$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c893b725-ffce-34d7-87b0-7dbaad2f039c.roa File: c893b725-ffce-34d7-87b0-7dbaad2f039c.roa (raw, json) Hash identifier: feUPmqqU+Ek3dlYeJK9AJ+QIRlg83+EC39siiU1dEAE= Subject key identifier: 91:D1:59:65:0F:85:CB:89:ED:D6:49:A9:92:6D:70:25:DF:45:03:77 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8AC540D42CBE4E475CCE8200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c893b725-ffce-34d7-87b0-7dbaad2f039c.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 161.33.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:40:d4:2c:be:4e:47:5c:ce:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=36948edd-fcb0-46cb-8adb-859e94b4aecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:0e:6e:63:35:67:4d:f5:ec:cb:53:d8:8c: a4:eb:68:e1:34:00:01:1d:7e:f1:1e:48:0f:e9:f3: 1f:40:6e:56:90:7e:04:73:38:42:ba:7f:7e:97:d7: f6:83:b6:91:cd:10:b1:2a:06:72:42:8f:f1:28:8f: a0:05:4a:b7:26:7b:7f:b5:76:ae:08:0f:39:06:95: a1:3f:c4:b5:a4:74:1a:1b:03:3a:83:1b:1e:fd:62: e3:7f:4c:ce:42:40:88:67:58:77:c3:72:b6:29:80: b2:c9:f3:1d:62:78:71:69:fa:a3:12:75:d4:e1:c3: 63:9d:cf:0d:8f:1b:7a:b4:8b:e2:c1:1c:21:fe:9a: fb:2d:1b:63:b3:16:52:a4:aa:b9:3c:8f:0c:f1:f3: d2:72:82:ff:3d:98:51:73:00:eb:33:dd:d3:fa:66: 2c:f7:c9:03:a2:4a:3a:03:2a:53:b6:e2:38:90:62: 0f:f1:f6:b6:17:8f:8b:c4:1d:6e:6c:b9:84:43:9c: c6:ab:82:46:1e:fc:35:ef:6d:6d:12:f2:81:38:10: 21:d6:48:2c:23:bc:65:9e:5a:53:d4:ed:21:d2:ab: fe:bd:02:27:c3:ae:81:83:c9:9c:6c:1d:3b:8f:61: 58:ac:ed:f1:16:7d:04:18:75:d2:f6:df:13:9d:bf: 18:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D1:59:65:0F:85:CB:89:ED:D6:49:A9:92:6D:70:25:DF:45:03:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c893b725-ffce-34d7-87b0-7dbaad2f039c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.33.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:dd:c9:07:a0:07:f4:ff:ff:dc:e0:7c:87:0c:97:d4:79:48: 0b:1c:1f:cf:75:97:dd:48:60:4d:73:5c:31:2f:39:e2:27:b3: d7:f0:12:02:83:a9:c4:f8:03:81:0d:da:64:48:ec:69:d7:10: ec:c9:47:6b:88:6c:6a:61:3b:82:99:90:bd:52:03:ae:ed:e9: 24:4b:a1:ec:24:4d:cc:41:ed:ca:3f:af:93:f9:e5:d8:3c:95: a8:8a:38:ec:0e:7a:53:c2:80:fc:50:04:5e:d8:79:f0:84:dd: ed:08:d7:5c:c8:56:88:4e:98:92:fb:72:19:2c:ae:97:39:77: 3f:08:9a:40:ff:d4:88:25:15:2d:01:03:ce:9a:39:d5:5e:38: 04:d6:a1:ec:a6:50:43:79:e8:d7:c2:27:64:46:4f:5f:94:f2: 41:e8:c5:a1:9e:4a:27:73:12:6a:35:c6:07:74:49:cd:f2:ec: 82:1a:88:a6:6c:12:fd:ea:12:0d:7e:44:9c:65:dc:53:28:53: c9:c5:d3:79:07:25:ea:98:12:06:a0:26:c5:bd:8d:60:8e:fd: 4a:99:b3:ed:c5:13:86:96:3e:c0:da:d4:e8:46:47:58:bc:92: 9f:41:b5:07:80:b8:bb:3d:93:d5:2f:0a:68:4e:40:d0:ea:62: d4:32:53:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxUDULL5OR1zOggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk MzY5NDhlZGQtZmNiMC00NmNiLThhZGItODU5ZTk0YjRhZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTsObmM1Z0317MtT2Iyk62jhNAABHX7xHkgP 6fMfQG5WkH4EczhCun9+l9f2g7aRzRCxKgZyQo/xKI+gBUq3Jnt/tXauCA85BpWh P8S1pHQaGwM6gxse/WLjf0zOQkCIZ1h3w3K2KYCyyfMdYnhxafqjEnXU4cNjnc8N jxt6tIviwRwh/pr7LRtjsxZSpKq5PI8M8fPScoL/PZhRcwDrM93T+mYs98kDoko6 AypTtuI4kGIP8fa2F4+LxB1ubLmEQ5zGq4JGHvw1721tEvKBOBAh1kgsI7xlnlpT 1O0h0qv+vQInw66Bg8mcbB07j2FYrO3xFn0EGHXS9t8Tnb8YpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHRWWUPhcuJ7dZJqZJtcCXfRQN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzg5M2I3MjUtZmZjZS0z NGQ3LTg3YjAtN2RiYWFkMmYwMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSH9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGndyQegB/T//9zgfIcMl9R5SAscH891l91IYE1zXDEvOeIns9fwEgKD qcT4A4EN2mRI7GnXEOzJR2uIbGphO4KZkL1SA67t6SRLoewkTcxB7co/r5P55dg8 laiKOOwOelPCgPxQBF7YefCE3e0I11zIVohOmJL7chksrpc5dz8ImkD/1IglFS0B A86aOdVeOATWoeymUEN56NfCJ2RGT1+U8kHoxaGeSidzEmo1xgd0Sc3y7IIaiKZs Ev3qEg1+RJxl3FMoU8nF03kHJeqYEgagJsW9jWCO/UqZs+3FE4aWPsDa1OhGR1i8 kp9BtQeAuLs9k9UvCmhOQNDqYtQyU5Q= -----END CERTIFICATE-----Generated at Wed May 13 07:10:14 2026 by rpki-client