$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/237c3bf2-7be3-3aed-bb3b-beb4300dcd4f.roa File: 237c3bf2-7be3-3aed-bb3b-beb4300dcd4f.roa (raw, json) Hash identifier: 3cpXTpiv9IF0+1EOdBUPsFSGCW8V/oByzYLEg1ylR0c= Subject key identifier: 6E:74:CB:70:BD:FD:38:E5:AA:A7:C8:04:49:0F:1C:79:78:5D:47:74 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7F9A9D7C4171C343095C6280 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/237c3bf2-7be3-3aed-bb3b-beb4300dcd4f.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 161.33.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:9d:7c:41:71:c3:43:09:5c:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=fcbc3ff8-425a-47f3-80b2-fe147f85f80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0c:dc:d5:85:fe:ac:56:b5:3b:65:bc:08:ae: ca:f1:52:5b:42:d3:ce:27:2a:e4:55:be:cc:44:7a: 50:b8:3b:cf:b0:4a:64:a4:4a:7f:b4:bf:eb:b3:2b: 08:f5:1f:0d:27:95:57:f7:3c:0d:3d:85:8b:e9:39: c6:0a:7c:1b:5e:16:94:2a:b9:39:8c:f9:dd:11:fd: 0d:96:f2:f6:a9:9a:0b:f7:72:ff:7f:f3:c0:fa:80: 8d:12:4f:df:a5:9d:2e:d7:3a:e9:93:76:8a:58:6c: 16:ba:de:35:ba:bb:ba:83:33:b7:60:e0:04:ca:07: e6:1f:bc:f0:10:f3:4b:3d:b0:f2:87:26:ba:f4:01: a6:f5:08:05:c3:9d:ec:31:e7:aa:68:4f:4f:7c:5f: 01:02:01:23:58:ab:65:68:56:3b:16:63:d7:ec:f4: bb:fa:90:3a:2b:e2:ea:ec:20:cc:c9:79:77:9c:49: 71:19:e9:64:5d:a3:5e:5a:1c:de:c6:d8:50:0d:30: ae:36:6c:3c:1f:7e:42:07:d5:70:bd:3a:01:a5:e2: e5:5d:1c:37:28:cd:85:3e:7b:52:72:99:e8:f6:35: f9:f1:11:f1:a0:bb:0e:59:25:e3:f7:ba:1a:e7:1e: 0c:0c:c7:73:9d:9b:b6:d3:51:93:ff:d4:11:01:5a: f0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:74:CB:70:BD:FD:38:E5:AA:A7:C8:04:49:0F:1C:79:78:5D:47:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/237c3bf2-7be3-3aed-bb3b-beb4300dcd4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:e2:68:ac:ae:0c:67:23:83:d7:7f:e8:5c:ee:59:2d:61:ef: 1f:f2:fa:0e:f4:8f:b0:58:a9:47:12:73:4f:f5:7f:dd:01:aa: 87:f3:72:8f:f0:3d:32:ad:cd:3c:8e:c5:a6:34:82:a9:28:dd: 5e:f0:f2:15:40:9c:74:c0:ce:94:8f:49:61:6f:d8:26:88:50: 7b:63:2c:41:89:4d:c9:64:04:f9:0e:03:f1:5b:8d:32:c0:02: c0:c0:fd:fd:80:9a:f0:20:97:14:0d:fb:97:0c:c4:0f:38:a1: 7b:4c:52:da:b5:b4:df:ea:1d:8e:ea:db:90:fd:04:3b:e6:3c: a9:21:9b:47:99:c0:83:5c:6c:a6:6f:6c:24:48:88:c5:99:3d: 6f:ba:7e:96:d7:c1:fc:3c:23:86:38:a5:b8:6e:5b:a8:40:18: ba:84:cb:78:d4:73:12:8c:22:78:60:80:59:35:d0:e3:5f:2c: e7:28:ed:45:b5:eb:5d:4c:db:ef:dd:d1:62:27:3a:94:9b:77: 5e:24:1f:ad:91:aa:f7:c6:65:f0:62:45:ee:dd:f1:89:80:3b: 52:a1:56:f9:55:44:b2:4c:67:03:62:d8:f4:07:42:85:54:ec: ea:8d:5a:04:15:07:66:0e:32:fa:42:a8:94:0a:3b:ad:5a:b0: 6c:80:a7:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mp18QXHDQwlcYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZmNiYzNmZjgtNDI1YS00N2YzLTgwYjItZmUxNDdmODVmODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwzc1YX+rFa1O2W8CK7K8VJbQtPOJyrkVb7M RHpQuDvPsEpkpEp/tL/rsysI9R8NJ5VX9zwNPYWL6TnGCnwbXhaUKrk5jPndEf0N lvL2qZoL93L/f/PA+oCNEk/fpZ0u1zrpk3aKWGwWut41uru6gzO3YOAEygfmH7zw EPNLPbDyhya69AGm9QgFw53sMeeqaE9PfF8BAgEjWKtlaFY7FmPX7PS7+pA6K+Lq 7CDMyXl3nElxGelkXaNeWhzexthQDTCuNmw8H35CB9VwvToBpeLlXRw3KM2FPntS cpno9jX58RHxoLsOWSXj97oa5x4MDMdznZu201GT/9QRAVrwlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG50y3C9/TjlqqfIBEkPHHl4XUd0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjM3YzNiZjItN2JlMy0z YWVkLWJiM2ItYmViNDMwMGRjZDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFoSFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDiaKyuDGcjg9d/6FzuWS1h7x/y+g70j7BYqUcSc0/1f90Bqofzco/w PTKtzTyOxaY0gqko3V7w8hVAnHTAzpSPSWFv2CaIUHtjLEGJTclkBPkOA/FbjTLA AsDA/f2AmvAglxQN+5cMxA84oXtMUtq1tN/qHY7q25D9BDvmPKkhm0eZwINcbKZv bCRIiMWZPW+6fpbXwfw8I4Y4pbhuW6hAGLqEy3jUcxKMInhggFk10ONfLOco7UW1 611M2+/d0WInOpSbd14kH62RqvfGZfBiRe7d8YmAO1KhVvlVRLJMZwNi2PQHQoVU 7OqNWgQVB2YOMvpCqJQKO61asGyAp3Q= -----END CERTIFICATE-----Generated at Fri Apr 17 18:57:11 2026 by rpki-client