$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa File: d2b52252-d5a5-31a3-b33f-9ee44d111942.roa (raw, json) Hash identifier: PL5sdx3gN+9ipfvz795/ZUBVPKX2gwCVjgfEN6A49s4= Subject key identifier: C9:D0:5D:35:EA:38:66:0F:C4:87:A1:8C:9D:26:21:4E:7B:3E:C9:B6 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584F093CD99098CC9FBC72C6FC00 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 162.33.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d9:90:98:cc:9f:bc:72:c6:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=25c7b98e-cd5d-426d-89cb-b5380976be7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ee:ba:9f:5e:31:0a:2e:b4:eb:11:14:85:ea: 2e:f4:64:39:5e:c1:49:31:51:f9:ed:db:5f:65:22: e0:7f:a0:a0:b1:50:1a:74:83:e2:65:1f:f8:66:24: fd:48:b6:d3:09:14:0b:fc:c4:51:9e:ef:ad:5a:a7: 89:17:5b:52:51:c7:68:49:96:07:e3:37:73:18:eb: b7:d9:7b:6b:8c:98:20:3c:ef:cb:d7:59:d2:9c:aa: dd:ad:15:05:54:cb:a1:a4:6d:e8:67:cc:06:80:04: 91:96:ce:c8:8f:72:85:67:86:7e:17:ab:61:88:85: a4:27:e3:27:39:28:79:68:b8:79:ab:cf:21:0b:20: 8b:f4:4d:a6:fc:96:51:27:08:8a:e6:09:e4:f3:5f: c8:6f:29:f3:16:cb:03:0a:f7:78:17:8f:aa:8e:20: 19:6f:4a:2d:16:1a:8c:52:3d:22:54:56:6f:fd:ad: ff:45:1e:44:62:3d:bb:6f:70:39:2a:69:ca:27:7f: a6:50:a5:a2:82:b3:6b:89:a1:49:f4:47:42:e8:3a: f8:a2:bc:3d:60:22:33:6f:d9:07:74:99:ce:7e:ef: a7:42:49:04:9a:bc:90:39:32:fb:69:0f:a8:6f:40: a2:b9:d4:1f:29:ee:a1:a8:88:8a:9d:3d:50:0e:a1: c1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D0:5D:35:EA:38:66:0F:C4:87:A1:8C:9D:26:21:4E:7B:3E:C9:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:1b:1c:13:74:7c:eb:5d:1e:f7:2c:ea:18:eb:16:33:6f:ca: f2:59:67:ea:c1:b4:04:33:02:d1:17:91:94:f4:8e:26:c3:fb: 26:3e:4e:7e:90:9e:8b:e4:2a:92:1b:78:42:bd:76:a7:ae:c7: 25:4c:a0:d8:6b:ef:62:74:0f:a4:c6:94:7b:a5:87:a0:28:5c: 76:87:24:25:a5:3a:8b:6d:e3:37:64:1d:6e:72:c3:9e:bd:ed: b7:cf:26:b3:f0:14:aa:0c:4c:d9:97:c4:c1:9c:48:31:9a:f0: 3c:ba:13:aa:7a:04:0e:12:dd:cc:7c:55:a8:c3:ff:84:92:1a: 45:50:3c:88:95:05:90:41:64:08:49:aa:df:06:62:8f:52:8c: fc:c1:c1:f5:0e:e8:e3:4b:a3:c1:ff:5f:15:48:48:1f:b3:ed: 62:b2:8f:c7:45:12:f0:1f:4e:39:2d:50:b4:c9:e3:0d:7f:a0: 85:4e:e9:c4:e5:c7:7e:44:75:7d:76:a3:49:66:20:ae:0d:26: c5:46:9b:c3:6d:b1:8a:61:84:de:cc:0c:73:86:01:5d:6a:6e: ca:18:f8:e0:35:05:22:78:7a:3f:c4:09:ea:eb:eb:b4:b7:1d: ad:79:7c:44:23:58:9c:6e:93:c6:b9:bd:ef:e3:01:2d:17:cf: f4:59:9a:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNmQmMyfvHLG/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MjVjN2I5OGUtY2Q1ZC00MjZkLTg5Y2ItYjUzODA5NzZiZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO66n14xCi606xEUheou9GQ5XsFJMVH57dtf ZSLgf6CgsVAadIPiZR/4ZiT9SLbTCRQL/MRRnu+tWqeJF1tSUcdoSZYH4zdzGOu3 2XtrjJggPO/L11nSnKrdrRUFVMuhpG3oZ8wGgASRls7Ij3KFZ4Z+F6thiIWkJ+Mn OSh5aLh5q88hCyCL9E2m/JZRJwiK5gnk81/IbynzFssDCvd4F4+qjiAZb0otFhqM Uj0iVFZv/a3/RR5EYj27b3A5KmnKJ3+mUKWigrNriaFJ9EdC6Dr4orw9YCIzb9kH dJnOfu+nQkkEmryQOTL7aQ+ob0CiudQfKe6hqIiKnT1QDqHBbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnQXTXqOGYPxIehjJ0mIU57Psm2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvZDJiNTIyNTItZDVhNS0z MWEzLWIzM2YtOWVlNDRkMTExOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgbHBN0fOtdHvcs6hjrFjNvyvJZZ+rBtAQzAtEXkZT0jibD+yY+Tn6Q novkKpIbeEK9dqeuxyVMoNhr72J0D6TGlHulh6AoXHaHJCWlOott4zdkHW5yw569 7bfPJrPwFKoMTNmXxMGcSDGa8Dy6E6p6BA4S3cx8VajD/4SSGkVQPIiVBZBBZAhJ qt8GYo9SjPzBwfUO6ONLo8H/XxVISB+z7WKyj8dFEvAfTjktULTJ4w1/oIVO6cTl x35EdX12o0lmIK4NJsVGm8NtsYphhN7MDHOGAV1qbsoY+OA1BSJ4ej/ECerr67S3 Ha15fEQjWJxuk8a5ve/jAS0Xz/RZmuE= -----END CERTIFICATE-----Generated at Tue Sep 22 14:04:51 2026 by rpki-client