$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9f555d6-fba7-33c2-9cbc-eabcab91c0f1.roa File: e9f555d6-fba7-33c2-9cbc-eabcab91c0f1.roa (raw, json) Hash identifier: dhHE1zKeyfEpth87yCSXLdHEkyKA3THEZWgaR3s/8zI= Subject key identifier: 52:EE:D9:4D:22:79:81:04:12:2C:B4:CF:19:9F:84:DC:C3:98:29:97 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D86954F75FAFB152F62DD4D60 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9f555d6-fba7-33c2-9cbc-eabcab91c0f1.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 161.33.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:4f:75:fa:fb:15:2f:62:dd:4d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=c85cd2b7-0687-4831-b8ec-cddc2651745d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8b:5f:85:0b:2d:e6:bc:65:f2:b4:15:9d:dc: f2:9f:e1:1d:73:7e:30:43:36:c5:70:22:e6:7a:7e: 2a:fa:35:70:74:79:8c:5b:a9:29:05:4c:22:b4:75: 06:7f:71:e2:66:ec:ad:db:cb:e8:cd:f4:09:1d:de: 42:f2:c5:fc:74:4c:da:f2:f3:b4:0e:5e:7a:22:f4: 35:83:97:40:ad:6c:59:6f:44:f6:c9:45:b2:c0:62: 60:5e:99:bc:f8:f4:3a:22:c5:9b:0b:62:97:07:b6: eb:95:eb:54:42:68:3e:9e:fe:69:8e:c4:a5:7a:be: a4:03:2e:a4:7a:9d:5b:9b:ca:ff:d7:44:d6:f5:53: e1:16:3a:a6:03:02:63:dd:8e:04:9d:3d:32:e2:18: 02:66:04:b5:35:ff:89:3a:59:40:71:d5:e0:9a:46: 72:c9:7c:d0:3b:b5:4d:9c:7a:f2:f6:66:96:0f:ea: c6:65:90:97:c8:18:8d:10:c8:cc:28:22:79:b4:5b: 61:50:11:42:26:6a:39:39:93:ff:45:cf:5c:66:82: ef:ef:75:0f:6d:63:c9:e8:9f:83:1a:27:ee:12:79: f6:8f:19:78:5f:79:88:54:57:ce:f6:9a:b5:b0:86: 85:c6:f3:e0:05:4c:ce:c3:ee:71:68:f8:e5:0a:01: fb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:EE:D9:4D:22:79:81:04:12:2C:B4:CF:19:9F:84:DC:C3:98:29:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9f555d6-fba7-33c2-9cbc-eabcab91c0f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:c6:c9:b3:f0:1f:d1:9a:de:50:df:ca:34:8a:a0:9a:52:f6: 67:1b:19:12:22:25:bb:83:3e:fb:ad:dc:53:15:7c:91:73:64: 91:44:d7:ee:12:8a:96:69:93:8c:2e:b8:8f:79:4e:32:7f:5e: 2b:8e:0a:43:71:0d:90:e8:da:68:3d:e4:ef:b7:70:e5:27:45: 30:de:39:19:fa:1b:4d:f4:44:15:06:42:4c:9b:5a:5a:74:4f: 72:70:fc:7f:9c:5d:6f:3a:b1:d1:a5:ac:36:b9:01:c7:77:1e: c0:43:5f:af:84:7e:fe:c9:54:9d:02:40:24:dd:f0:b3:72:cb: 22:7c:35:9b:80:25:1c:11:2e:34:7f:8f:a8:0a:b9:26:a7:41: 2d:a7:61:8c:17:8c:d0:6c:2a:c0:34:08:c8:69:0e:01:13:7b: b5:a0:fa:d4:f7:24:23:f2:bd:0e:bf:46:1a:95:c1:cc:5c:42: 6e:aa:36:7f:96:76:9d:42:1d:81:e3:73:89:1c:67:48:bb:c9: 09:f6:c8:7e:c6:5b:0c:01:33:8d:e2:f6:45:49:f1:4e:b6:e5: 5a:ca:50:1e:3d:20:33:a8:5c:2f:02:a7:84:0f:7c:fa:af:d8: b2:67:91:d2:1b:e9:3c:b0:2a:e7:fc:9b:19:50:1b:54:cf:e3: db:82:58:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlU91+vsVL2LdTWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk Yzg1Y2QyYjctMDY4Ny00ODMxLWI4ZWMtY2RkYzI2NTE3NDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhotfhQst5rxl8rQVndzyn+Edc34wQzbFcCLm en4q+jVwdHmMW6kpBUwitHUGf3HiZuyt28vozfQJHd5C8sX8dEza8vO0Dl56IvQ1 g5dArWxZb0T2yUWywGJgXpm8+PQ6IsWbC2KXB7brletUQmg+nv5pjsSler6kAy6k ep1bm8r/10TW9VPhFjqmAwJj3Y4EnT0y4hgCZgS1Nf+JOllAcdXgmkZyyXzQO7VN nHry9maWD+rGZZCXyBiNEMjMKCJ5tFthUBFCJmo5OZP/Rc9cZoLv73UPbWPJ6J+D GifuEnn2jxl4X3mIVFfO9pq1sIaFxvPgBUzOw+5xaPjlCgH7sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLu2U0ieYEEEiy0zxmfhNzDmCmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTlmNTU1ZDYtZmJhNy0z M2MyLTljYmMtZWFiY2FiOTFjMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoSGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzGybPwH9Ga3lDfyjSKoJpS9mcbGRIiJbuDPvut3FMVfJFzZJFE1+4S ipZpk4wuuI95TjJ/XiuOCkNxDZDo2mg95O+3cOUnRTDeORn6G030RBUGQkybWlp0 T3Jw/H+cXW86sdGlrDa5Acd3HsBDX6+Efv7JVJ0CQCTd8LNyyyJ8NZuAJRwRLjR/ j6gKuSanQS2nYYwXjNBsKsA0CMhpDgETe7Wg+tT3JCPyvQ6/RhqVwcxcQm6qNn+W dp1CHYHjc4kcZ0i7yQn2yH7GWwwBM43i9kVJ8U625VrKUB49IDOoXC8Cp4QPfPqv 2LJnkdIb6TywKuf8mxlQG1TP49uCWH8= -----END CERTIFICATE-----Generated at Fri Apr 17 17:47:56 2026 by rpki-client