$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa File: a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa (raw, json) Hash identifier: 1ov2ZMaGA8p4Lwzyj2GiyYaqEAN/WObti70tmuXQT/Y= Subject key identifier: A1:7F:36:94:91:AD:87:2C:EB:30:AC:DF:5A:C3:AC:69:7B:D7:E5:50 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584F093CDDC8FF9054DFA1357980 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 162.33.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:dd:c8:ff:90:54:df:a1:35:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=5e2c3ea9-7029-4461-9c04-02fa41f34a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d6:cd:65:72:a0:6b:eb:9a:c1:0a:f3:76:89: 6b:34:41:64:46:2c:c4:22:36:d2:d4:72:d1:4b:75: 81:e1:ae:e0:49:fb:37:5f:d7:4d:49:96:b6:77:67: c5:2a:ff:b4:f8:7f:f8:7e:8f:d6:65:11:ea:de:fb: ad:ad:d8:6c:47:d8:fa:c6:4e:f1:ce:46:89:de:af: 56:49:9d:92:80:f2:7c:1f:04:cd:bc:a1:9b:c7:b0: 39:45:84:4a:f7:95:ba:66:00:84:d3:ed:83:59:6c: 95:d6:a6:9a:72:69:d8:73:fc:45:55:cf:a3:23:73: 04:24:a5:9c:d8:3b:a9:77:4a:3d:fb:d5:cf:19:85: 57:91:49:c0:b7:d5:ff:2b:9c:93:c7:d9:7e:81:38: 41:39:e4:59:a9:ae:c3:f3:91:52:c1:3d:96:ab:2b: a8:29:3a:89:4c:c7:e7:02:af:cf:44:70:5e:3e:65: 96:7a:2d:44:54:df:18:cd:23:66:3a:9c:a8:ca:a9: be:c6:70:a1:ac:d5:a1:2b:c2:7c:30:8f:a1:64:13: 4a:b8:5b:de:70:94:48:21:a2:b7:61:29:9c:1b:d7: b8:dc:38:67:85:ed:87:6c:e3:9e:57:63:29:47:b4: fb:aa:e6:40:af:da:6e:76:95:88:f5:e4:3d:61:bb: 28:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7F:36:94:91:AD:87:2C:EB:30:AC:DF:5A:C3:AC:69:7B:D7:E5:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a1:5c:49:12:6e:16:ba:9f:bb:26:23:75:a1:da:45:12:65: f8:ff:ea:0e:9c:a6:7c:ff:c4:64:1f:fc:e5:ca:90:82:74:05: de:c1:5e:b9:69:76:55:cf:96:74:c5:fc:36:04:8b:e1:c0:a7: c1:1a:23:ce:93:62:f8:d8:2c:1a:e8:cb:cb:24:66:f6:21:4d: bf:c4:39:98:8a:78:a3:1f:e7:ae:ab:05:9b:bb:69:45:f5:66: 6c:77:b6:b3:1d:fb:0e:bc:9d:28:b0:2d:1b:c4:55:81:a4:2a: 83:c8:72:61:ff:b1:b9:68:29:91:5c:04:98:26:5c:32:76:27: ba:1f:07:25:5b:c3:46:5e:27:46:a4:61:a8:c8:51:7b:2e:70: 23:75:7d:c2:04:ea:6e:63:49:38:2c:f2:7b:b5:f4:58:92:16: b6:50:28:97:8d:1c:96:dc:46:66:5d:4f:bf:10:2d:b8:de:fe: fd:33:78:fe:7c:32:0b:04:f9:ca:10:fa:ee:b9:4c:0d:54:31: 6b:15:a5:12:ea:37:82:90:69:c8:2a:72:9b:43:48:d2:62:74: 4a:2c:13:86:46:3e:a3:86:d1:69:38:83:69:f6:90:fb:1e:8a: 3a:dc:9a:d2:0f:98:a9:8c:e4:d0:b2:6c:3f:4a:35:39:57:e7: 40:c9:31:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPN3I/5BU36E1eYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NWUyYzNlYTktNzAyOS00NDYxLTljMDQtMDJmYTQxZjM0YTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtbNZXKga+uawQrzdolrNEFkRizEIjbS1HLR S3WB4a7gSfs3X9dNSZa2d2fFKv+0+H/4fo/WZRHq3vutrdhsR9j6xk7xzkaJ3q9W SZ2SgPJ8HwTNvKGbx7A5RYRK95W6ZgCE0+2DWWyV1qaacmnYc/xFVc+jI3MEJKWc 2Dupd0o9+9XPGYVXkUnAt9X/K5yTx9l+gThBOeRZqa7D85FSwT2WqyuoKTqJTMfn Aq/PRHBePmWWei1EVN8YzSNmOpyoyqm+xnChrNWhK8J8MI+hZBNKuFvecJRIIaK3 YSmcG9e43Dhnhe2HbOOeV2MpR7T7quZAr9pudpWI9eQ9YbsoWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKF/NpSRrYcs6zCs31rDrGl71+VQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvYTNiOTkyNGEtM2NmYS0z MzZkLTk0YmYtNTcwMGQyNmFlNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6hXEkSbha6n7smI3Wh2kUSZfj/6g6cpnz/xGQf/OXKkIJ0Bd7BXrlp dlXPlnTF/DYEi+HAp8EaI86TYvjYLBroy8skZvYhTb/EOZiKeKMf566rBZu7aUX1 Zmx3trMd+w68nSiwLRvEVYGkKoPIcmH/sbloKZFcBJgmXDJ2J7ofByVbw0ZeJ0ak YajIUXsucCN1fcIE6m5jSTgs8nu19FiSFrZQKJeNHJbcRmZdT78QLbje/v0zeP58 MgsE+coQ+u65TA1UMWsVpRLqN4KQacgqcptDSNJidEosE4ZGPqOG0Wk4g2n2kPse ijrcmtIPmKmM5NCybD9KNTlX50DJMXY= -----END CERTIFICATE-----Generated at Wed Sep 30 20:06:13 2026 by rpki-client