$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/c0abde07-4a6d-396c-b836-ba3936287aac.roa File: c0abde07-4a6d-396c-b836-ba3936287aac.roa (raw, json) Hash identifier: GX2HqvA85m1prVPcQ6U8dELotjFVBCHHZ27rtOtXX28= Subject key identifier: 8C:DF:5B:86:2E:FA:1E:12:3C:34:EB:85:30:7F:00:3D:78:95:65:DB Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584F093CDDE27A78EAEEB7A68C80 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/c0abde07-4a6d-396c-b836-ba3936287aac.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 162.33.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:dd:e2:7a:78:ea:ee:b7:a6:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=afa7b2fb-5320-41d2-b02f-e8a81bbfb8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:92:b3:63:46:f0:80:13:17:d2:46:ae:8c:9b: 57:f3:66:dc:66:28:e7:d0:73:16:e0:99:e4:e0:83: d4:9e:93:5d:fa:db:62:14:98:09:7f:d2:a9:fb:80: 50:e7:b6:11:0c:e2:ab:35:b6:3e:49:30:12:86:fd: 7e:53:46:57:37:a4:ce:d6:ec:8c:a5:04:bf:13:e1: e0:83:aa:6d:f7:fb:3b:b7:00:32:e0:bb:ed:21:f0: 9e:67:c0:cc:ac:eb:93:9e:bb:c6:e8:51:ad:df:de: 60:59:d4:3a:92:ab:b0:a7:54:84:41:e1:93:b8:28: 71:e0:be:4b:39:04:0a:c6:70:f4:12:93:2f:ff:63: 3a:06:73:bc:44:00:4b:3e:57:4f:c6:bc:4b:f1:f5: 00:cb:c6:64:1c:1b:a4:d3:47:22:58:2c:b3:7b:34: 8f:90:f6:3e:69:c9:c7:8d:75:1f:bc:69:36:44:99: 7f:e5:f0:b7:f2:48:b5:4a:51:b6:af:b4:5b:bc:aa: f1:89:b0:09:9f:89:07:b2:63:ba:49:8f:85:5f:27: 59:2f:af:a4:b9:ae:90:e1:dd:b3:8f:36:a8:3d:d5: a2:44:e6:78:e6:ac:d8:d1:a7:1e:f1:c9:eb:d1:99: 86:86:67:91:28:33:d8:40:9c:dc:ce:58:aa:f5:77: 49:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DF:5B:86:2E:FA:1E:12:3C:34:EB:85:30:7F:00:3D:78:95:65:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/c0abde07-4a6d-396c-b836-ba3936287aac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:62:b0:15:ef:38:88:de:52:cb:ef:9b:06:ac:50:c9:44:82: 87:bb:64:85:2a:ae:fd:5a:3a:d8:26:7b:f7:56:1e:28:62:1c: 9a:02:c4:60:ec:69:0b:bb:0f:4e:d7:84:c7:35:59:0c:4e:7b: 6b:c3:9b:ea:04:fa:ba:aa:3b:e2:b5:01:7c:95:b2:8a:bd:59: da:5c:6e:8a:43:1d:98:39:42:02:6a:00:e8:e8:bb:12:d7:6b: 1a:16:d2:9c:b3:91:0a:9b:eb:f0:50:fe:11:a4:3f:24:9a:cc: 27:ae:9b:1e:47:f5:44:40:f5:bd:f4:47:55:f7:47:93:da:5f: 5f:be:e9:7b:c2:00:5f:9a:5b:39:fb:96:6f:ee:53:12:73:b4: 8d:42:fe:9f:2e:2b:58:a1:20:e6:9b:fd:c6:70:18:4c:26:d2: b1:69:ba:ac:31:f5:7c:68:fe:f8:6e:f2:40:bf:a4:99:a4:56: 18:e0:ef:35:33:a6:e4:dd:53:29:cb:f2:96:45:e5:71:d0:ac: 7b:0e:a5:7c:f1:a9:0b:81:81:7b:63:92:69:7e:8c:bc:44:6c: 6f:f8:92:96:1f:86:8c:3d:06:ef:1e:01:5b:6d:5d:9e:f1:7c: 22:2a:10:ef:fa:eb:4f:22:b1:67:d4:1b:aa:92:4a:01:70:e0: 1a:9a:90:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPN3ienjq7remjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk YWZhN2IyZmItNTMyMC00MWQyLWIwMmYtZThhODFiYmZiOGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5KzY0bwgBMX0kaujJtX82bcZijn0HMW4Jnk 4IPUnpNd+ttiFJgJf9Kp+4BQ57YRDOKrNbY+STAShv1+U0ZXN6TO1uyMpQS/E+Hg g6pt9/s7twAy4LvtIfCeZ8DMrOuTnrvG6FGt395gWdQ6kquwp1SEQeGTuChx4L5L OQQKxnD0EpMv/2M6BnO8RABLPldPxrxL8fUAy8ZkHBuk00ciWCyzezSPkPY+acnH jXUfvGk2RJl/5fC38ki1SlG2r7RbvKrxibAJn4kHsmO6SY+FXydZL6+kua6Q4d2z jzaoPdWiROZ45qzY0ace8cnr0ZmGhmeRKDPYQJzczliq9XdJ2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzfW4Yu+h4SPDTrhTB/AD14lWXbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvYzBhYmRlMDctNGE2ZC0z OTZjLWI4MzYtYmEzOTM2Mjg3YWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVisBXvOIjeUsvvmwasUMlEgoe7ZIUqrv1aOtgme/dWHihiHJoCxGDs aQu7D07XhMc1WQxOe2vDm+oE+rqqO+K1AXyVsoq9WdpcbopDHZg5QgJqAOjouxLX axoW0pyzkQqb6/BQ/hGkPySazCeumx5H9URA9b30R1X3R5PaX1++6XvCAF+aWzn7 lm/uUxJztI1C/p8uK1ihIOab/cZwGEwm0rFpuqwx9Xxo/vhu8kC/pJmkVhjg7zUz puTdUynL8pZF5XHQrHsOpXzxqQuBgXtjkml+jLxEbG/4kpYfhow9Bu8eAVttXZ7x fCIqEO/6608isWfUG6qSSgFw4BqakDY= -----END CERTIFICATE-----Generated at Sun Sep 20 18:52:33 2026 by rpki-client