$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/33c676ca-df2d-3c4a-b51d-cd4839b41487.roa File: 33c676ca-df2d-3c4a-b51d-cd4839b41487.roa (raw, json) Hash identifier: 9XEo8i9MaXxvY8aflJr5c4GV+TEtpKls+EKUNzcSn3U= Subject key identifier: AE:DB:AE:C7:97:06:A5:EF:3B:1C:1A:00:E8:C4:3D:DE:5B:10:F7:8A Certificate issuer: /CN=bdda8455-afd7-4cb7-ba3b-5fb47c574608 Certificate serial: 010D0C9F4328584FAA057A0570C9CEBB3B2D9430 Authority key identifier: 9C:DB:D6:5E:7D:A9:FA:78:E3:BE:33:2A:CE:82:DB:56:0E:6A:05:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/33c676ca-df2d-3c4a-b51d-cd4839b41487.roa Signing time: Thu 29 Oct 2026 15:13:54 +0000 ROA not before: Thu 29 Oct 2026 15:13:54 +0000 ROA not after: Wed 27 Jan 2027 16:13:54 +0000 asID: 396982 IP address blocks: 162.52.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/bdda8455-afd7-4cb7-ba3b-5fb47c574608.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/bdda8455-afd7-4cb7-ba3b-5fb47c574608.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:aa:05:7a:05:70:c9:ce:bb:3b:2d:94:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdda8455-afd7-4cb7-ba3b-5fb47c574608 Validity Not Before: Oct 29 15:13:54 2026 GMT Not After : Jan 27 16:13:54 2027 GMT Subject: CN=e51ad3f1-2386-4e0c-a5d9-1b3d6a53019c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:16:89:fb:bc:54:de:ac:7a:bf:d7:0c:c8: 04:8b:b5:e0:b2:53:c8:05:6b:a1:66:fa:eb:f5:85: db:df:ed:f5:fc:4b:03:87:49:80:6c:de:b5:a2:49: ba:51:b3:93:c1:45:64:36:c6:6f:ce:e8:c2:ec:d7: 2a:88:80:3c:d2:4f:fc:60:ca:e9:eb:a2:55:3a:5d: 45:f7:fe:95:13:5b:d1:08:5b:a4:f6:a1:02:95:7b: 05:85:d6:42:91:a1:5d:86:08:c4:96:37:d3:9e:f3: 31:b6:49:4a:43:53:62:8f:8c:8b:42:99:56:bb:0e: 2e:a2:8b:07:b5:53:a9:5b:9f:12:7d:63:47:cd:e0: c5:52:14:0b:6a:8f:e3:30:e4:78:be:e8:65:1f:a2: cc:91:a6:0b:ff:e7:6c:15:23:58:ac:06:d5:6f:b4: 4f:1f:3e:b6:b7:9b:b0:e4:40:a8:6d:9d:e2:a1:b9: d6:be:79:44:42:82:78:d2:9f:01:9d:00:03:50:46: 8e:d3:1c:c3:13:ea:ee:68:9a:ad:ab:4b:ef:76:55: c3:ba:37:13:97:10:ec:81:e5:13:64:95:b7:90:47: fe:05:3d:71:4d:6c:a8:c7:ee:27:1f:14:bd:95:69: 1a:75:97:61:fc:4d:7e:7c:2d:60:10:24:96:64:3d: 2a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DB:AE:C7:97:06:A5:EF:3B:1C:1A:00:E8:C4:3D:DE:5B:10:F7:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/33c676ca-df2d-3c4a-b51d-cd4839b41487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608/bdda8455-afd7-4cb7-ba3b-5fb47c574608.crl X509v3 Authority Key Identifier: keyid:9C:DB:D6:5E:7D:A9:FA:78:E3:BE:33:2A:CE:82:DB:56:0E:6A:05:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bdda8455-afd7-4cb7-ba3b-5fb47c574608.cer sbgp-ipAddrBlock: critical IPv4: 162.52.