$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/5b2478f9-1c54-3a35-8291-2f671808f6c0.roa File: 5b2478f9-1c54-3a35-8291-2f671808f6c0.roa (raw, json) Hash identifier: SE6v3jAbKTumlH91GAipN4hKTguz87/gZK0KPv+MXjY= Subject key identifier: B6:AA:11:F8:91:5E:E3:F6:3B:16:B2:B5:A9:EF:83:1E:57:CF:E4:02 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584D869545271047962EA820DE00 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/5b2478f9-1c54-3a35-8291-2f671808f6c0.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 16509 IP address blocks: 162.33.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:45:27:10:47:96:2e:a8:20:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=4b9f80c8-0343-4885-8012-8cfe3544ccb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:94:3b:1d:b5:0a:9d:a1:3a:3d:0d:d5:81:89: bf:78:14:19:91:d4:35:b0:c7:d2:95:3f:5d:7b:6a: bb:68:f5:b3:32:9b:e4:06:ab:1b:44:73:08:90:8d: 76:37:26:da:31:fe:ce:d1:9c:cb:15:a3:8d:8c:1e: 0a:21:e7:e8:53:74:57:09:9a:b5:63:0a:34:e5:9e: 27:ce:d3:06:9d:cb:58:c1:df:14:02:5f:7a:9a:f8: 3c:f2:d4:66:ac:30:36:28:fa:f8:ba:52:99:19:39: 89:b8:72:99:77:5a:26:b5:48:26:14:20:3d:cd:ff: 38:b0:eb:dc:93:56:41:16:28:89:29:3e:62:4e:96: 6f:18:8f:7e:a2:4d:39:a5:45:a3:a4:2d:91:c9:ab: 48:da:3f:71:81:02:15:43:9f:26:9d:dc:5a:c0:50: 3a:e2:5d:74:35:18:55:dc:54:5d:52:df:64:57:78: b5:cc:00:1f:2a:cb:3f:0f:b3:e7:80:66:cd:69:23: 7a:6e:e7:19:91:e4:76:42:23:52:67:63:17:3c:f6: 4b:d6:32:2c:09:7e:8e:43:bb:3e:a1:c3:5a:52:ef: 3a:f3:62:e2:09:16:e1:91:f6:63:90:62:74:da:4d: 0d:d5:c3:df:0e:6b:7f:c7:e0:04:dd:69:45:1b:4d: 1e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AA:11:F8:91:5E:E3:F6:3B:16:B2:B5:A9:EF:83:1E:57:CF:E4:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/5b2478f9-1c54-3a35-8291-2f671808f6c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c8:55:d5:eb:07:5c:ed:d3:c1:0c:7d:05:61:ff:c0:7f:f9: 22:7b:07:49:53:89:41:14:90:d8:fd:94:d2:74:f3:e8:5a:9e: 08:b4:f6:bf:45:89:91:3e:39:0b:23:da:04:74:a9:e5:f0:65: 79:05:21:2e:53:81:3b:b2:a3:fa:d1:5c:6f:66:1c:e1:b2:39: 99:08:bb:77:c2:6c:21:e6:19:ee:f0:ac:a3:c2:ad:10:ea:b6: cc:fe:20:34:ce:83:fc:fd:62:4d:af:18:e4:28:65:9a:28:c7: e8:3f:40:2b:85:ea:f4:95:90:da:6a:e2:25:ab:3b:56:09:ea: f7:a4:5e:b5:9c:08:77:d7:87:42:c0:1e:8c:b0:07:b7:25:30: 26:bf:8a:f1:80:84:46:b7:ee:e7:b5:d5:7f:33:7c:6c:2e:e4: 7d:0a:cd:ff:03:23:50:90:10:76:d9:c2:5a:9d:5b:e6:43:46: cb:bf:f4:cf:db:08:48:60:61:b0:2f:f8:6b:30:a1:94:7e:74: d5:4a:f6:01:da:33:12:6d:d7:68:5b:59:27:9b:95:fd:3e:b6: 08:05:c4:45:2d:28:1d:c9:d6:34:9f:21:85:83:a9:c7:2d:83: ce:0b:97:86:70:23:ef:f2:a7:29:db:b1:4f:72:ac:e6:d5:2c: 25:32:46:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUUnEEeWLqgg3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NGI5ZjgwYzgtMDM0My00ODg1LTgwMTItOGNmZTM1NDRjY2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5Q7HbUKnaE6PQ3VgYm/eBQZkdQ1sMfSlT9d e2q7aPWzMpvkBqsbRHMIkI12NybaMf7O0ZzLFaONjB4KIefoU3RXCZq1Ywo05Z4n ztMGnctYwd8UAl96mvg88tRmrDA2KPr4ulKZGTmJuHKZd1omtUgmFCA9zf84sOvc k1ZBFiiJKT5iTpZvGI9+ok05pUWjpC2RyatI2j9xgQIVQ58mndxawFA64l10NRhV 3FRdUt9kV3i1zAAfKss/D7PngGbNaSN6bucZkeR2QiNSZ2MXPPZL1jIsCX6OQ7s+ ocNaUu8682LiCRbhkfZjkGJ02k0N1cPfDmt/x+AE3WlFG00ebQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaqEfiRXuP2Oxaytanvgx5Xz+QCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvNWIyNDc4ZjktMWM1NC0z YTM1LTgyOTEtMmY2NzE4MDhmNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDIVdXrB1zt08EMfQVh/8B/+SJ7B0lTiUEUkNj9lNJ08+hangi09r9F iZE+OQsj2gR0qeXwZXkFIS5TgTuyo/rRXG9mHOGyOZkIu3fCbCHmGe7wrKPCrRDq tsz+IDTOg/z9Yk2vGOQoZZoox+g/QCuF6vSVkNpq4iWrO1YJ6vekXrWcCHfXh0LA HoywB7clMCa/ivGAhEa37ue11X8zfGwu5H0Kzf8DI1CQEHbZwlqdW+ZDRsu/9M/b CEhgYbAv+GswoZR+dNVK9gHaMxJt12hbWSeblf0+tggFxEUtKB3J1jSfIYWDqcct g84Ll4ZwI+/ypynbsU9yrObVLCUyRjA= -----END CERTIFICATE-----Generated at Fri Apr 17 22:00:14 2026 by rpki-client