$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e5c56cc-e071-39b7-ac6f-232ea578b908.roa File: 3e5c56cc-e071-39b7-ac6f-232ea578b908.roa (raw, json) Hash identifier: je82gQlFaGchl+7iz9FBLEdWn1P+lz8dDRWMiPGQs80= Subject key identifier: F8:C9:07:61:BA:06:38:A3:4F:65:FF:15:E0:47:F6:02:C3:45:BD:0F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D86953EFC75A05DEC021D3F00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e5c56cc-e071-39b7-ac6f-232ea578b908.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 161.33.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:3e:fc:75:a0:5d:ec:02:1d:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=3f66647b-6b77-4112-a746-cdc5a7b0c956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f6:83:4d:b3:33:32:88:8f:89:8f:d6:51:ef: fe:68:99:b0:aa:6b:d9:e9:77:77:af:f9:19:e3:f3: 7b:fa:22:00:06:0b:3d:36:9e:95:86:4f:9a:83:b2: a4:ea:cc:29:67:e4:a1:23:95:5b:4c:73:06:69:a6: 8f:bf:29:ac:b2:f8:a9:58:7c:e4:d7:69:3d:78:a7: 6b:84:b7:07:e0:c5:04:7b:87:57:ef:45:22:9d:03: 90:21:32:56:85:61:3a:e6:af:3c:a2:11:a3:43:44: a6:27:9d:e7:d0:42:b8:40:42:74:9e:b3:93:06:8d: d9:1d:f4:cb:db:9a:dd:38:d0:3a:a0:49:fd:01:db: a5:4d:14:e2:d1:e7:46:dc:37:de:a3:dc:8c:97:cb: ed:32:37:87:bf:98:89:9b:79:b7:e6:4a:97:c4:df: eb:3e:59:86:02:0f:a7:5f:b6:80:01:54:94:b4:5b: d2:20:f9:11:09:9b:03:d5:50:e8:ef:fe:74:42:3a: 53:dd:be:2b:cc:62:40:b1:ae:d3:f8:1c:5f:a3:5e: c5:e3:18:99:84:87:26:95:34:c1:d5:6e:2e:d8:e9: 13:92:77:40:36:86:91:6d:db:50:90:f2:0f:f9:a1: e1:f8:d9:66:e2:98:a4:ec:6b:61:8f:5c:f9:be:a4: a3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C9:07:61:BA:06:38:A3:4F:65:FF:15:E0:47:F6:02:C3:45:BD:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e5c56cc-e071-39b7-ac6f-232ea578b908.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:e6:33:98:09:fb:4e:2f:ec:f8:51:7d:fa:6f:b8:69:05:43: b6:b9:9d:2d:7f:26:4b:57:a4:d0:33:65:28:6a:d8:52:c0:8a: 12:8f:02:ad:20:fa:0c:31:58:24:d0:92:6f:e1:10:1c:99:bc: e5:ac:d3:5f:8e:5a:d4:0f:f0:b2:e8:55:e1:34:32:10:cd:85: c7:a3:b9:5a:34:93:32:3d:64:e8:ff:a1:d9:77:1d:08:a6:2f: 86:b7:53:9a:ac:e9:10:54:2d:be:34:3b:a1:8c:e8:93:25:71: 0e:ea:be:be:f9:74:55:1c:be:c9:a6:c7:47:56:10:fc:ab:f9: 5a:e6:a7:19:af:dd:b3:84:df:e1:44:dc:44:1e:b1:0f:6c:db: d4:bd:08:0a:f7:e7:5d:0e:1f:f1:85:57:9c:91:7c:87:f8:7e: cf:d3:cd:c1:85:05:b5:7e:aa:14:67:d3:a9:b4:60:c0:e6:d7: bb:2a:9b:59:b9:c1:7c:3f:4f:cd:66:5c:0c:e7:71:af:ae:95: c4:77:3f:47:e4:3d:9b:91:41:bd:ce:90:bc:5e:63:10:22:9c: 07:84:a3:7a:fe:d4:b2:de:2b:95:72:72:a3:99:4a:ed:a4:13: 3e:73:9d:db:73:09:3c:8e:df:6c:54:49:12:ca:dd:f7:63:ff: 55:43:5b:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlT78daBd7AIdPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk M2Y2NjY0N2ItNmI3Ny00MTEyLWE3NDYtY2RjNWE3YjBjOTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPaDTbMzMoiPiY/WUe/+aJmwqmvZ6Xd3r/kZ 4/N7+iIABgs9Np6Vhk+ag7Kk6swpZ+ShI5VbTHMGaaaPvymssvipWHzk12k9eKdr hLcH4MUEe4dX70UinQOQITJWhWE65q88ohGjQ0SmJ53n0EK4QEJ0nrOTBo3ZHfTL 25rdONA6oEn9AdulTRTi0edG3Dfeo9yMl8vtMjeHv5iJm3m35kqXxN/rPlmGAg+n X7aAAVSUtFvSIPkRCZsD1VDo7/50QjpT3b4rzGJAsa7T+Bxfo17F4xiZhIcmlTTB 1W4u2OkTkndANoaRbdtQkPIP+aHh+Nlm4pik7Gthj1z5vqSj2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjJB2G6BjijT2X/FeBH9gLDRb0PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2U1YzU2Y2MtZTA3MS0z OWI3LWFjNmYtMjMyZWE1NzhiOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFoSHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvmM5gJ+04v7PhRffpvuGkFQ7a5nS1/JktXpNAzZShq2FLAihKPAq0g +gwxWCTQkm/hEByZvOWs01+OWtQP8LLoVeE0MhDNhcejuVo0kzI9ZOj/odl3HQim L4a3U5qs6RBULb40O6GM6JMlcQ7qvr75dFUcvsmmx0dWEPyr+Vrmpxmv3bOE3+FE 3EQesQ9s29S9CAr3510OH/GFV5yRfIf4fs/TzcGFBbV+qhRn06m0YMDm17sqm1m5 wXw/T81mXAznca+ulcR3P0fkPZuRQb3OkLxeYxAinAeEo3r+1LLeK5VycqOZSu2k Ez5zndtzCTyO32xUSRLK3fdj/1VDW8A= -----END CERTIFICATE-----Generated at Fri Apr 17 22:14:57 2026 by rpki-client