$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/97e432fe-99ef-32d7-be43-8c4c824afc6f.roa File: 97e432fe-99ef-32d7-be43-8c4c824afc6f.roa (raw, json) Hash identifier: CCYkYouLjFFzA3RRitfPZ30qfo4MdJnKiv+Wz8x/MXE= Subject key identifier: 7A:4B:C9:49:FA:06:97:E6:27:A1:19:EE:82:DB:49:68:FF:80:B4:64 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584CA5F6F8DDD6BA1B12D1E21B00 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/97e432fe-99ef-32d7-be43-8c4c824afc6f.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 14618 IP address blocks: 162.33.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f6:f8:dd:d6:ba:1b:12:d1:e2:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=1a68d4fb-dd62-435d-8f9c-cac23f957a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8c:9f:e3:b6:fb:03:c5:86:45:01:96:15:6d: 94:b9:ce:42:29:27:66:0c:84:41:89:d9:b2:00:2e: 36:fa:2e:64:d7:66:12:34:69:77:31:db:eb:f3:cf: 9d:48:cf:cf:01:76:b0:7c:b0:2b:2a:83:62:bf:3b: 9e:1d:0d:59:a9:8b:b3:eb:ba:c8:b9:6f:0c:3f:da: b7:46:bc:5a:9f:dd:4a:66:67:91:22:7b:f9:21:23: d3:fa:4b:1d:ea:21:a3:c7:a7:23:f3:c5:c8:b1:7c: 94:5f:05:0a:d6:b9:28:ce:6d:df:2c:38:87:15:99: 74:91:b1:b8:c4:71:0c:65:b5:4e:8e:b5:0c:d0:10: b6:35:e2:2e:e8:b8:e8:e1:06:77:18:bd:71:42:4c: f5:4f:f4:2c:b2:e3:b1:be:83:12:71:c1:de:1a:38: 10:a3:33:63:f8:ef:d4:17:b2:58:53:3b:a6:c2:b5: c0:0a:00:8e:7b:b5:45:66:8c:ae:e8:f8:21:6b:66: 60:22:30:c1:4e:1a:b8:0c:4d:70:b3:d3:10:59:1b: 58:3e:b2:69:b5:8a:15:1c:69:e0:69:05:1d:ff:f0: 12:e2:8d:5a:67:72:11:a1:30:e0:c7:1b:d6:ce:cb: 13:6b:d8:6b:23:46:d7:d1:f3:d4:3d:6b:f3:64:33: 93:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:4B:C9:49:FA:06:97:E6:27:A1:19:EE:82:DB:49:68:FF:80:B4:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/97e432fe-99ef-32d7-be43-8c4c824afc6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:3a:72:cd:34:9b:c6:54:bf:66:e1:c6:91:a2:bc:3d:e3:1b: 94:ed:a4:d4:ce:25:ab:94:d4:25:d9:15:3b:3e:e0:70:43:d7: 36:da:b9:a9:df:71:17:d3:ee:f8:a4:96:83:29:e8:c7:49:c5: c5:42:e1:da:77:ae:41:bc:d8:c5:0b:11:10:52:79:77:2f:50: a1:11:db:75:d9:22:95:31:98:f5:85:06:19:d5:a6:cd:7f:1c: 49:92:4a:01:f9:0f:b1:78:bb:f4:6b:d2:84:cb:94:6d:71:22: 60:3a:33:fe:74:35:0b:9c:ce:98:57:d2:06:67:0b:60:89:21: f0:f1:22:c9:52:ca:4f:fc:ca:04:ca:8b:50:2d:1b:52:20:96: f5:31:85:6b:e0:eb:d0:f4:f3:01:3a:87:1e:3e:a1:32:ac:a4: 75:a3:65:80:df:58:b2:39:65:49:ce:9c:ae:3d:12:87:60:2e: 7d:d4:54:83:6f:ce:82:ed:83:34:de:0f:96:35:5c:08:c2:00: 23:dd:7a:01:ee:02:b5:49:aa:b6:48:09:fe:f7:86:61:06:93: af:4a:d8:f5:ef:05:0f:53:47:7f:61:1b:9d:51:cc:67:84:34: dd:8b:a7:05:84:31:b6:46:2c:31:7e:6d:34:39:39:1c:df:c5: 61:2c:31:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9vjd1robEtHiGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk MWE2OGQ0ZmItZGQ2Mi00MzVkLThmOWMtY2FjMjNmOTU3YTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIyf47b7A8WGRQGWFW2Uuc5CKSdmDIRBidmy AC42+i5k12YSNGl3Mdvr88+dSM/PAXawfLArKoNivzueHQ1ZqYuz67rIuW8MP9q3 Rrxan91KZmeRInv5ISPT+ksd6iGjx6cj88XIsXyUXwUK1rkozm3fLDiHFZl0kbG4 xHEMZbVOjrUM0BC2NeIu6Ljo4QZ3GL1xQkz1T/QssuOxvoMSccHeGjgQozNj+O/U F7JYUzumwrXACgCOe7VFZoyu6Pgha2ZgIjDBThq4DE1ws9MQWRtYPrJptYoVHGng aQUd//AS4o1aZ3IRoTDgxxvWzssTa9hrI0bX0fPUPWvzZDOT9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpLyUn6BpfmJ6EZ7oLbSWj/gLRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvOTdlNDMyZmUtOTllZi0z MmQ3LWJlNDMtOGM0YzgyNGFmYzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF86cs00m8ZUv2bhxpGivD3jG5TtpNTOJauU1CXZFTs+4HBD1zbauanf cRfT7vikloMp6MdJxcVC4dp3rkG82MULERBSeXcvUKER23XZIpUxmPWFBhnVps1/ HEmSSgH5D7F4u/Rr0oTLlG1xImA6M/50NQuczphX0gZnC2CJIfDxIslSyk/8ygTK i1AtG1IglvUxhWvg69D08wE6hx4+oTKspHWjZYDfWLI5ZUnOnK49EodgLn3UVINv zoLtgzTeD5Y1XAjCACPdegHuArVJqrZICf73hmEGk69K2PXvBQ9TR39hG51RzGeE NN2LpwWEMbZGLDF+bTQ5ORzfxWEsMS0= -----END CERTIFICATE-----Generated at Sun Mar 1 23:16:53 2026 by rpki-client