$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/c0abde07-4a6d-396c-b836-ba3936287aac.roa File: c0abde07-4a6d-396c-b836-ba3936287aac.roa (raw, json) Hash identifier: T06KQVkW6BtltpDgK2xxd0sAK+61wAmXF8E5yUXk1xk= Subject key identifier: F6:6C:19:37:97:2A:09:C2:45:22:FA:1E:E0:6A:F3:71:49:A5:EB:EA Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584D86954B4EEE0DE0C4731A3640 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/c0abde07-4a6d-396c-b836-ba3936287aac.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 14618 IP address blocks: 162.33.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:4b:4e:ee:0d:e0:c4:73:1a:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=c665bef9-2962-4723-860d-bc790f48b909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:26:54:db:c3:d8:d3:9f:53:c6:b6:e6:c7:53: d2:f0:70:50:24:98:9c:4a:f0:59:a2:95:7e:7f:15: d0:72:86:99:84:ce:00:ea:d6:c3:e3:a9:45:c2:d4: 75:71:6d:5b:85:58:be:15:af:25:3c:0c:9f:a4:c4: 45:53:44:98:50:9e:b3:91:6c:63:6e:a8:04:aa:b5: b6:a5:2a:a3:66:62:5b:d9:5c:c0:2f:f7:23:6c:dc: 92:74:11:ba:c7:3d:38:e8:51:f4:6a:0c:27:a7:e1: ec:5a:03:bb:cf:86:2a:81:f5:9a:25:7d:09:6e:c1: f2:44:18:43:e1:1a:50:7c:a3:86:91:ea:ce:9c:49: 45:5f:00:b6:48:93:1c:f5:03:11:39:e2:b4:5b:10: a5:c2:7b:25:f1:65:2d:e0:fa:16:8e:c8:41:82:55: 6f:d2:01:cc:34:c2:77:c1:f4:b3:77:81:29:bf:ae: ae:ed:58:75:13:09:7c:25:7a:75:86:e3:e0:51:0c: 09:a1:2c:cc:3c:af:8d:e6:d5:8b:33:00:61:c5:d9: 4e:0f:70:89:20:da:88:c7:58:f8:4d:49:6d:65:21: 06:a8:c7:3b:e2:b9:a1:4c:d4:c5:8e:0a:53:ec:17: da:47:60:de:50:f5:5a:34:88:f1:b4:e9:70:e4:01: 81:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6C:19:37:97:2A:09:C2:45:22:FA:1E:E0:6A:F3:71:49:A5:EB:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/c0abde07-4a6d-396c-b836-ba3936287aac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7f:f2:aa:06:9c:64:89:28:4b:55:5e:31:af:73:fe:04:7e: 70:e7:8b:eb:b6:17:f5:24:b0:65:52:9d:b4:75:2e:39:8f:80: 1b:7f:9a:e0:58:7d:13:8f:60:b5:31:59:f1:dd:e0:0f:e2:d1: 0c:3b:6d:18:d8:74:c7:9c:34:60:09:15:6e:ca:f9:5b:9c:be: 75:63:2c:be:f8:6a:9b:1a:e0:ce:e4:50:f8:a7:01:0d:13:c7: 1c:c7:87:35:ff:fc:64:2d:18:e7:1b:a2:5f:db:2e:ea:fe:2f: e9:9d:6d:5f:3e:2b:c4:7e:ad:96:49:9c:70:42:99:e0:21:7d: 7c:d2:81:db:39:00:fa:f4:af:ec:2d:1f:02:b3:63:46:b2:ea: 6f:fc:d3:97:20:97:e9:55:cf:c2:de:9c:8d:19:61:9e:ed:5a: 2f:2a:53:5b:26:de:a5:ce:d8:a4:30:ff:d7:d2:75:fd:de:0f: d0:d0:14:a7:4f:d6:57:8e:fa:03:0f:1b:dd:0f:5e:56:f9:97: c9:26:bc:f0:16:bd:e3:76:dd:1a:5a:f8:a0:01:5d:a3:1d:8b: 46:74:89:85:25:eb:52:6a:5d:76:ac:43:71:40:f2:e7:19:04: bc:5b:da:7b:64:65:43:7f:1a:a7:0a:7f:39:1b:60:5c:a2:77: 6b:0f:a0:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUtO7g3gxHMaNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk YzY2NWJlZjktMjk2Mi00NzIzLTg2MGQtYmM3OTBmNDhiOTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiZU28PY059Txrbmx1PS8HBQJJicSvBZopV+ fxXQcoaZhM4A6tbD46lFwtR1cW1bhVi+Fa8lPAyfpMRFU0SYUJ6zkWxjbqgEqrW2 pSqjZmJb2VzAL/cjbNySdBG6xz046FH0agwnp+HsWgO7z4YqgfWaJX0JbsHyRBhD 4RpQfKOGkerOnElFXwC2SJMc9QMROeK0WxClwnsl8WUt4PoWjshBglVv0gHMNMJ3 wfSzd4Epv66u7Vh1Ewl8JXp1huPgUQwJoSzMPK+N5tWLMwBhxdlOD3CJINqIx1j4 TUltZSEGqMc74rmhTNTFjgpT7BfaR2DeUPVaNIjxtOlw5AGBowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZsGTeXKgnCRSL6HuBq83FJpevqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvYzBhYmRlMDctNGE2ZC0z OTZjLWI4MzYtYmEzOTM2Mjg3YWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt/8qoGnGSJKEtVXjGvc/4EfnDni+u2F/UksGVSnbR1LjmPgBt/muBY fROPYLUxWfHd4A/i0Qw7bRjYdMecNGAJFW7K+VucvnVjLL74apsa4M7kUPinAQ0T xxzHhzX//GQtGOcbol/bLur+L+mdbV8+K8R+rZZJnHBCmeAhfXzSgds5APr0r+wt HwKzY0ay6m/805cgl+lVz8LenI0ZYZ7tWi8qU1sm3qXO2KQw/9fSdf3eD9DQFKdP 1leO+gMPG90PXlb5l8kmvPAWveN23Rpa+KABXaMdi0Z0iYUl61JqXXasQ3FA8ucZ BLxb2ntkZUN/GqcKfzkbYFyid2sPoOg= -----END CERTIFICATE-----Generated at Fri Apr 17 19:37:45 2026 by rpki-client