$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/91659b14-1fa3-39a1-8710-69be8ad85679.roa File: 91659b14-1fa3-39a1-8710-69be8ad85679.roa (raw, json) Hash identifier: 1ohNw+5BgEY82v5IVz7zyPQMDfKgc/ojzumvwSxEw/E= Subject key identifier: 8B:FC:60:E3:92:A8:0B:8A:8D:E4:2A:A2:93:BF:3C:2A:3B:C3:27:8B Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584D86954B415D793BD0C2CF53A0 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/91659b14-1fa3-39a1-8710-69be8ad85679.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 14618 IP address blocks: 162.33.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:4b:41:5d:79:3b:d0:c2:cf:53:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=37dd8ce2-64f4-4b07-99c6-4d9e42b224b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b0:f1:ae:af:d3:39:17:b5:ef:a7:f9:da:48: 06:a6:c8:a2:79:c6:d4:56:15:83:8d:94:63:10:d5: 37:8f:3f:83:1d:8b:d1:56:04:96:64:c2:d9:68:6e: 0d:14:47:30:87:91:27:83:ae:b2:7e:d7:7b:24:3b: fe:19:9c:48:e4:11:6e:2c:b4:96:34:99:f0:a2:df: 33:b6:ff:b1:df:1f:31:84:91:1c:7d:55:1c:bc:93: a3:2d:2f:22:65:02:ed:ac:e8:5a:33:35:37:5f:6b: 47:65:c8:2a:a8:f3:13:6d:b7:25:0b:e5:1e:63:8b: 4d:d0:f7:34:c3:b5:5a:f5:6a:dd:e4:03:a4:de:b2: 85:0d:82:ee:51:17:4f:c6:f9:8f:a1:0b:54:62:a8: 0e:19:d5:f9:37:68:ff:96:78:43:44:ea:0f:42:2a: ad:91:e0:5b:e3:fa:54:d1:1e:32:29:ed:65:98:f2: 4a:14:59:7e:df:c9:55:b0:31:d3:87:60:cc:a1:93: 96:e2:c0:19:9c:1d:ef:5c:5e:9a:6c:05:03:ed:2b: 83:d5:28:47:5c:9a:a8:cf:0f:7f:a1:dd:02:b2:26: 35:ac:ae:12:8f:41:06:3d:56:02:63:6d:27:95:28: 97:2c:29:12:3b:ef:de:d4:07:97:ec:04:3e:fe:09: 94:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FC:60:E3:92:A8:0B:8A:8D:E4:2A:A2:93:BF:3C:2A:3B:C3:27:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/91659b14-1fa3-39a1-8710-69be8ad85679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f2:e8:82:06:dc:c7:8b:0a:af:e4:46:0f:4d:16:99:4d:c4: a1:4a:59:10:78:66:70:4e:66:bd:c4:f1:a8:6f:d8:d0:c7:f7: 82:a5:7b:bb:95:ed:eb:d4:72:5d:6c:9d:bc:be:66:0f:37:11: 0b:86:1c:3f:96:96:62:cb:6e:85:95:1a:19:ab:1c:2f:5d:87: 1e:68:42:d1:8d:95:c0:17:57:c9:20:31:25:21:90:9a:f2:66: 39:cc:fa:ef:a2:04:10:51:a0:75:6c:72:11:bb:85:bc:0d:73: 54:6b:cb:dc:0d:57:4d:98:f6:2c:10:9c:43:24:ec:de:ae:78: f1:8c:08:40:6b:b1:c9:89:9a:c8:b4:7a:32:fe:92:fb:84:51: 91:00:1a:4f:d5:8b:3c:bf:11:c0:ac:36:5a:7e:77:b0:05:db: d2:5c:e8:a2:83:a6:a9:7b:db:ef:b1:04:09:46:57:ae:3d:52: a6:2c:d6:c0:c1:9a:7a:8e:9c:58:31:91:51:f4:b7:c3:7c:93: ef:c2:e2:4b:94:3e:83:f2:1d:97:7e:9f:31:2f:8a:b7:d1:5a: fb:33:cb:aa:d3:47:37:b4:96:72:a1:e5:90:0a:2c:77:10:dc: 60:87:ef:c1:1e:7b:eb:3a:56:c6:15:8e:fd:cf:a2:2a:96:fb: b6:0c:7e:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUtBXXk70MLPU6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk MzdkZDhjZTItNjRmNC00YjA3LTk5YzYtNGQ5ZTQyYjIyNGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97Dxrq/TORe176f52kgGpsiiecbUVhWDjZRj ENU3jz+DHYvRVgSWZMLZaG4NFEcwh5Eng66yftd7JDv+GZxI5BFuLLSWNJnwot8z tv+x3x8xhJEcfVUcvJOjLS8iZQLtrOhaMzU3X2tHZcgqqPMTbbclC+UeY4tN0Pc0 w7Va9Wrd5AOk3rKFDYLuURdPxvmPoQtUYqgOGdX5N2j/lnhDROoPQiqtkeBb4/pU 0R4yKe1lmPJKFFl+38lVsDHTh2DMoZOW4sAZnB3vXF6abAUD7SuD1ShHXJqozw9/ od0CsiY1rK4Sj0EGPVYCY20nlSiXLCkSO+/e1AeX7AQ+/gmU4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIv8YOOSqAuKjeQqopO/PCo7wyeLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvOTE2NTliMTQtMWZhMy0z OWExLTg3MTAtNjliZThhZDg1Njc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzy6IIG3MeLCq/kRg9NFplNxKFKWRB4ZnBOZr3E8ahv2NDH94Kle7uV 7evUcl1snby+Zg83EQuGHD+WlmLLboWVGhmrHC9dhx5oQtGNlcAXV8kgMSUhkJry ZjnM+u+iBBBRoHVschG7hbwNc1Rry9wNV02Y9iwQnEMk7N6uePGMCEBrscmJmsi0 ejL+kvuEUZEAGk/Vizy/EcCsNlp+d7AF29Jc6KKDpql72++xBAlGV649UqYs1sDB mnqOnFgxkVH0t8N8k+/C4kuUPoPyHZd+nzEvirfRWvszy6rTRze0lnKh5ZAKLHcQ 3GCH78Eee+s6VsYVjv3PoiqW+7YMfr8= -----END CERTIFICATE-----Generated at Sat Apr 18 00:04:44 2026 by rpki-client