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b8:99:d0:09:71:da:05:96:3f:06:97:fb:b4:38:ed:cf:b6: 63:9c:9b:dc:d6:47:fd:04:99:d0:42:81:d1:6b:e8:1f:e7:d4: 85:b9:de:85:6a:c7:a0:ef:f7:c2:50:21:a6:1b:1e:e7:22:8f: fa:0d:be:a3:4e:eb:e5:0f:d8:70:27:89:be:f0:ab:62:ea:a1: 32:6d:a5:32:05:c5:e9:d9:18:8d:9e:51:5c:85:8b:b8:d7:d4: 79:ac:30:aa:ce:53:26:d9:72:93:2e:f9:b7:a5:58:0f:6c:4c: 90:21:45:b5:07:92:1e:e9:66:42:29:df:f6:e3:a8:58:f5:44: 1c:40:5d:e4:ba:4e:6d:42:80:a0:67:fd:40:c5:0a:65:0d:3b: ce:60:1f:75:23:d0:16:15:95:fe:d8:94:77:20:41:1a:57:8d: 38:7d:b3:f7:55:6f:08:b5:2a:89:0c:34:2a:8a:3d:88:ed:0a: 7f:b1:cb:5b:4a:42:6e:08:83:c4:dc:3a:50:4c:6a:6e:2e:06: 8b:80:a2:41:88:b5:77:ba:f9:f6:8c:ec:e8:a1:6c:c0:96:08: ec:e2:8c:43:28:ac:5a:26:6b:7a:a9:7d:c7:3d:e7:1e:5d:be: fe:d4:23:7c:32:75:96:c1:45:06:73:3f:06:32:26:43:c4:5c: 44:35:62:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+qBXoFcMnOuzstlDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkYTg0NTUtYWZkNy00Y2I3LWJhM2ItNWZiNDdjNTc0 NjA4MB4XDTI2MTAyOTE1MTM1NFoXDTI3MDEyNzE2MTM1NFowLzEtMCsGA1UEAxMk ZTUxYWQzZjEtMjM4Ni00ZTBjLWE1ZDktMWIzZDZhNTMwMTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC8Wifu8VN6ser/XDMgEi7XgslPIBWuhZvrr 9YXb3+31/EsDh0mAbN61okm6UbOTwUVkNsZvzujC7NcqiIA80k/8YMrp66JVOl1F 9/6VE1vRCFuk9qEClXsFhdZCkaFdhgjEljfTnvMxtklKQ1Nij4yLQplWuw4uoosH tVOpW58SfWNHzeDFUhQLao/jMOR4vuhlH6LMkaYL/+dsFSNYrAbVb7RPHz62t5uw 5ECobZ3iobnWvnlEQoJ40p8BnQADUEaO0xzDE+ruaJqtq0vvdlXDujcTlxDsgeUT ZJW3kEf+BT1xTWyox+4nHxS9lWkadZdh/E1+fC1gECSWZD0qPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7brseXBqXvOxwaAOjEPd5bEPeKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9iZGRh ODQ1NS1hZmQ3LTRjYjctYmEzYi01ZmI0N2M1NzQ2MDgvMzNjNjc2Y2EtZGYyZC0z YzRhLWI1MWQtY2Q0ODM5YjQxNDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYmRkYTg0NTUtYWZkNy00Y2I3LWJh M2ItNWZiNDdjNTc0NjA4L2JkZGE4NDU1LWFmZDctNGNiNy1iYTNiLTVmYjQ3YzU3 NDYwOC5jcmwwHwYDVR0jBBgwFoAUnNvWXn2p+njjvjMqzoLbVg5qBbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9iZGRhODQ1NS1hZmQ3LTRjYjctYmEzYi01ZmI0 N2M1NzQ2MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBojQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFi4mdAJcdoFlj8Gl/u0OO3PtmOcm9zWR/0EmdBCgdFr6B/n1IW53oVq x6Dv98JQIaYbHucij/oNvqNO6+UP2HAnib7wq2LqoTJtpTIFxenZGI2eUVyFi7jX 1HmsMKrOUybZcpMu+belWA9sTJAhRbUHkh7pZkIp3/bjqFj1RBxAXeS6Tm1CgKBn /UDFCmUNO85gH3Uj0BYVlf7YlHcgQRpXjTh9s/dVbwi1KokMNCqKPYjtCn+xy1tK Qm4Ig8TcOlBMam4uBouAokGItXe6+faM7OihbMCWCOzijEMorFoma3qpfcc95x5d vv7UI3wydZbBRQZzPwYyJkPEXEQ1YlE= -----END CERTIFICATE-----Generated at Sun Nov 15 10:34:11 2026 by rpki-client