$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/5b2478f9-1c54-3a35-8291-2f671808f6c0.roa File: 5b2478f9-1c54-3a35-8291-2f671808f6c0.roa (raw, json) Hash identifier: lJj0rU7np+ymZMqIFr1oyiOploV+gzpojIfzrujKPFw= Subject key identifier: 99:41:F5:7C:F0:5F:9F:B0:01:8B:84:65:A0:D0:88:A6:31:02:BE:32 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584F093CD984A26DFA58DA3E27C0 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/5b2478f9-1c54-3a35-8291-2f671808f6c0.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 162.33.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d9:84:a2:6d:fa:58:da:3e:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=6613b63d-243a-4b0a-bbb4-1cf8ba2e758c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e1:09:4e:38:fb:a7:fb:f1:ae:06:65:51:15: 02:e8:86:2e:20:60:29:3c:9d:37:3c:48:80:6c:25: 03:28:64:ee:37:b4:08:63:72:79:d2:17:ab:ac:0e: 2b:43:d3:de:5f:c1:e8:5e:57:3a:ff:e4:a4:20:c8: e5:52:f3:14:eb:8d:d7:20:f6:b2:e4:ac:d7:80:1e: 8d:44:7b:a8:ce:5a:c8:06:65:78:e5:9e:57:64:6d: ad:f6:5a:d9:58:2d:b4:a9:e3:11:07:3f:28:d1:39: c8:88:8b:10:b6:58:e1:f7:de:36:af:7f:e4:e8:1c: f2:87:ba:2c:3f:2b:e9:eb:af:85:82:55:09:5d:fd: a2:15:86:ee:a7:88:ef:28:67:51:a2:44:42:80:22: 68:a8:0a:68:09:d6:78:20:50:67:bd:c0:f3:ad:03: ea:9f:ae:de:7c:3b:3c:aa:72:f8:36:98:5b:8a:76: 73:50:9a:de:2f:09:27:7a:89:82:be:5e:8c:73:76: e1:6f:10:ec:fd:bb:24:30:ab:4c:cf:cf:c0:f2:89: ab:58:46:cb:a9:15:20:52:9d:1e:51:05:bb:a3:ee: 91:7b:d9:de:5a:2e:fd:2f:a4:df:ce:2a:38:f4:4d: df:46:c5:46:11:a9:37:6f:24:e2:e1:5a:3c:64:63: cf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:41:F5:7C:F0:5F:9F:B0:01:8B:84:65:A0:D0:88:A6:31:02:BE:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/5b2478f9-1c54-3a35-8291-2f671808f6c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:59:79:06:e8:b3:f2:45:ea:58:fe:2d:24:90:28:f9:af:5a: 95:9d:b4:1a:66:d5:40:c1:43:bc:42:f5:89:80:4f:60:4f:48: 47:b5:56:81:24:5a:a2:d3:68:e3:d8:a9:73:f9:ea:4c:34:54: 2b:4c:ca:3a:e7:eb:6b:5e:ba:d9:25:08:f9:53:9a:a6:24:a5: 9d:13:4d:29:0a:0e:c4:28:38:49:ca:fd:41:5a:e5:90:7a:0e: 1f:ca:9e:d3:af:0f:b4:d5:11:85:e5:61:cd:64:cc:a0:8f:7d: 2b:22:fa:67:16:b7:62:b8:61:13:5f:9d:50:57:47:4f:ae:fc: 8a:54:16:a4:5b:51:91:04:12:6d:1a:99:61:51:4f:32:b9:08: ba:72:68:b7:3a:50:b9:a2:17:4f:6c:6c:d8:90:41:f2:c3:e2: d3:37:04:26:42:48:1c:07:f2:9c:c1:8d:6e:ff:35:da:94:0d: e5:76:f8:df:77:9a:d5:34:55:2e:f4:c7:66:44:2c:9f:f0:08: df:0f:85:15:ab:a1:08:79:91:35:e3:16:40:d0:c6:17:ac:e1: 61:36:ce:7b:02:86:6f:f0:08:b7:a1:72:f3:72:71:37:48:58: 9e:25:34:4a:f2:c2:e3:a6:3b:0f:1e:d4:db:ee:67:f6:9d:22: b4:4f:22:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNmEom36WNo+J8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NjYxM2I2M2QtMjQzYS00YjBhLWJiYjQtMWNmOGJhMmU3NThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+EJTjj7p/vxrgZlURUC6IYuIGApPJ03PEiA bCUDKGTuN7QIY3J50herrA4rQ9PeX8HoXlc6/+SkIMjlUvMU643XIPay5KzXgB6N RHuozlrIBmV45Z5XZG2t9lrZWC20qeMRBz8o0TnIiIsQtljh9942r3/k6Bzyh7os Pyvp66+FglUJXf2iFYbup4jvKGdRokRCgCJoqApoCdZ4IFBnvcDzrQPqn67efDs8 qnL4NphbinZzUJreLwkneomCvl6Mc3bhbxDs/bskMKtMz8/A8omrWEbLqRUgUp0e UQW7o+6Re9neWi79L6Tfzio49E3fRsVGEak3byTi4Vo8ZGPPvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlB9XzwX5+wAYuEZaDQiKYxAr4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvNWIyNDc4ZjktMWM1NC0z YTM1LTgyOTEtMmY2NzE4MDhmNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJZeQbos/JF6lj+LSSQKPmvWpWdtBpm1UDBQ7xC9YmAT2BPSEe1VoEk WqLTaOPYqXP56kw0VCtMyjrn62teutklCPlTmqYkpZ0TTSkKDsQoOEnK/UFa5ZB6 Dh/KntOvD7TVEYXlYc1kzKCPfSsi+mcWt2K4YRNfnVBXR0+u/IpUFqRbUZEEEm0a mWFRTzK5CLpyaLc6ULmiF09sbNiQQfLD4tM3BCZCSBwH8pzBjW7/NdqUDeV2+N93 mtU0VS70x2ZELJ/wCN8PhRWroQh5kTXjFkDQxhes4WE2znsChm/wCLehcvNycTdI WJ4lNErywuOmOw8e1NvuZ/adIrRPIsg= -----END CERTIFICATE-----Generated at Tue Oct 6 20:35:28 2026 by rpki-client