$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e3d105b-596b-3c0d-aece-80ecbe6319a6.roa File: 5e3d105b-596b-3c0d-aece-80ecbe6319a6.roa (raw, json) Hash identifier: QMqn2TO6dn5YSWYUWeIpKBppyRMCjNvRG6klF/+tEwY= Subject key identifier: 1E:8F:09:F8:37:21:2A:CF:30:CC:72:F7:20:88:2B:54:10:7A:88:0E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D869580867505CDB1CA764540 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e3d105b-596b-3c0d-aece-80ecbe6319a6.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 161.33.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:80:86:75:05:cd:b1:ca:76:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=ea1f4388-e7ec-44f8-b502-8f506fa34922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9a:54:33:9b:f4:c1:51:46:1f:41:f4:5d:3d: ea:76:25:e4:8e:23:c2:2e:54:8d:4c:b8:07:64:90: 7b:59:a3:9d:17:1d:84:17:8c:e0:e4:d9:f0:7e:0c: 2f:a5:0b:47:06:e3:55:eb:34:ce:9e:6e:a4:39:b8: 0d:97:c2:78:49:51:c1:d3:ae:97:41:e2:6f:66:06: 9d:34:40:73:96:01:d4:08:3c:5d:b8:aa:d4:82:2b: 9d:f4:7f:9d:0b:20:f3:ae:64:b0:c0:bc:c1:b3:da: 32:76:71:3c:38:3d:e8:87:a3:24:0d:d1:a2:1d:54: 43:f7:ef:05:61:7a:a4:82:f7:75:a6:3a:90:57:72: 68:ca:b5:ca:59:06:85:43:26:91:f3:9c:1d:cd:04: e6:75:8e:bc:4f:f4:7d:4a:11:b2:f9:ff:c4:3f:b2: da:c5:93:71:86:c5:16:46:0f:9d:73:a0:62:20:fa: 43:a9:9c:1e:69:f2:39:64:4c:d6:a8:23:bb:74:95: 59:2a:bc:be:4a:36:2b:13:db:d1:a5:22:a7:96:41: cc:71:1d:d1:01:6b:8f:af:de:8d:68:c2:d5:83:47: 8f:3c:58:d2:46:33:b7:08:67:9c:ff:29:49:5b:8a: 58:14:6c:1d:7f:3f:25:0b:33:dd:c4:24:f7:52:60: 52:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:8F:09:F8:37:21:2A:CF:30:CC:72:F7:20:88:2B:54:10:7A:88:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5e3d105b-596b-3c0d-aece-80ecbe6319a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f7:e5:c9:26:4e:3b:bf:28:e9:95:1b:67:27:c8:df:ed:04: 2c:ba:f2:09:80:60:57:bf:d4:ae:9f:5e:02:73:86:83:98:d9: a3:27:dd:99:c9:d5:7c:ea:80:fc:31:77:ee:aa:bf:8a:13:92: 82:aa:5d:7c:7e:95:08:ef:88:68:8c:4f:24:18:8c:6e:88:fa: f9:01:fc:53:ff:aa:9f:b1:4a:61:63:a1:ed:af:f4:91:37:b7: ef:32:fc:34:7b:bc:5e:0c:10:0f:d8:11:44:8f:c2:a1:50:7e: 12:83:ed:e0:be:62:b5:20:51:ca:01:1e:64:81:8f:78:ed:1e: 91:aa:0b:b0:10:88:18:4f:a5:5d:04:29:bb:82:01:7a:af:4e: 2a:94:a3:8e:7c:cc:4a:60:d3:03:17:f9:4d:63:71:08:0c:5a: a2:46:bf:ff:a1:72:08:18:6f:e8:3a:24:88:17:d8:60:52:79: 17:0c:8b:4d:93:e8:2f:03:58:96:fb:d7:93:19:75:1a:52:69: 8a:f8:4b:34:c4:13:64:5e:3e:1b:89:8e:3a:9f:8b:1b:a7:39: 30:80:1e:5e:18:71:0c:29:09:e7:35:29:1e:0d:1e:9c:e6:7d: ad:4b:db:1a:86:1d:30:e1:35:f5:96:df:d6:c9:6a:44:cf:c9: d4:f8:7b:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlYCGdQXNscp2RUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZWExZjQzODgtZTdlYy00NGY4LWI1MDItOGY1MDZmYTM0OTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZpUM5v0wVFGH0H0XT3qdiXkjiPCLlSNTLgH ZJB7WaOdFx2EF4zg5NnwfgwvpQtHBuNV6zTOnm6kObgNl8J4SVHB066XQeJvZgad NEBzlgHUCDxduKrUgiud9H+dCyDzrmSwwLzBs9oydnE8OD3oh6MkDdGiHVRD9+8F YXqkgvd1pjqQV3JoyrXKWQaFQyaR85wdzQTmdY68T/R9ShGy+f/EP7LaxZNxhsUW Rg+dc6BiIPpDqZweafI5ZEzWqCO7dJVZKry+SjYrE9vRpSKnlkHMcR3RAWuPr96N aMLVg0ePPFjSRjO3CGec/ylJW4pYFGwdfz8lCzPdxCT3UmBSawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6PCfg3ISrPMMxy9yCIK1QQeogOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWUzZDEwNWItNTk2Yi0z YzBkLWFlY2UtODBlY2JlNjMxOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoSEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb35ckmTju/KOmVG2cnyN/tBCy68gmAYFe/1K6fXgJzhoOY2aMn3ZnJ 1XzqgPwxd+6qv4oTkoKqXXx+lQjviGiMTyQYjG6I+vkB/FP/qp+xSmFjoe2v9JE3 t+8y/DR7vF4MEA/YEUSPwqFQfhKD7eC+YrUgUcoBHmSBj3jtHpGqC7AQiBhPpV0E KbuCAXqvTiqUo458zEpg0wMX+U1jcQgMWqJGv/+hcggYb+g6JIgX2GBSeRcMi02T 6C8DWJb715MZdRpSaYr4SzTEE2RePhuJjjqfixunOTCAHl4YcQwpCec1KR4NHpzm fa1L2xqGHTDhNfWW39bJakTPydT4e1E= -----END CERTIFICATE-----Generated at Fri Apr 17 17:48:29 2026 by rpki-client