$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/33b5444d-1e8b-3bf1-869a-48412810c7b1.roa File: 33b5444d-1e8b-3bf1-869a-48412810c7b1.roa (raw, json) Hash identifier: LVwz3A3zQu6gMYSgTNx6PG/QTOHh2HpgkizfzB2lVvA= Subject key identifier: 22:AD:1E:7D:7B:3F:7A:02:3F:15:DA:5C:4A:55:E7:E6:BE:A8:96:AA Certificate issuer: /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Certificate serial: 010D0C9F4328584BA9324E2334DF64CFB5647568 Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/33b5444d-1e8b-3bf1-869a-48412810c7b1.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 11475 IP address blocks: 65.181.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:4e:23:34:df:64:cf:b5:64:75:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=e1917e2d-08b4-49df-bb62-158d47c2e629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a4:e9:9e:00:b0:5e:5e:7e:c0:75:ff:6a:2a: c4:76:63:81:48:e0:f0:c9:b4:61:3e:f3:cc:79:9f: cd:bd:56:26:0b:d3:13:a9:0e:27:6e:ab:0b:df:6a: 8d:19:26:99:f1:fe:29:22:2a:3c:26:26:7d:e9:bb: e3:97:b4:e8:bd:50:26:e3:37:7d:f3:ea:36:7a:76: cd:ee:dc:cc:db:7b:fe:93:07:73:bc:65:ca:b2:60: 02:e3:5b:7f:77:4f:a6:ca:c6:1a:f0:2f:3e:02:4b: 59:51:8d:e2:c5:b3:10:5c:d2:15:a2:67:c1:31:06: 72:9a:72:88:99:b7:2d:23:e4:92:61:61:b6:ef:87: b5:36:5f:97:73:10:6f:37:0b:57:4a:a2:d4:1f:8e: 84:43:b3:df:1f:7a:c8:42:3e:6d:64:dd:52:a0:2a: e1:8c:e6:95:15:cb:a8:93:e7:1b:83:1c:3b:a6:98: d3:d7:25:f4:d5:9a:94:51:3a:3f:7d:20:00:3e:da: c0:b6:34:fb:98:4e:d8:59:f7:3b:9a:67:d1:1a:a5: de:82:aa:2b:9f:c2:60:57:86:15:9f:60:7c:ac:17: 00:0e:c7:b2:4e:e3:58:23:ad:57:fb:e9:ca:68:2c: 29:8d:04:01:8e:22:cd:bb:06:80:fc:8b:1c:51:75: b3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AD:1E:7D:7B:3F:7A:02:3F:15:DA:5C:4A:55:E7:E6:BE:A8:96:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/33b5444d-1e8b-3bf1-869a-48412810c7b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl X509v3 Authority Key Identifier: keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer sbgp-ipAddrBlock: critical IPv4: 65.181.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:fe:c6:47:85:25:e9:fd:f0:e1:1d:94:08:b7:dd:52:50:36: 46:c1:a8:16:f1:b3:ed:e7:f8:5d:b1:a9:c1:2b:49:47:62:13: 6e:4a:33:d1:7e:9f:30:17:a2:79:25:30:49:a3:8d:b0:97:28: 22:cd:4f:4c:f2:ca:80:7f:38:a0:b4:3c:55:10:8a:44:f6:23: 91:19:9f:b4:30:8e:22:56:9d:5f:9a:88:12:a6:8a:19:d5:bc: 70:d8:a8:00:df:59:b5:83:5a:cf:88:60:b1:87:65:11:cf:4d: 49:3f:20:d4:89:e9:8a:c6:ae:a8:cd:58:1f:e7:25:b0:67:d9: e4:f3:da:9d:c5:a5:98:6b:7f:b3:6f:01:d6:04:ab:3d:a9:70: 06:47:d7:c3:3f:e7:55:5d:a1:cc:78:df:ff:48:5b:22:0e:3b: 90:21:78:cc:6b:80:ee:a9:c3:98:96:08:b3:47:f0:02:e2:c2: f9:59:d7:b2:55:d9:49:a6:01:8a:98:19:e6:10:a4:3a:de:54: 63:8a:04:53:10:e4:58:82:bc:d1:3d:07:d5:4d:40:29:3f:58: 5d:99:94:ac:ea:18:f7:c8:17:48:75:73:71:09:ad:34:0e:0e: 52:28:d4:39:a4:4c:3e:89:15:e1:02:fd:3e:64:11:be:77:15: b4:2b:b5:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMk4jNN9kz7VkdWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3ZDE3MWQtNzkxNy00YTIxLWI2Y2MtOGEyNzAzOTgw MmE1MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZTE5MTdlMmQtMDhiNC00OWRmLWJiNjItMTU4ZDQ3YzJlNjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6TpngCwXl5+wHX/airEdmOBSODwybRhPvPM eZ/NvVYmC9MTqQ4nbqsL32qNGSaZ8f4pIio8JiZ96bvjl7TovVAm4zd98+o2enbN 7tzM23v+kwdzvGXKsmAC41t/d0+mysYa8C8+AktZUY3ixbMQXNIVomfBMQZymnKI mbctI+SSYWG274e1Nl+XcxBvNwtXSqLUH46EQ7PfH3rIQj5tZN1SoCrhjOaVFcuo k+cbgxw7ppjT1yX01ZqUUTo/fSAAPtrAtjT7mE7YWfc7mmfRGqXegqorn8JgV4YV n2B8rBcADseyTuNYI61X++nKaCwpjQQBjiLNuwaA/IscUXWzkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKtHn17P3oCPxXaXEpV5+a+qJaqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdk MTcxZC03OTE3LTRhMjEtYjZjYy04YTI3MDM5ODAyYTUvMzNiNTQ0NGQtMWU4Yi0z YmYxLTg2OWEtNDg0MTI4MTBjN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmY3ZDE3MWQtNzkxNy00YTIxLWI2 Y2MtOGEyNzAzOTgwMmE1L2JmN2QxNzFkLTc5MTctNGEyMS1iNmNjLThhMjcwMzk4 MDJhNS5jcmwwHwYDVR0jBBgwFoAUrfa9+KlGwDdFy21HxWzSxxXvijswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdkMTcxZC03OTE3LTRhMjEtYjZjYy04YTI3 MDM5ODAyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQbUyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH+xkeFJen98OEdlAi33VJQNkbBqBbxs+3n+F2xqcErSUdiE25KM9F+ nzAXonklMEmjjbCXKCLNT0zyyoB/OKC0PFUQikT2I5EZn7QwjiJWnV+aiBKmihnV vHDYqADfWbWDWs+IYLGHZRHPTUk/INSJ6YrGrqjNWB/nJbBn2eTz2p3FpZhrf7Nv AdYEqz2pcAZH18M/51Vdocx43/9IWyIOO5AheMxrgO6pw5iWCLNH8ALiwvlZ17JV 2UmmAYqYGeYQpDreVGOKBFMQ5FiCvNE9B9VNQCk/WF2ZlKzqGPfIF0h1c3EJrTQO DlIo1DmkTD6JFeEC/T5kEb53FbQrtdc= -----END CERTIFICATE-----Generated at Wed Nov 5 20:51:01 2025 by rpki-client