$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/237c3bf2-7be3-3aed-bb3b-beb4300dcd4f.roa File: 237c3bf2-7be3-3aed-bb3b-beb4300dcd4f.roa (raw, json) Hash identifier: m492sWRfE8LplRj6r8xjfiZ77b0o76DhmZnTteJEAPc= Subject key identifier: 7F:4C:31:2B:1F:6B:CE:56:57:8B:27:AF:22:76:FA:E5:BD:90:D7:FA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E5FDF72012E8C3B72924C41C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/237c3bf2-7be3-3aed-bb3b-beb4300dcd4f.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 161.33.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:72:01:2e:8c:3b:72:92:4c:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=0fca3410-7a3a-4add-8f7c-a2f66003810a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bc:a4:de:c9:6b:6b:b4:90:d9:70:0e:54:92: d2:04:60:e0:48:b1:3d:62:bc:02:d2:89:40:ec:47: 8b:5b:0e:02:5b:32:13:8f:79:54:a7:04:28:e1:ec: 04:de:49:08:a1:1a:17:5c:a6:73:ca:79:5c:50:cf: 80:77:34:fa:09:55:fa:f7:fa:38:f8:cd:87:1c:17: 54:56:f8:c9:ea:e4:d5:bc:e2:c0:6b:f5:dc:5e:c1: 73:1e:6b:ae:fc:a1:16:db:45:4f:70:c4:80:e9:bf: 2d:43:bc:c7:cd:54:eb:12:d6:20:c9:6b:b7:45:ed: 39:d6:ee:22:fc:77:7e:1b:61:b9:83:0b:8c:83:bb: 8b:36:cb:a5:8c:67:8e:ce:a4:cc:20:75:5b:81:52: 78:73:23:1a:ce:fe:52:ac:44:05:a3:25:52:0a:91: 70:92:22:fb:af:e2:15:aa:43:5d:14:17:8f:28:f6: 20:10:a8:03:8f:26:c0:8e:25:4b:35:e1:55:31:a9: 61:47:35:6a:a4:0c:c8:c2:5d:47:c0:0b:ed:40:18: 61:1b:e5:02:be:d9:e1:79:22:07:37:72:29:9e:2e: 65:a8:36:bf:c4:16:93:06:84:bc:af:64:ae:c9:ec: c0:cb:8b:53:be:b6:73:5e:1d:3c:e2:aa:24:d7:99: 06:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4C:31:2B:1F:6B:CE:56:57:8B:27:AF:22:76:FA:E5:BD:90:D7:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/237c3bf2-7be3-3aed-bb3b-beb4300dcd4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:99:70:41:e9:3a:01:e0:8f:e4:de:0c:ae:b9:f7:09:ab:6f: 2e:d9:71:86:0b:c4:56:80:d6:a5:90:9d:46:97:92:32:48:2f: de:a3:d7:7f:60:aa:a2:10:1b:3b:79:cb:96:77:5f:82:5d:9a: e7:81:b7:f4:c5:17:1d:6c:a1:37:86:65:d3:7f:82:a7:74:fb: 28:d0:b8:de:67:2d:cb:ec:13:98:cc:3c:4d:57:ba:21:73:39: 1c:80:6c:6c:ef:e3:85:75:d2:08:55:4a:92:4e:55:b4:90:47: 8b:19:fd:18:69:b3:cd:82:e1:75:53:be:96:6a:84:67:0d:2d: 0b:7e:8c:3e:1a:4b:77:62:e2:4b:cc:ad:8a:4a:ab:65:97:e9: ee:c8:75:c0:69:c7:57:12:9e:52:e4:cc:40:0c:37:34:b6:d4: 08:b1:29:70:5e:70:71:ef:a3:dc:31:aa:1a:2c:46:fb:43:0a: 4a:fd:c5:e3:89:c2:77:6c:f0:d9:b4:c0:66:b6:ea:1d:63:c4: 4f:3e:ad:15:5d:b9:0a:86:d7:e1:2f:e7:0f:a0:06:48:e6:03: b6:85:4c:d6:2c:b8:aa:21:84:e8:73:98:f9:31:23:49:c5:44: f5:48:82:7e:8e:cd:32:20:6e:d0:ea:4f:80:89:d0:5b:90:03: 73:41:b5:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f33IBLow7cpJMQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk MGZjYTM0MTAtN2EzYS00YWRkLThmN2MtYTJmNjYwMDM4MTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLyk3slra7SQ2XAOVJLSBGDgSLE9YrwC0olA 7EeLWw4CWzITj3lUpwQo4ewE3kkIoRoXXKZzynlcUM+AdzT6CVX69/o4+M2HHBdU VvjJ6uTVvOLAa/XcXsFzHmuu/KEW20VPcMSA6b8tQ7zHzVTrEtYgyWu3Re051u4i /Hd+G2G5gwuMg7uLNsuljGeOzqTMIHVbgVJ4cyMazv5SrEQFoyVSCpFwkiL7r+IV qkNdFBePKPYgEKgDjybAjiVLNeFVMalhRzVqpAzIwl1HwAvtQBhhG+UCvtnheSIH N3Ipni5lqDa/xBaTBoS8r2SuyezAy4tTvrZzXh084qok15kGQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9MMSsfa85WV4snryJ2+uW9kNf6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjM3YzNiZjItN2JlMy0z YWVkLWJiM2ItYmViNDMwMGRjZDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFoSFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmZcEHpOgHgj+TeDK659wmrby7ZcYYLxFaA1qWQnUaXkjJIL96j139g qqIQGzt5y5Z3X4JdmueBt/TFFx1soTeGZdN/gqd0+yjQuN5nLcvsE5jMPE1XuiFz ORyAbGzv44V10ghVSpJOVbSQR4sZ/Rhps82C4XVTvpZqhGcNLQt+jD4aS3di4kvM rYpKq2WX6e7IdcBpx1cSnlLkzEAMNzS21AixKXBecHHvo9wxqhosRvtDCkr9xeOJ wnds8Nm0wGa26h1jxE8+rRVduQqG1+Ev5w+gBkjmA7aFTNYsuKohhOhzmPkxI0nF RPVIgn6OzTIgbtDqT4CJ0FuQA3NBtUE= -----END CERTIFICATE-----Generated at Mon Jul 13 02:45:17 2026 by rpki-client