$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/291f72af-3eb9-3107-a9f9-d5349b257427.roa File: 291f72af-3eb9-3107-a9f9-d5349b257427.roa (raw, json) Hash identifier: WY11WHkS2Q0M4PHlD6k6Ei2KTKtCnSaURZ61pX3hIvw= Subject key identifier: D4:A9:E7:CE:2B:95:A3:47:B8:B8:C3:58:DA:69:7D:E2:E6:16:BB:D1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6B0A0BAD56F2B102AABC0800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/291f72af-3eb9-3107-a9f9-d5349b257427.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 161.33.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:0b:ad:56:f2:b1:02:aa:bc:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=7fc67d3f-88f6-4c4a-85a6-fa64e310a8c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:74:4b:88:00:e3:0a:7d:00:80:7f:7a:f0:1d: b4:50:e9:b0:31:22:ff:e5:5e:ec:6e:79:7b:76:18: 3e:e1:6f:c2:2a:2c:9e:a4:94:da:81:69:a9:78:0d: cc:a5:ec:cf:43:8a:0b:11:f8:ae:dc:9a:6d:61:ba: 6d:fd:37:95:36:00:48:4c:cf:91:20:b6:e4:b9:ee: 21:d0:a5:cc:b3:5e:2f:8d:50:b4:c7:f1:69:8d:2a: 16:81:3f:41:83:56:be:af:3a:08:d1:7f:b8:a1:2b: 80:d2:1b:09:16:57:57:09:c3:fd:f9:99:14:28:4b: 2c:b7:58:cd:4f:8c:ca:0a:51:e4:8d:71:15:30:53: 64:97:98:c2:6c:ba:e4:c5:09:59:7c:10:00:5c:76: e8:bc:9c:77:51:8c:e5:d5:18:be:4c:07:09:19:0d: 5f:ce:a1:86:e1:e5:25:9f:56:4f:0e:85:78:98:a0: d9:64:a8:82:ff:87:e9:10:db:5f:4a:a0:83:98:9b: d2:2a:66:9c:32:83:39:de:94:98:6d:be:dc:b7:25: ad:bd:a4:b0:a2:6b:20:6c:fd:64:21:0f:97:22:ec: 3f:2b:7e:cc:50:e3:b6:51:15:e0:7b:38:8c:db:22: 11:a6:d4:7a:9d:81:97:ef:16:9a:99:cd:ca:8e:d0: 52:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A9:E7:CE:2B:95:A3:47:B8:B8:C3:58:DA:69:7D:E2:E6:16:BB:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/291f72af-3eb9-3107-a9f9-d5349b257427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:24:a3:be:bd:5e:64:dd:bb:01:0c:97:a6:ba:7c:c4:43:5c: 84:0b:03:b0:c1:bb:6d:9e:18:50:95:a3:65:bd:b0:25:10:f4: 1b:df:6d:e3:39:06:0a:ef:56:0e:d6:f5:22:5c:5e:7d:73:6a: 9f:2f:03:c2:0e:f9:ce:87:d7:cd:46:e1:f8:b0:3e:94:b9:b2: cb:e3:d8:a2:4e:c6:ac:8c:f9:bd:59:62:32:c4:4a:b3:8b:86: 06:83:f5:0e:3b:11:88:6e:61:7c:c4:40:9a:29:94:63:a0:53: 49:68:ef:d2:b5:da:f5:1e:72:f2:0b:1d:ba:b1:47:c1:51:2c: cf:47:95:3d:8f:9e:cc:bd:4e:d0:14:7e:ac:36:1f:9e:e0:51: 36:70:d7:76:b8:21:72:32:c9:89:24:3d:87:56:a4:30:f9:64: 02:bb:40:da:42:71:25:32:69:c6:ae:d1:41:47:f1:99:bb:4c: 9b:6e:80:3c:31:d8:b6:04:99:33:31:a0:6c:4a:82:dc:ce:90: b1:4d:88:7e:34:bf:11:89:fb:16:07:02:58:63:f8:cd:ff:ff: bb:fe:37:4f:1f:62:23:73:05:5c:22:20:8b:10:27:40:83:d7: b2:4f:7f:1c:a3:30:a8:70:a7:5f:9c:d5:18:eb:42:30:01:fb: 52:04:82:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCgutVvKxAqq8CAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk N2ZjNjdkM2YtODhmNi00YzRhLTg1YTYtZmE2NGUzMTBhOGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXRLiADjCn0AgH968B20UOmwMSL/5V7sbnl7 dhg+4W/CKiyepJTagWmpeA3MpezPQ4oLEfiu3JptYbpt/TeVNgBITM+RILbkue4h 0KXMs14vjVC0x/FpjSoWgT9Bg1a+rzoI0X+4oSuA0hsJFldXCcP9+ZkUKEsst1jN T4zKClHkjXEVMFNkl5jCbLrkxQlZfBAAXHbovJx3UYzl1Ri+TAcJGQ1fzqGG4eUl n1ZPDoV4mKDZZKiC/4fpENtfSqCDmJvSKmacMoM53pSYbb7ctyWtvaSwomsgbP1k IQ+XIuw/K37MUOO2URXgeziM2yIRptR6nYGX7xaamc3KjtBSSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSp584rlaNHuLjDWNppfeLmFrvRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjkxZjcyYWYtM2ViOS0z MTA3LWE5ZjktZDUzNDliMjU3NDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoSHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwko769XmTduwEMl6a6fMRDXIQLA7DBu22eGFCVo2W9sCUQ9BvfbeM5 BgrvVg7W9SJcXn1zap8vA8IO+c6H181G4fiwPpS5ssvj2KJOxqyM+b1ZYjLESrOL hgaD9Q47EYhuYXzEQJoplGOgU0lo79K12vUecvILHbqxR8FRLM9HlT2Pnsy9TtAU fqw2H57gUTZw13a4IXIyyYkkPYdWpDD5ZAK7QNpCcSUyacau0UFH8Zm7TJtugDwx 2LYEmTMxoGxKgtzOkLFNiH40vxGJ+xYHAlhj+M3//7v+N08fYiNzBVwiIIsQJ0CD 17JPfxyjMKhwp1+c1RjrQjAB+1IEgg4= -----END CERTIFICATE-----Generated at Mon Jul 13 02:50:54 2026 by rpki-client