$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/5b2478f9-1c54-3a35-8291-2f671808f6c0.roa File: 5b2478f9-1c54-3a35-8291-2f671808f6c0.roa (raw, json) Hash identifier: JmmzcC0ZUnnBml2nCm5u2wldibeJ+vB6ajC5ogW4tXU= Subject key identifier: ED:D0:B7:08:58:64:B2:23:AB:D0:73:D9:43:47:95:57:FA:6F:EF:09 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584E66DA09386D67BC55C7715B80 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/5b2478f9-1c54-3a35-8291-2f671808f6c0.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 16509 IP address blocks: 162.33.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:09:38:6d:67:bc:55:c7:71:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=4133e5b9-fa38-478c-ac69-eb2ee7ac196d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:09:e5:8c:12:45:c4:1d:b5:b6:89:10:24:74: 1e:7a:d1:f3:a1:45:a3:fc:e2:72:ff:f3:40:5c:80: d7:8d:d2:28:47:57:5d:1c:b4:53:21:ef:f2:a3:00: 96:28:5f:45:45:d1:c6:63:21:de:da:75:f3:30:d9: f9:1e:cb:d6:64:0e:a2:fd:1f:b7:f7:ee:ec:b5:53: 4a:d6:4a:77:43:fc:ea:ae:12:df:bc:ca:3f:ec:c6: 86:41:7b:27:f1:cb:4d:c9:c9:77:09:5a:7f:0b:38: a0:bf:c0:3a:ee:0c:9f:d2:b4:64:e3:dd:f5:9c:70: 72:5c:fe:7d:c2:3a:70:e6:9f:a4:27:9a:20:3a:72: 6f:29:66:cd:03:1a:49:92:31:11:92:fc:2c:b2:df: fc:fa:f9:02:f8:d6:50:ad:51:57:d1:09:c7:47:0f: fc:b1:5e:76:b8:79:51:1f:5b:78:5c:3f:ce:35:40: 3a:3b:58:0e:1f:82:68:15:99:43:14:41:cc:b2:a8: 68:29:32:74:48:7c:8b:bb:2d:4e:1d:9f:dc:e5:b7: a0:3f:85:77:c7:6f:39:92:23:24:ea:ae:41:4c:84: 8c:67:14:13:99:fc:e8:9e:bc:c3:09:46:a0:4c:c8: 9b:32:45:92:c9:c4:bf:0a:92:d4:ea:c2:86:60:e6: fa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D0:B7:08:58:64:B2:23:AB:D0:73:D9:43:47:95:57:FA:6F:EF:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/5b2478f9-1c54-3a35-8291-2f671808f6c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f1:7d:e9:9a:6f:af:39:04:e0:83:c6:32:74:91:9b:e2:56: ff:c9:0b:be:9d:4f:d2:3c:d1:21:7f:6a:80:d8:a1:af:f9:a3: 57:37:47:44:da:e3:4d:9c:2d:e8:10:17:48:47:b3:26:d7:47: a0:82:55:ec:af:29:ac:ff:5c:ee:74:25:09:20:4c:b9:fe:8b: 5b:80:a5:ea:94:76:8e:d8:35:a7:e3:69:65:3f:07:0b:fc:f8: d5:42:d9:8c:f4:e0:35:99:4c:71:4b:3c:cc:af:04:7f:cb:cf: ed:fb:ba:08:04:35:3b:8d:68:33:8d:11:77:83:3c:e4:23:22: f0:a5:c6:89:80:07:0b:b5:9b:51:11:7f:92:44:2a:5c:d1:0e: c6:40:f7:4c:d9:2a:f9:6f:82:56:c7:f0:df:b6:59:2a:d9:27: 8f:82:08:91:a6:ad:1f:ee:97:5c:13:7a:4a:7e:b5:f8:60:2b: 91:7d:1a:13:ff:18:b3:6d:92:38:da:37:08:05:83:f7:bf:af: 14:3f:02:32:d0:31:84:18:80:78:d1:b4:57:c6:26:96:23:78: 83:86:a8:6e:09:bc:00:f1:ca:77:51:ba:c8:6d:f7:b1:1e:ae: 26:ff:d9:94:0f:15:b5:3b:27:51:4e:2d:e5:53:16:b0:ff:0b: 7e:67:7b:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2gk4bWe8VcdxW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk NDEzM2U1YjktZmEzOC00NzhjLWFjNjktZWIyZWU3YWMxOTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAignljBJFxB21tokQJHQeetHzoUWj/OJy//NA XIDXjdIoR1ddHLRTIe/yowCWKF9FRdHGYyHe2nXzMNn5HsvWZA6i/R+39+7stVNK 1kp3Q/zqrhLfvMo/7MaGQXsn8ctNycl3CVp/Czigv8A67gyf0rRk4931nHByXP59 wjpw5p+kJ5ogOnJvKWbNAxpJkjERkvwsst/8+vkC+NZQrVFX0QnHRw/8sV52uHlR H1t4XD/ONUA6O1gOH4JoFZlDFEHMsqhoKTJ0SHyLuy1OHZ/c5begP4V3x285kiMk 6q5BTISMZxQTmfzonrzDCUagTMibMkWSycS/CpLU6sKGYOb6EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3QtwhYZLIjq9Bz2UNHlVf6b+8JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvNWIyNDc4ZjktMWM1NC0z YTM1LTgyOTEtMmY2NzE4MDhmNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHxfemab685BOCDxjJ0kZviVv/JC76dT9I80SF/aoDYoa/5o1c3R0Ta 402cLegQF0hHsybXR6CCVeyvKaz/XO50JQkgTLn+i1uApeqUdo7YNafjaWU/Bwv8 +NVC2Yz04DWZTHFLPMyvBH/Lz+37uggENTuNaDONEXeDPOQjIvClxomABwu1m1ER f5JEKlzRDsZA90zZKvlvglbH8N+2WSrZJ4+CCJGmrR/ul1wTekp+tfhgK5F9GhP/ GLNtkjjaNwgFg/e/rxQ/AjLQMYQYgHjRtFfGJpYjeIOGqG4JvADxyndRusht97Ee rib/2ZQPFbU7J1FOLeVTFrD/C35neyU= -----END CERTIFICATE-----Generated at Mon Jul 6 20:13:26 2026 by rpki-client