$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa File: d2b52252-d5a5-31a3-b33f-9ee44d111942.roa (raw, json) Hash identifier: liyzJ1xKLpthC5XmRkN6XxllrlvTwolghfBLYqHtC4U= Subject key identifier: CC:B4:D4:83:C2:F8:87:53:6B:52:21:EA:7A:0D:66:DE:A8:34:C5:79 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584D86954536341E9BEC4EBC9E70 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 16509 IP address blocks: 162.33.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:45:36:34:1e:9b:ec:4e:bc:9e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=c52dfc11-6207-41be-a83b-336fd1aa5a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:05:13:15:6d:54:af:8c:22:c0:29:26:54:e8: 30:6e:af:9c:db:1c:06:0d:54:af:06:c5:e1:37:b2: e3:f8:d5:6a:3f:4b:d1:2d:44:e4:9e:4d:fa:0d:4b: a6:5a:3a:bf:00:e8:9d:5d:40:08:df:5f:55:27:bd: 1e:81:e8:b3:2a:21:56:f2:31:bf:3c:a1:a0:84:33: 1f:d0:04:7b:08:6a:9e:86:89:0c:aa:a2:40:b0:8b: cc:1b:6b:e4:d9:e1:70:12:8d:00:36:b7:c5:60:d0: 92:b9:18:1c:87:32:8f:e3:ce:6c:ae:47:aa:93:ee: 00:8e:d4:64:73:db:fa:08:7c:0c:7d:79:6e:57:43: a8:60:bd:ab:30:3b:69:fb:7a:5f:5c:08:89:53:e6: c3:76:22:95:f4:be:41:3c:f0:14:a6:c0:2b:6a:08: 67:f7:07:77:3a:da:8e:f2:ce:c9:fc:86:af:2b:e7: a7:40:98:25:b1:d3:10:ef:3a:59:c5:ee:4c:bc:62: 2d:4c:81:08:54:06:c0:8d:03:b6:72:5e:45:37:5e: bc:d9:52:33:e8:8e:9b:34:f1:79:d8:ee:87:43:68: 61:ac:db:10:ec:ae:68:37:68:11:38:97:5d:58:64: 12:22:29:fb:1d:9f:e4:0d:d1:d5:2a:b8:04:27:67: 52:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B4:D4:83:C2:F8:87:53:6B:52:21:EA:7A:0D:66:DE:A8:34:C5:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:10:6b:a1:23:9a:3f:4d:00:08:d5:d3:1f:5c:de:77:10:98: 0b:c5:86:b3:8c:a2:a6:fa:71:c5:19:ad:1f:1a:1d:75:4f:fe: 53:c3:f0:8c:bf:6e:a9:03:3c:26:ad:22:e9:80:b7:15:03:9e: ea:e2:f9:e0:55:8e:d4:59:44:6d:4e:ec:b5:4e:f2:3f:04:12: 4e:19:81:62:66:32:65:f3:fc:57:70:0d:91:64:82:c8:9b:ba: 3a:e3:bf:af:bd:9f:2d:0d:b5:e2:43:22:0c:01:a3:3e:b8:05: 39:e2:ed:7b:70:23:6e:36:d5:18:19:cf:cd:78:ef:11:6b:8a: 93:b4:f5:5c:25:76:ee:dd:4b:b0:90:43:2a:d7:94:58:e2:2b: ce:6a:fb:29:d8:96:e0:0b:bb:1a:39:de:5b:4b:b9:02:c8:13: 92:96:24:11:6b:f5:42:6f:14:ec:3a:88:88:32:37:e8:85:2e: 84:6e:e1:9c:b0:82:43:3c:a0:fb:48:b6:3c:fb:33:34:14:33: 71:aa:db:2c:58:ee:c1:53:24:c2:de:3c:8c:83:d7:7f:b5:2c: 28:2a:9d:ee:e0:cf:ec:e8:7a:f1:07:c6:f1:11:d0:d4:84:27: 0e:3a:87:e8:5f:46:45:d9:83:7e:99:fc:39:c3:3c:4f:17:02: a4:07:7f:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUU2NB6b7E68nnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk YzUyZGZjMTEtNjIwNy00MWJlLWE4M2ItMzM2ZmQxYWE1YTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAUTFW1Ur4wiwCkmVOgwbq+c2xwGDVSvBsXh N7Lj+NVqP0vRLUTknk36DUumWjq/AOidXUAI319VJ70egeizKiFW8jG/PKGghDMf 0AR7CGqehokMqqJAsIvMG2vk2eFwEo0ANrfFYNCSuRgchzKP485srkeqk+4AjtRk c9v6CHwMfXluV0OoYL2rMDtp+3pfXAiJU+bDdiKV9L5BPPAUpsAraghn9wd3OtqO 8s7J/IavK+enQJglsdMQ7zpZxe5MvGItTIEIVAbAjQO2cl5FN1682VIz6I6bNPF5 2O6HQ2hhrNsQ7K5oN2gROJddWGQSIin7HZ/kDdHVKrgEJ2dSMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMy01IPC+IdTa1Ih6noNZt6oNMV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvZDJiNTIyNTItZDVhNS0z MWEzLWIzM2YtOWVlNDRkMTExOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcQa6Ejmj9NAAjV0x9c3ncQmAvFhrOMoqb6ccUZrR8aHXVP/lPD8Iy/ bqkDPCatIumAtxUDnuri+eBVjtRZRG1O7LVO8j8EEk4ZgWJmMmXz/FdwDZFkgsib ujrjv6+9ny0NteJDIgwBoz64BTni7XtwI2421RgZz8147xFripO09Vwldu7dS7CQ QyrXlFjiK85q+ynYluALuxo53ltLuQLIE5KWJBFr9UJvFOw6iIgyN+iFLoRu4Zyw gkM8oPtItjz7MzQUM3Gq2yxY7sFTJMLePIyD13+1LCgqne7gz+zoevEHxvER0NSE Jw46h+hfRkXZg36Z/DnDPE8XAqQHf9c= -----END CERTIFICATE-----Generated at Fri Apr 17 03:46:36 2026 by rpki-client