$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6a460e3c-acaa-31ca-8a8f-5f654a2c6649.roa File: 6a460e3c-acaa-31ca-8a8f-5f654a2c6649.roa (raw, json) Hash identifier: QOhOx7CPftjd1bzx/5yoRyDXP/gIu6H0sYW0tl9y/V4= Subject key identifier: 46:EA:82:25:55:B6:7C:FA:4D:23:27:C4:6B:C9:78:D9:2F:87:08:73 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7F9AA189CE72B95A6D165540 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6a460e3c-acaa-31ca-8a8f-5f654a2c6649.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 161.33.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:a1:89:ce:72:b9:5a:6d:16:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=643b5bb5-b89b-4afe-8b16-ad36b5cbd609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:95:40:b4:ae:37:4e:a6:d3:d5:30:31:31:0f: f8:a4:25:ac:2e:bf:b5:0b:40:eb:12:d2:42:c3:ad: 3e:53:16:d0:be:37:c8:48:9f:f8:ee:92:0d:e7:09: 27:06:15:7a:07:78:80:17:52:ce:18:91:be:0d:a1: f0:d4:ce:c0:f7:e6:87:45:fa:d0:97:54:26:58:42: 2d:8e:b1:dd:f7:74:1c:0e:45:a5:f7:7c:ea:24:42: 4d:a3:73:82:4d:38:44:4c:f6:3a:5e:03:36:03:eb: 5a:c9:a5:b5:25:9d:47:5d:5a:76:f2:08:78:76:ae: fe:27:ba:46:bc:65:c0:23:a2:64:f1:9d:57:bf:12: dd:c3:80:b0:8e:60:21:07:5e:67:6a:84:96:c7:cc: 46:79:1b:a1:e6:93:76:67:61:ae:d1:a5:b7:cf:5a: 77:b5:a0:89:4c:86:44:d7:ee:d2:b3:0a:18:53:e7: 3d:e4:1e:29:10:6d:d4:fd:9f:fe:bd:d0:ed:66:b0: 7f:7e:88:35:46:33:6a:da:c4:e3:af:a3:b9:59:01: 03:e0:6d:13:1c:15:d2:cc:2a:5a:80:c6:00:03:6f: b1:79:bd:c3:99:18:fa:48:c7:f1:2d:e6:bf:6b:63: 90:8c:11:a1:4a:1d:97:ed:d7:fb:e7:ba:b0:b7:11: 33:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:EA:82:25:55:B6:7C:FA:4D:23:27:C4:6B:C9:78:D9:2F:87:08:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6a460e3c-acaa-31ca-8a8f-5f654a2c6649.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:35:1a:27:98:64:d4:2d:76:b7:d9:d3:75:cc:d1:a3:97:bc: b1:94:35:82:aa:af:40:99:9b:a9:46:f4:40:41:79:12:7a:d5: 3b:11:bb:7f:35:a3:d0:c4:1e:f2:7b:d5:f6:ca:17:ba:bd:c0: 40:6f:27:ab:ef:d6:fc:9b:a1:3c:a6:f6:11:e0:79:96:55:bf: e3:55:a4:17:10:1c:d9:38:ea:8c:61:45:33:04:18:ae:a1:4d: 24:3e:16:03:13:c3:9d:df:a5:d0:00:6d:4a:53:0c:29:00:a6: 23:bf:18:0e:b8:27:ad:06:b9:ac:ee:c9:87:56:8b:5f:e3:21: 29:70:a7:e9:29:7d:47:17:58:f4:b8:39:6b:50:7e:4d:84:4f: d8:64:15:cd:77:e4:8e:eb:b5:9a:9b:75:fc:9a:14:58:c0:40: 51:28:4a:4c:e3:cb:b2:6a:ba:34:25:07:c6:fb:40:9b:e2:22: f7:0f:08:c3:ed:3e:18:2e:21:16:ef:c6:dd:db:ea:59:7a:29: 6e:ad:5c:16:0b:c6:4a:3d:7c:3a:f0:c6:8d:d1:24:50:bc:ca: 5a:ab:db:94:a3:4b:a6:b4:e5:dc:7a:87:3d:65:73:8c:da:d0: a6:62:0d:5c:e9:b9:5d:88:17:1b:7f:fb:b2:8d:02:ac:fa:71: 13:e9:a5:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mqGJznK5Wm0WVUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NjQzYjViYjUtYjg5Yi00YWZlLThiMTYtYWQzNmI1Y2JkNjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5VAtK43TqbT1TAxMQ/4pCWsLr+1C0DrEtJC w60+UxbQvjfISJ/47pIN5wknBhV6B3iAF1LOGJG+DaHw1M7A9+aHRfrQl1QmWEIt jrHd93QcDkWl93zqJEJNo3OCTThETPY6XgM2A+tayaW1JZ1HXVp28gh4dq7+J7pG vGXAI6Jk8Z1XvxLdw4CwjmAhB15naoSWx8xGeRuh5pN2Z2Gu0aW3z1p3taCJTIZE 1+7SswoYU+c95B4pEG3U/Z/+vdDtZrB/fog1RjNq2sTjr6O5WQED4G0THBXSzCpa gMYAA2+xeb3DmRj6SMfxLea/a2OQjBGhSh2X7df757qwtxEzXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbqgiVVtnz6TSMnxGvJeNkvhwhzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNmE0NjBlM2MtYWNhYS0z MWNhLThhOGYtNWY2NTRhMmM2NjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ41GieYZNQtdrfZ03XM0aOXvLGUNYKqr0CZm6lG9EBBeRJ61TsRu381 o9DEHvJ71fbKF7q9wEBvJ6vv1vyboTym9hHgeZZVv+NVpBcQHNk46oxhRTMEGK6h TSQ+FgMTw53fpdAAbUpTDCkApiO/GA64J60GuazuyYdWi1/jISlwp+kpfUcXWPS4 OWtQfk2ET9hkFc135I7rtZqbdfyaFFjAQFEoSkzjy7JqujQlB8b7QJviIvcPCMPt PhguIRbvxt3b6ll6KW6tXBYLxko9fDrwxo3RJFC8ylqr25SjS6a05dx6hz1lc4za 0KZiDVzpuV2IFxt/+7KNAqz6cRPppR4= -----END CERTIFICATE-----Generated at Fri Apr 17 15:18:37 2026 by rpki-client