf05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e5:e9:ba:5e:2d:08:9f:ac:60:15:5e:b7:4c: 5e:56:fe:00:1c:9a:89:3e:e1:c1:e4:7e:86:22:ea: d0:8d:b8:9a:ba:1e:44:85:14:6a:06:6d:6d:b1:90: 23:23:01:de:b5:a5:72:f4:cf:8f:a6:b7:31:53:6c: 66:dc:92:93:79:93:dd:f6:01:59:83:3b:85:e1:0e: 44:6a:67:8e:8a:b0:48:63:d3:e0:4d:0f:78:48:ff: 51:6a:17:a3:b1:34:5a:b1:67:4d:e3:f8:95:c0:24: 95:66:71:58:71:6a:aa:d8:7a:22:1d:b3:95:25:7e: d9:cb:2c:75:78:82:ba:96:51:31:6c:9b:bc:bb:01: 28:34:bd:b4:a4:0d:b4:dc:aa:1c:55:c6:80:cb:72: 25:12:4a:e9:1d:38:00:39:1f:89:7e:5e:0e:0b:48: 95:f5:57:ae:f9:41:dd:d5:fd:b5:01:93:2f:aa:66: b0:db:b8:d2:d1:71:0e:f3:55:a9:b5:5b:c9:15:41: 62:1a:bd:7d:e9:cb:e6:44:ae:ae:c9:21:3a:24:7b: 47:67:7f:4f:9d:6a:f1:ef:b1:66:b8:54:8c:30:19: 08:b7:d3:f5:d2:94:ed:66:96:64:ba:ce:55:6c:d1: 24:63:cf:d9:8a:3e:1f:c3:38:ff:0c:78:d0:ec:e3: 7c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:22:93:44:38:86:E3:D5:48:FB:67:AE:77:1A:20:0B:89:AA:1C:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/035def30-19a3-3770-96c6-3387b1f7f2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:6b:04:a5:c8:79:bc:c8:0d:49:14:1b:82:65:37:10:3c:34: b8:d2:9e:1d:a9:5f:72:36:8a:4d:f5:9c:93:cb:19:ed:d3:47: be:b5:69:cc:f0:8c:ad:6f:32:e9:ce:50:21:32:33:4d:d0:d0: dc:f2:16:cc:a4:ef:72:13:75:4c:45:0b:56:f1:bb:07:0a:4a: d5:1f:ed:d6:58:26:be:69:f2:ea:e2:cb:db:7a:42:5e:58:aa: 46:f2:3c:e6:1e:18:44:cd:b9:4d:56:ff:a2:86:c6:0d:3c:0a: 86:c6:ce:8b:96:0c:88:f9:6a:05:2d:7d:cd:bc:03:43:b5:d3: 99:c7:c1:25:3c:e5:cb:ec:eb:af:5b:7d:80:b8:6e:da:4d:d3: 88:87:52:a0:f1:b5:11:c9:2c:5a:8b:cf:f1:db:f9:ef:8a:53: 32:ac:40:25:e0:ae:f9:b9:03:9a:1e:2e:70:0c:16:06:b0:55: f6:35:2b:e4:bf:d3:a9:a9:dd:89:d5:bd:00:85:91:ab:1d:b2: 8d:c7:a1:35:18:9a:33:3a:9d:5d:b9:11:c4:7e:18:a5:3a:35: c4:c8:01:6c:49:de:66:74:ef:54:c1:d4:54:4e:1e:d9:47:a4: 3c:0b:49:f9:66:f2:a4:c3:ce:8d:06:37:7b:f9:bb:23:f3:27: 9c:8b:e3:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgOSJY1uSP9cFtgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk ODIxYjBhMTUtNWZmNi00YWI4LWJkMDQtNDBkMGU0MjJiZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreXpul4tCJ+sYBVet0xeVv4AHJqJPuHB5H6G IurQjbiauh5EhRRqBm1tsZAjIwHetaVy9M+PprcxU2xm3JKTeZPd9gFZgzuF4Q5E ameOirBIY9PgTQ94SP9RahejsTRasWdN4/iVwCSVZnFYcWqq2HoiHbOVJX7Zyyx1 eIK6llExbJu8uwEoNL20pA203KocVcaAy3IlEkrpHTgAOR+Jfl4OC0iV9Veu+UHd 1f21AZMvqmaw27jS0XEO81WptVvJFUFiGr196cvmRK6uySE6JHtHZ39PnWrx77Fm uFSMMBkIt9P10pTtZpZkus5VbNEkY8/Zij4fwzj/DHjQ7ON8KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0ik0Q4huPVSPtnrncaIAuJqhx3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDM1ZGVmMzAtMTlhMy0z NzcwLTk2YzYtMzM4N2IxZjdmMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1rBKXIebzIDUkUG4JlNxA8NLjSnh2pX3I2ik31nJPLGe3TR761aczw jK1vMunOUCEyM03Q0NzyFsyk73ITdUxFC1bxuwcKStUf7dZYJr5p8uriy9t6Ql5Y qkbyPOYeGETNuU1W/6KGxg08CobGzouWDIj5agUtfc28A0O105nHwSU85cvs669b fYC4btpN04iHUqDxtRHJLFqLz/Hb+e+KUzKsQCXgrvm5A5oeLnAMFgawVfY1K+S/ 06mp3YnVvQCFkasdso3HoTUYmjM6nV25EcR+GKU6NcTIAWxJ3mZ071TB1FROHtlH pDwLSflm8qTDzo0GN3v5uyPzJ5yL42o= -----END CERTIFICATE-----Generated at Sun Sep 27 15:09:26 2026 by rpki-client