$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c893b725-ffce-34d7-87b0-7dbaad2f039c.roa File: c893b725-ffce-34d7-87b0-7dbaad2f039c.roa (raw, json) Hash identifier: 4vGOIzvlvg11mkebpfjPsAy2b3lLuFRdnNrYUiFnXZo= Subject key identifier: 63:C8:8F:4D:CD:37:0B:36:EA:0B:FE:4C:C8:AE:57:CB:D4:EC:B8:55 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CE4B901879D9DFC8CB000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c893b725-ffce-34d7-87b0-7dbaad2f039c.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 161.33.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e4:b9:01:87:9d:9d:fc:8c:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=64bb2db8-a7a1-4cfb-ac21-9253d118ab75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:67:24:ee:16:d7:9f:1b:e9:7e:d0:ad:3f:52: 2a:df:04:45:84:7b:57:19:4a:30:44:2e:f3:f0:d4: 36:5d:28:d2:1a:68:52:0a:97:d8:ae:6a:0f:79:a3: 19:38:4a:a3:d3:29:a1:34:b8:f8:04:dd:25:d2:e1: a8:41:fb:cb:95:10:a3:fe:4a:4c:1e:a4:51:f2:27: 30:74:e4:be:4c:97:7b:ff:be:e6:54:50:61:2a:42: e6:31:c4:b9:98:c5:0c:83:2c:aa:1e:51:c9:e5:99: 92:75:85:2c:e3:8b:b2:cb:80:3e:5c:78:a5:a8:33: 8b:3c:84:22:b4:27:14:94:43:f4:2c:78:b3:8f:f8: 9e:d2:1e:81:38:0b:16:0e:31:a8:af:f6:f0:7c:91: 66:10:9e:c4:0d:cd:e9:4d:99:d4:59:e7:62:7d:43: f5:f1:f7:dc:e9:ea:27:c7:74:65:80:32:ed:5d:3c: b1:60:31:37:54:98:f9:7d:b0:de:79:5a:8a:1c:d5: ce:83:b4:28:f0:6c:ec:fe:89:a8:ac:cd:ca:e4:d5: 78:5d:a9:86:91:cb:a7:12:b0:8e:b1:7c:ef:b7:bd: a5:48:cb:9c:86:e3:43:35:51:ba:3b:66:ec:f1:c5: ba:5c:33:65:40:11:9b:ae:3b:03:4f:aa:52:68:a4: bc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C8:8F:4D:CD:37:0B:36:EA:0B:FE:4C:C8:AE:57:CB:D4:EC:B8:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c893b725-ffce-34d7-87b0-7dbaad2f039c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:64:00:1d:16:0c:59:96:f0:2b:5a:d1:74:c8:86:78:e6:55: ca:42:68:1e:73:f8:b4:62:34:7e:fd:91:21:c8:db:1d:94:b2: 96:33:a1:f7:51:cb:e7:1e:a0:1d:ff:bf:f0:0d:27:f4:e2:7d: fa:8b:91:09:4f:97:90:61:71:1b:a9:ab:71:df:87:30:4b:5c: a3:98:01:00:85:ab:a7:64:91:0f:7c:2b:2b:d7:2d:ab:fa:60: c4:17:ed:8c:a3:9a:cc:b3:4a:de:cf:e9:7a:ca:99:55:46:b4: 7e:21:bf:2c:77:8d:8c:24:5b:91:a0:16:8f:f2:bb:dd:17:c8: 86:62:ce:63:32:94:a9:53:66:53:19:fa:d6:aa:83:6a:0c:7a: 15:5f:2d:3f:93:6e:9e:51:03:5f:c8:39:61:99:aa:ef:29:e4: 61:e4:73:32:09:0d:14:e5:7d:58:71:bd:08:f7:08:6b:bb:22: 07:b8:8c:06:2e:4b:d4:41:df:bc:47:c8:82:00:ce:a3:e2:b3: 37:7e:13:e5:85:65:4e:b5:5c:8a:10:17:50:3f:56:5c:e7:0e: 7b:5f:a2:c3:e4:87:14:9e:d9:ba:ed:dc:fc:2d:ef:6e:90:b7: 46:f9:e5:d2:bf:a8:6f:68:be:18:3e:da:88:f5:b1:8f:f0:53: b5:d1:f8:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOS5AYednfyMsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk NjRiYjJkYjgtYTdhMS00Y2ZiLWFjMjEtOTI1M2QxMThhYjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWck7hbXnxvpftCtP1Iq3wRFhHtXGUowRC7z 8NQ2XSjSGmhSCpfYrmoPeaMZOEqj0ymhNLj4BN0l0uGoQfvLlRCj/kpMHqRR8icw dOS+TJd7/77mVFBhKkLmMcS5mMUMgyyqHlHJ5ZmSdYUs44uyy4A+XHilqDOLPIQi tCcUlEP0LHizj/ie0h6BOAsWDjGor/bwfJFmEJ7EDc3pTZnUWedifUP18ffc6eon x3RlgDLtXTyxYDE3VJj5fbDeeVqKHNXOg7Qo8Gzs/omorM3K5NV4XamGkcunErCO sXzvt72lSMuchuNDNVG6O2bs8cW6XDNlQBGbrjsDT6pSaKS85QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPIj03NNws26gv+TMiuV8vU7LhVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzg5M2I3MjUtZmZjZS0z NGQ3LTg3YjAtN2RiYWFkMmYwMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSH9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdkAB0WDFmW8Cta0XTIhnjmVcpCaB5z+LRiNH79kSHI2x2UspYzofdR y+ceoB3/v/ANJ/TiffqLkQlPl5BhcRupq3HfhzBLXKOYAQCFq6dkkQ98KyvXLav6 YMQX7YyjmsyzSt7P6XrKmVVGtH4hvyx3jYwkW5GgFo/yu90XyIZizmMylKlTZlMZ +taqg2oMehVfLT+Tbp5RA1/IOWGZqu8p5GHkczIJDRTlfVhxvQj3CGu7Ige4jAYu S9RB37xHyIIAzqPiszd+E+WFZU61XIoQF1A/VlznDntfosPkhxSe2brt3Pwt726Q t0b55dK/qG9ovhg+2oj1sY/wU7XR+J4= -----END CERTIFICATE-----Generated at Wed Sep 23 01:43:23 2026 by rpki-client