$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa File: 2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa (raw, json) Hash identifier: 84X6lHbBYK8Ove8JvQY2+eyyGSCJqUv2QkD2DDhkC+I= Subject key identifier: 9F:34:81:70:A5:36:96:30:F8:1E:F3:6B:7C:5E:95:C3:DC:2F:40:9F Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584E3E5F37F1D05A8B81A5CD3C80 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa Signing time: Sun 21 Jun 2026 09:00:12 +0000 ROA not before: Sun 21 Jun 2026 09:00:12 +0000 ROA not after: Sat 19 Sep 2026 09:00:12 +0000 asID: 16696 IP address blocks: 161.38.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:5f:37:f1:d0:5a:8b:81:a5:cd:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Jun 21 09:00:12 2026 GMT Not After : Sep 19 09:00:12 2026 GMT Subject: CN=4a5bad12-3beb-447d-b44c-e48601a4f466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8a:a4:3d:ec:2d:f8:08:c8:da:92:95:b6:67: 05:27:c8:84:d4:74:e1:49:94:ea:9f:38:d1:f2:08: f7:7b:ee:1c:32:62:c1:0c:bd:44:7e:f0:1f:45:52: e6:17:0f:78:a3:49:41:0d:48:ad:d8:48:b7:bc:1d: 18:1c:04:6b:c1:09:cc:b2:6a:c6:51:21:f9:be:93: 05:f3:49:37:48:5d:c6:82:d8:f1:2c:5a:f0:87:00: e0:01:77:3d:45:3f:12:d0:89:e3:5e:57:a8:e7:c9: 56:a7:7d:f4:0b:5f:a7:0c:1d:07:53:e3:73:51:8b: aa:29:1d:08:17:e3:cb:2a:ec:5c:9b:16:e7:8c:2e: 95:65:b7:d9:3c:ae:8d:b2:ad:af:78:c6:2c:b1:14: c1:ed:83:ec:6b:c2:96:e5:08:77:91:7f:17:d8:2a: a3:c6:4c:85:c6:10:53:0a:43:b1:ba:c1:e6:94:19: 72:a5:77:f1:22:b6:d5:a1:72:76:6d:b2:3d:29:dd: c2:e9:6f:71:b4:54:f3:d8:cc:3a:23:03:8c:e2:ff: bc:d1:a1:9f:c2:38:cb:ce:cf:db:be:39:7c:29:ae: 37:0b:57:e0:53:5e:ae:3b:0b:a1:21:33:16:9e:e5: c7:a1:9e:c4:98:fc:63:ca:36:68:e0:a4:f9:a8:9d: 17:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:34:81:70:A5:36:96:30:F8:1E:F3:6B:7C:5E:95:C3:DC:2F:40:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2e8df3d4-3025-3380-9b1a-2c42275f0b15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 161.38.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:cb:32:8e:77:16:83:df:25:54:71:fe:a8:e1:15:5a:7a:40: 54:f8:a6:84:f0:6f:3e:8c:e5:48:16:cf:82:9e:a7:d3:40:9a: 07:fd:3d:79:42:00:30:f4:7f:de:9a:22:24:b9:3f:4c:32:13: a1:6d:70:71:28:75:af:8d:c6:72:c8:af:e2:c9:e9:61:e5:21: a0:e7:c2:96:38:ff:47:fa:03:75:81:d9:03:41:ca:c2:74:8c: 77:fa:99:1d:8f:c0:a8:94:74:d2:3d:10:c5:be:2f:17:41:e1: 8e:b2:bf:9b:b3:c2:a4:78:23:46:f8:54:8d:3d:74:34:27:77: cf:35:3a:04:1d:7e:23:77:bd:a7:14:1e:7a:f8:4f:fd:5e:29: 05:95:ca:2e:8f:92:bc:89:d2:c0:48:22:b5:eb:81:57:18:73: 09:55:dc:a2:29:f2:1d:1b:cb:2d:f8:95:21:7f:1b:5c:e4:12: 3f:5a:2c:56:10:df:69:e6:c7:1b:13:f5:01:9d:b9:c1:07:8f: 21:3f:fc:46:40:c6:16:39:ea:97:5d:38:77:ac:9a:95:d8:5c: f9:2b:b8:f5:4c:51:40:23:f8:e7:ce:68:3f:cd:5c:11:4f:dc: d5:9b:17:f2:d0:c4:17:75:5e:88:d7:63:bb:5d:29:15:ea:bb: 69:38:20:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+Xzfx0FqLgaXNPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk NGE1YmFkMTItM2JlYi00NDdkLWI0NGMtZTQ4NjAxYTRmNDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4qkPewt+AjI2pKVtmcFJ8iE1HThSZTqnzjR 8gj3e+4cMmLBDL1EfvAfRVLmFw94o0lBDUit2Ei3vB0YHARrwQnMsmrGUSH5vpMF 80k3SF3GgtjxLFrwhwDgAXc9RT8S0InjXleo58lWp330C1+nDB0HU+NzUYuqKR0I F+PLKuxcmxbnjC6VZbfZPK6Nsq2veMYssRTB7YPsa8KW5Qh3kX8X2CqjxkyFxhBT CkOxusHmlBlypXfxIrbVoXJ2bbI9Kd3C6W9xtFTz2Mw6IwOM4v+80aGfwjjLzs/b vjl8Ka43C1fgU16uOwuhITMWnuXHoZ7EmPxjyjZo4KT5qJ0X7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ80gXClNpYw+B7za3xelcPcL0CfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMmU4ZGYzZDQtMzAyNS0z MzgwLTliMWEtMmM0MjI3NWYwYjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDLMo53FoPfJVRx/qjhFVp6QFT4poTwbz6M5UgWz4Kep9NAmgf9PXlC ADD0f96aIiS5P0wyE6FtcHEoda+NxnLIr+LJ6WHlIaDnwpY4/0f6A3WB2QNBysJ0 jHf6mR2PwKiUdNI9EMW+LxdB4Y6yv5uzwqR4I0b4VI09dDQnd881OgQdfiN3vacU Hnr4T/1eKQWVyi6PkryJ0sBIIrXrgVcYcwlV3KIp8h0byy34lSF/G1zkEj9aLFYQ 32nmxxsT9QGducEHjyE//EZAxhY56pddOHesmpXYXPkruPVMUUAj+OfOaD/NXBFP 3NWbF/LQxBd1XojXY7tdKRXqu2k4IKg= -----END CERTIFICATE-----Generated at Fri Jul 24 10:53:04 2026 by rpki-client