
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/97e432fe-99ef-32d7-be43-8c4c824afc6f.roa
File: 97e432fe-99ef-32d7-be43-8c4c824afc6f.roa (raw, json)
Hash identifier: Pyfk/1CzmljcNw7TQ2GNteQeNHZVDLWEvDgHk4NqWAs=
Subject key identifier: D9:E1:36:43:89:C3:E1:21:20:A9:16:75:F5:D8:E2:BE:96:6F:45:99
Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35
Certificate serial: 010D0C9F4328584D8695454452DA70980BAD8D00
Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/97e432fe-99ef-32d7-be43-8c4c824afc6f.roa
Signing time: Thu 16 Apr 2026 13:00:31 +0000
ROA not before: Thu 16 Apr 2026 13:00:31 +0000
ROA not after: Wed 15 Jul 2026 13:00:31 +0000
asID: 14618
IP address blocks: 162.33.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:86:95:45:44:52:da:70:98:0b:ad:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35
Validity
Not Before: Apr 16 13:00:31 2026 GMT
Not After : Jul 15 13:00:31 2026 GMT
Subject: CN=b8dc42fe-5aa2-4924-b6d9-303725a6f127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:c8:76:69:c3:32:3b:89:3c:5e:f0:d3:3a:
0b:d3:24:c8:99:df:30:3c:25:b7:15:53:14:48:5a:
ee:36:c7:91:bb:9c:74:b1:af:82:ec:31:7a:49:a0:
96:0d:ae:81:a7:43:bf:43:ac:8f:dd:c4:74:b3:48:
48:71:12:58:0c:96:9e:4c:f1:8d:84:31:40:33:f7:
9b:34:58:60:7b:c3:ad:99:ab:58:6e:f8:9d:cf:28:
3e:6c:57:4a:bd:2f:00:33:fb:8b:84:a3:ab:42:1b:
01:7a:4d:db:48:2d:ea:fd:34:8c:7b:65:6e:8c:49:
9e:cd:93:15:c9:e5:bf:9e:51:93:27:61:54:12:54:
17:70:dc:92:28:52:89:52:f9:9a:4d:93:4e:69:33:
a5:d0:26:71:07:ce:e6:b3:30:6e:fc:c9:0e:0f:ca:
57:de:3e:0f:7a:69:a8:25:51:49:50:30:a2:41:1f:
74:09:aa:5a:91:64:7c:82:9d:1b:fe:b9:4c:7b:fc:
10:5e:28:e7:eb:72:d4:4c:4f:41:76:27:c6:b0:54:
f3:61:e7:92:95:6d:25:99:b2:8f:b5:71:b4:f6:23:
30:86:ad:b3:6c:b7:eb:42:20:1f:7a:5f:d2:b0:c1:
d5:a7:44:18:54:6d:b1:cc:8f:0f:7f:17:a9:36:03:
df:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E1:36:43:89:C3:E1:21:20:A9:16:75:F5:D8:E2:BE:96:6F:45:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/97e432fe-99ef-32d7-be43-8c4c824afc6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl
X509v3 Authority Key Identifier:
keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer
sbgp-ipAddrBlock: critical
IPv4:
162.33.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:02:0c:97:c5:08:cf:db:ac:b2:73:f0:3c:f1:b0:ee:af:36:
65:14:80:d7:c3:9f:b1:2c:3d:44:4b:24:ab:2d:58:53:ba:34:
68:85:80:23:3e:4c:7a:8e:c3:8f:56:b4:6b:1c:26:8c:fa:5d:
75:f4:56:08:2e:c8:dc:48:53:1f:c6:1f:6e:62:b3:4c:b9:17:
39:22:05:ff:63:89:87:e3:66:71:bc:0b:14:6f:96:e4:ce:dc:
fe:eb:e8:6a:2a:3e:88:0d:1f:bb:0f:40:3c:ff:d3:08:62:4b:
09:ec:98:52:a8:71:c5:78:fc:9e:c5:d2:4e:c9:d3:78:9d:dc:
63:79:8e:98:3d:b7:94:2e:69:f2:63:20:94:a3:6b:c8:2a:c5:
b7:9b:d7:1f:8d:a8:cc:22:43:92:17:a7:a2:79:45:67:8e:1a:
38:4c:23:d7:84:f7:33:4c:55:bd:97:80:eb:ae:3c:b3:3f:96:
b6:24:f5:d0:d2:1f:f2:ce:c6:61:3f:de:1f:6e:a5:2b:11:84:
39:d2:08:32:23:bf:b0:15:6b:c2:0d:ee:bd:47:92:5d:2f:9f:
5a:2f:92:6c:bc:55:09:e4:aa:5e:e5:af:a3:eb:f9:48:af:df:
60:25:00:21:a8:86:07:ac:2f:69:35:ca:c2:1f:3c:9e:0b:37:
68:6e:7f:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUVEUtpwmAutjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk
YjM1MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk
YjhkYzQyZmUtNWFhMi00OTI0LWI2ZDktMzAzNzI1YTZmMTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ/IdmnDMjuJPF7w0zoL0yTImd8wPCW3FVMU
SFruNseRu5x0sa+C7DF6SaCWDa6Bp0O/Q6yP3cR0s0hIcRJYDJaeTPGNhDFAM/eb
NFhge8OtmatYbvidzyg+bFdKvS8AM/uLhKOrQhsBek3bSC3q/TSMe2VujEmezZMV
yeW/nlGTJ2FUElQXcNySKFKJUvmaTZNOaTOl0CZxB87mszBu/MkOD8pX3j4Pemmo
JVFJUDCiQR90CapakWR8gp0b/rlMe/wQXijn63LUTE9BdifGsFTzYeeSlW0lmbKP
tXG09iMwhq2zbLfrQiAfel/SsMHVp0QYVG2xzI8PfxepNgPfiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNnhNkOJw+EhIKkWdfXY4r6Wb0WZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1
NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvOTdlNDMyZmUtOTllZi0z
MmQ3LWJlNDMtOGM0YzgyNGFmYzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx
ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj
ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5
YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADwCDJfFCM/brLJz8DzxsO6vNmUUgNfDn7EsPURLJKstWFO6NGiFgCM+
THqOw49WtGscJoz6XXX0VgguyNxIUx/GH25is0y5FzkiBf9jiYfjZnG8CxRvluTO
3P7r6GoqPogNH7sPQDz/0whiSwnsmFKoccV4/J7F0k7J03id3GN5jpg9t5QuafJj
IJSja8gqxbeb1x+NqMwiQ5IXp6J5RWeOGjhMI9eE9zNMVb2XgOuuPLM/lrYk9dDS
H/LOxmE/3h9upSsRhDnSCDIjv7AVa8IN7r1Hkl0vn1ovkmy8VQnkql7lr6Pr+Uiv
32AlACGohgesL2k1ysIfPJ4LN2huf6E=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:23:20 2026 by rpki-client