$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47e4ed32-28fd-302b-a5e8-a94db9a4d64b.roa File: 47e4ed32-28fd-302b-a5e8-a94db9a4d64b.roa (raw, json) Hash identifier: i+ayMhJWKx5tEAQfFvrEgYxPy/a/PyMf3aPHd8H6kQE= Subject key identifier: E0:AF:BE:7A:BD:D8:66:3F:7E:36:84:A8:59:A6:58:3F:4E:46:C2:B9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DDD2076419E3E59EC52AE4D60 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47e4ed32-28fd-302b-a5e8-a94db9a4d64b.roa Signing time: Sun 17 May 2026 13:00:32 +0000 ROA not before: Sun 17 May 2026 13:00:32 +0000 ROA not after: Sat 15 Aug 2026 13:00:32 +0000 asID: 54253 IP address blocks: 161.33.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dd:20:76:41:9e:3e:59:ec:52:ae:4d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 17 13:00:32 2026 GMT Not After : Aug 15 13:00:32 2026 GMT Subject: CN=4d9a853d-dd6b-492e-91b6-69a86b21eea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d7:bf:5f:07:e1:c0:84:8d:5b:20:d1:15:cc: f8:20:6a:7a:59:82:86:83:04:e6:57:74:ed:02:8a: 79:71:22:ce:af:88:ef:fa:40:75:c0:6a:64:50:79: 50:37:02:c9:a1:92:d4:c0:00:7f:5b:0c:7e:38:2f: 8c:28:10:03:e6:ea:07:0f:f5:82:3a:b7:9c:bd:7b: 50:9b:d2:b8:17:17:7d:92:f2:34:9c:76:5d:02:0d: 07:9e:a6:d2:b2:0a:5b:93:db:67:cf:32:01:45:15: 8b:aa:43:53:28:41:89:83:e2:ea:5a:bc:cf:47:6d: 2d:91:6b:7f:6d:e6:37:a6:4d:61:78:85:40:c3:6d: 56:44:c4:03:0f:77:ab:8f:df:ed:ae:ff:5e:82:60: 66:e1:08:8e:dc:40:ae:15:c8:4a:74:e8:b7:17:72: f0:fc:8b:e1:e1:b4:d2:8b:ef:c2:1f:ba:f6:2c:22: cd:b8:bc:3b:61:b5:df:13:92:2e:fe:0b:d3:52:61: 58:aa:62:43:a5:91:ce:ab:8f:0f:ba:20:a1:fa:38: 6d:6a:c2:a5:c1:0a:c9:69:f0:10:36:59:51:af:48: 44:8f:4c:49:5e:ba:1c:0f:c8:11:60:e7:ae:e6:3c: c4:68:c4:cd:4e:d6:d8:c4:12:bd:cf:3f:2a:9d:2b: b0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AF:BE:7A:BD:D8:66:3F:7E:36:84:A8:59:A6:58:3F:4E:46:C2:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47e4ed32-28fd-302b-a5e8-a94db9a4d64b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:fc:3e:61:38:41:bb:44:2b:3f:4c:f1:8d:5f:50:16:a7:c7: f7:22:29:91:10:2f:a5:f0:c2:f0:6a:ba:15:6e:98:ad:c9:b7: aa:1f:5f:3c:34:53:0e:50:48:8b:08:e7:be:73:02:3f:82:25: 6d:44:d5:69:30:62:4e:a8:97:d6:5a:b9:96:41:a1:c8:e3:5d: 93:e5:83:2f:60:b1:c1:48:41:34:5c:43:d5:20:e0:ce:f2:b6: 4e:a3:0d:da:e4:09:8d:70:7e:7b:fc:45:23:7e:a9:ff:13:88: 5f:28:9a:58:03:23:20:25:31:31:e4:bd:73:4d:77:4c:cb:cb: c1:f7:05:d8:ef:2f:27:4a:7c:a2:c1:6b:8d:19:07:fd:c6:31: a6:71:45:75:bd:ad:f5:05:a1:be:31:a5:03:dc:b4:e9:3a:b6: 9d:62:51:6a:79:67:3d:6e:b5:d1:a8:3f:d8:bc:c6:90:2c:aa: 44:8d:e7:e0:e3:81:e5:ff:cf:3e:35:36:a3:93:a1:f6:97:b3: 42:6e:9b:f7:13:dc:4b:2b:fb:77:3a:f2:ea:80:e1:a5:f8:d0: a6:7c:c8:7d:67:53:38:7f:1a:0f:c0:69:88:b2:a2:31:e1:b2: 0b:63:c4:67:0d:dc:9d:ce:10:9d:92:46:10:0e:82:de:89:42: 11:79:81:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3dIHZBnj5Z7FKuTWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUxNzEzMDAzMloXDTI2MDgxNTEzMDAzMlowLzEtMCsGA1UEAxMk NGQ5YTg1M2QtZGQ2Yi00OTJlLTkxYjYtNjlhODZiMjFlZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkde/XwfhwISNWyDRFcz4IGp6WYKGgwTmV3Tt Aop5cSLOr4jv+kB1wGpkUHlQNwLJoZLUwAB/Wwx+OC+MKBAD5uoHD/WCOrecvXtQ m9K4Fxd9kvI0nHZdAg0HnqbSsgpbk9tnzzIBRRWLqkNTKEGJg+LqWrzPR20tkWt/ beY3pk1heIVAw21WRMQDD3erj9/trv9egmBm4QiO3ECuFchKdOi3F3Lw/Ivh4bTS i+/CH7r2LCLNuLw7YbXfE5Iu/gvTUmFYqmJDpZHOq48PuiCh+jhtasKlwQrJafAQ NllRr0hEj0xJXrocD8gRYOeu5jzEaMTNTtbYxBK9zz8qnSuwcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCvvnq92GY/fjaEqFmmWD9ORsK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDdlNGVkMzItMjhmZC0z MDJiLWE1ZTgtYTk0ZGI5YTRkNjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoSH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFT8PmE4QbtEKz9M8Y1fUBanx/ciKZEQL6XwwvBquhVumK3Jt6ofXzw0 Uw5QSIsI575zAj+CJW1E1WkwYk6ol9ZauZZBocjjXZPlgy9gscFIQTRcQ9Ug4M7y tk6jDdrkCY1wfnv8RSN+qf8TiF8omlgDIyAlMTHkvXNNd0zLy8H3BdjvLydKfKLB a40ZB/3GMaZxRXW9rfUFob4xpQPctOk6tp1iUWp5Zz1utdGoP9i8xpAsqkSN5+Dj geX/zz41NqOTofaXs0Jum/cT3Esr+3c68uqA4aX40KZ8yH1nUzh/Gg/AaYiyojHh sgtjxGcN3J3OEJ2SRhAOgt6JQhF5gf0= -----END CERTIFICATE-----Generated at Thu May 28 17:03:32 2026 by rpki-client