$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/91659b14-1fa3-39a1-8710-69be8ad85679.roa File: 91659b14-1fa3-39a1-8710-69be8ad85679.roa (raw, json) Hash identifier: VQsB7MGNBcbMxUGI/FWCXXClvDkyyDpraxxPQmPV9vs= Subject key identifier: AD:22:70:80:37:A8:68:6B:59:08:0C:D5:1E:D2:AD:A2:A6:D8:C3:CA Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584F093CDDD5FCFF10C9B7E89F80 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/91659b14-1fa3-39a1-8710-69be8ad85679.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 162.33.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:dd:d5:fc:ff:10:c9:b7:e8:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=3e176eda-deab-46b0-8af9-4ebc4f780ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5f:c1:40:f3:46:34:74:fd:5d:ea:77:c9:ca: b8:3a:b4:8f:3a:74:49:ac:1a:51:3f:34:98:2f:6b: 40:33:2d:a6:fd:1f:54:b1:a4:de:bd:6c:1f:99:8c: 04:ae:c3:4b:39:61:db:65:06:e0:66:bd:c7:62:f9: b9:9c:89:ce:9f:3a:97:0b:eb:2c:75:02:b2:2f:f8: 64:db:37:e3:82:0d:18:3e:a7:4b:c9:bf:b4:69:5d: e6:9a:84:1e:b2:72:cb:87:19:f4:f0:ca:79:68:c4: e2:8a:69:03:9b:c3:a4:09:6a:53:19:11:72:0a:8c: 53:72:8f:0b:c6:ba:b4:34:b8:69:89:16:e6:60:e4: 2e:c3:db:f5:2b:03:70:84:77:cb:69:89:83:3e:f9: 7d:fe:e9:ca:9d:9f:9c:dd:a1:63:c8:b2:e1:47:28: 0d:c8:cf:30:f9:0a:30:00:f8:f8:e4:43:47:c4:3b: f6:aa:c0:40:fe:68:65:b5:80:d1:7c:34:f6:e4:54: e4:35:a8:c0:e6:67:3a:22:47:a7:93:70:c6:bb:39: 02:d0:a8:45:c3:81:99:1d:05:43:0f:89:1f:79:04: 0d:d1:d6:ae:4d:18:35:a7:7a:51:9b:5c:9b:8b:9d: 29:33:a3:4e:f6:d8:e4:3b:cd:07:4c:76:8c:e3:3f: 29:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:22:70:80:37:A8:68:6B:59:08:0C:D5:1E:D2:AD:A2:A6:D8:C3:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/91659b14-1fa3-39a1-8710-69be8ad85679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ec:16:3c:64:af:85:fa:16:94:00:85:bc:f0:aa:6c:7e:4f: 2d:8c:e4:4c:ba:6c:3e:44:52:74:99:3f:b1:85:53:c3:99:10: 6d:db:4a:b7:a1:66:ae:1a:79:79:0b:8e:09:fa:ed:87:fa:c0: 5a:48:12:24:b2:24:f8:35:3c:ea:c2:8b:de:fb:b7:df:63:a2: 42:21:87:05:95:0f:5e:8e:07:0a:0f:4e:f3:ad:9f:85:b7:9c: 98:bb:6f:90:1c:87:44:ba:7f:36:75:e1:31:66:b0:6b:9d:2b: 49:4f:86:80:20:d0:e1:f8:30:58:1d:a3:d1:bc:23:be:8b:ee: 7f:89:dc:f7:1b:fb:b6:01:ca:d1:9b:38:03:e3:97:e9:b8:1c: f4:97:f9:8e:af:99:b8:e6:81:7a:f2:82:47:46:75:0c:4c:b8: 1a:e2:64:0d:c5:1b:6d:78:1e:9d:03:3f:c3:6b:a5:be:f0:09: 9f:fd:6f:e6:72:dc:9b:7f:57:89:30:19:d3:84:82:18:92:24: 2e:c3:e1:4c:c8:98:46:54:96:81:48:78:15:b1:f4:5f:57:c5: 78:8c:d7:73:66:3b:82:7e:c6:2a:f1:07:94:47:c5:44:da:70: b4:cf:54:61:8a:36:dc:92:05:7a:f2:07:a3:0b:95:da:55:97: dd:4e:b9:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPN3V/P8Qybfon4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk M2UxNzZlZGEtZGVhYi00NmIwLThhZjktNGViYzRmNzgwZmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1/BQPNGNHT9Xep3ycq4OrSPOnRJrBpRPzSY L2tAMy2m/R9UsaTevWwfmYwErsNLOWHbZQbgZr3HYvm5nInOnzqXC+ssdQKyL/hk 2zfjgg0YPqdLyb+0aV3mmoQesnLLhxn08Mp5aMTiimkDm8OkCWpTGRFyCoxTco8L xrq0NLhpiRbmYOQuw9v1KwNwhHfLaYmDPvl9/unKnZ+c3aFjyLLhRygNyM8w+Qow APj45ENHxDv2qsBA/mhltYDRfDT25FTkNajA5mc6Ikenk3DGuzkC0KhFw4GZHQVD D4kfeQQN0dauTRg1p3pRm1ybi50pM6NO9tjkO80HTHaM4z8pvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0icIA3qGhrWQgM1R7SraKm2MPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvOTE2NTliMTQtMWZhMy0z OWExLTg3MTAtNjliZThhZDg1Njc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/sFjxkr4X6FpQAhbzwqmx+Ty2M5Ey6bD5EUnSZP7GFU8OZEG3bSreh Zq4aeXkLjgn67Yf6wFpIEiSyJPg1POrCi977t99jokIhhwWVD16OBwoPTvOtn4W3 nJi7b5Ach0S6fzZ14TFmsGudK0lPhoAg0OH4MFgdo9G8I76L7n+J3Pcb+7YBytGb OAPjl+m4HPSX+Y6vmbjmgXrygkdGdQxMuBriZA3FG214Hp0DP8Nrpb7wCZ/9b+Zy 3Jt/V4kwGdOEghiSJC7D4UzImEZUloFIeBWx9F9XxXiM13NmO4J+xirxB5RHxUTa cLTPVGGKNtySBXryB6MLldpVl91OuTE= -----END CERTIFICATE-----Generated at Sun Sep 27 00:16:36 2026 by rpki-client