$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/291f72af-3eb9-3107-a9f9-d5349b257427.roa File: 291f72af-3eb9-3107-a9f9-d5349b257427.roa (raw, json) Hash identifier: ZEMCWeWpcElAG5wvtphDYKJxAjTWA1Ayf/p40b9roMo= Subject key identifier: C9:04:60:E9:72:1C:11:33:CB:CC:D3:DB:CF:25:85:41:89:AF:53:7D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CD64275C9EEF3F8424780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/291f72af-3eb9-3107-a9f9-d5349b257427.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 161.33.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d6:42:75:c9:ee:f3:f8:42:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=bdc4bc4c-5faa-4d18-8e29-aa067e886091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0a:1a:98:38:f3:44:d4:de:3d:7b:fb:53:18: 25:dc:7e:20:46:fa:a8:08:be:0c:30:17:0c:2c:eb: 8d:08:46:92:b9:0f:2e:da:c8:28:67:fb:16:f5:33: 2f:15:21:1e:9c:3c:a7:09:76:1b:4a:05:1a:3f:51: f9:23:db:02:a9:c7:ae:d2:1a:6b:ad:dd:9f:e7:e7: c1:ad:93:60:ea:d2:dc:dc:13:12:88:45:0c:d2:b7: 68:79:5d:29:8a:97:7a:ea:5f:9c:c7:24:63:cc:18: 57:c7:53:8f:7e:d4:bb:b7:aa:16:2d:3d:bf:dc:1f: 38:f0:b1:34:9a:ce:34:ff:56:20:06:b3:db:83:d6: 21:cc:62:5b:04:e2:0a:60:59:c8:c7:cc:56:55:6d: 78:26:f7:b4:d7:6e:ad:f2:07:1b:23:93:59:54:91: 5d:bb:aa:57:8c:0e:fa:ae:87:b2:c2:bb:33:58:b1: 7b:4e:70:d6:f2:ca:7c:0f:72:8b:fc:f9:22:93:1f: 87:28:c0:fa:1b:97:89:f7:54:7d:0f:6a:6f:dc:f3: ef:2f:33:38:99:26:7f:91:de:f3:a6:31:4b:04:45: 66:86:2a:98:d1:35:a1:da:c9:92:ac:e7:1a:48:64: 36:75:9a:ca:bd:a9:37:ec:7c:81:66:27:31:03:79: 7e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:04:60:E9:72:1C:11:33:CB:CC:D3:DB:CF:25:85:41:89:AF:53:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/291f72af-3eb9-3107-a9f9-d5349b257427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6b:8c:b2:29:7a:c1:e1:e0:73:27:ab:fd:3b:13:94:99:03: 7e:85:34:5b:6c:f5:0c:58:b5:ad:cb:98:94:f4:4f:d5:1d:ac: 19:b9:e6:e5:9f:4c:ba:b4:fd:02:93:a7:79:f4:13:f6:13:15: 02:f4:f4:bf:e5:59:0f:16:9f:b0:33:b9:8e:e0:1f:eb:c1:c8: 90:3b:e0:71:38:cb:1d:c1:b8:7b:8d:a6:3e:c8:f9:17:f0:45: 9e:4a:2c:70:ff:10:55:d3:4a:b0:56:3d:7e:cd:62:b0:72:dc: 4f:9d:ad:d9:cd:e9:65:e1:39:3b:ca:af:05:63:4d:e5:aa:50: 73:75:d6:a9:a1:f6:3e:25:73:cf:8b:98:a3:4c:a0:70:c7:dc: af:f6:96:d2:ae:d4:b9:35:6d:37:86:5f:24:64:3a:43:7f:f7: a6:2d:20:68:c5:5c:55:b6:23:c3:9b:23:da:c6:60:9a:4e:65: f2:b7:b1:45:0c:df:dd:1e:1e:8d:fc:1e:27:39:b0:28:18:b5: 19:a9:b0:1f:86:17:0c:ab:d0:25:6f:a3:f5:cf:3b:ce:13:52: c7:ea:96:60:41:84:91:5d:fc:61:60:5e:06:a7:88:fe:9b:cf: b8:9e:cf:1a:48:e6:43:b2:05:7c:64:46:f3:c3:d7:39:ee:5b: 1f:62:31:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNZCdcnu8/hCR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk YmRjNGJjNGMtNWZhYS00ZDE4LThlMjktYWEwNjdlODg2MDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgoamDjzRNTePXv7Uxgl3H4gRvqoCL4MMBcM LOuNCEaSuQ8u2sgoZ/sW9TMvFSEenDynCXYbSgUaP1H5I9sCqceu0hprrd2f5+fB rZNg6tLc3BMSiEUM0rdoeV0pipd66l+cxyRjzBhXx1OPftS7t6oWLT2/3B848LE0 ms40/1YgBrPbg9YhzGJbBOIKYFnIx8xWVW14Jve0126t8gcbI5NZVJFdu6pXjA76 roeywrszWLF7TnDW8sp8D3KL/Pkikx+HKMD6G5eJ91R9D2pv3PPvLzM4mSZ/kd7z pjFLBEVmhiqY0TWh2smSrOcaSGQ2dZrKvak37HyBZicxA3l+UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkEYOlyHBEzy8zT288lhUGJr1N9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjkxZjcyYWYtM2ViOS0z MTA3LWE5ZjktZDUzNDliMjU3NDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZrjLIpesHh4HMnq/07E5SZA36FNFts9QxYta3LmJT0T9UdrBm55uWf TLq0/QKTp3n0E/YTFQL09L/lWQ8Wn7AzuY7gH+vByJA74HE4yx3BuHuNpj7I+Rfw RZ5KLHD/EFXTSrBWPX7NYrBy3E+drdnN6WXhOTvKrwVjTeWqUHN11qmh9j4lc8+L mKNMoHDH3K/2ltKu1Lk1bTeGXyRkOkN/96YtIGjFXFW2I8ObI9rGYJpOZfK3sUUM 390eHo38Hic5sCgYtRmpsB+GFwyr0CVvo/XPO84TUsfqlmBBhJFd/GFgXganiP6b z7iezxpI5kOyBXxkRvPD1znuWx9iMU4= -----END CERTIFICATE-----Generated at Tue Sep 22 12:52:57 2026 by rpki-client