$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/97e432fe-99ef-32d7-be43-8c4c824afc6f.roa File: 97e432fe-99ef-32d7-be43-8c4c824afc6f.roa (raw, json) Hash identifier: BFAxH9rBituTt9C1fmha5W4AhQsRN99m6gmKSJ0yZW4= Subject key identifier: B1:5C:BC:11:D6:B4:5F:3D:C9:2E:F0:07:15:7F:D3:5A:65:BF:E2:7E Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584E66DA095382ED3072C7757A00 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/97e432fe-99ef-32d7-be43-8c4c824afc6f.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 14618 IP address blocks: 162.33.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:09:53:82:ed:30:72:c7:75:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=89cd1428-9b3f-4ee8-964a-a94e62d5f25b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c4:22:8b:aa:92:e8:da:9d:fb:1d:a7:1d:7f: 54:77:4e:4c:ca:71:a3:c3:f7:5e:12:d5:4b:93:4b: 1d:2f:ac:bc:ba:ad:53:62:27:dc:5d:76:5c:4a:55: 00:36:8e:63:81:8c:be:72:c9:bd:08:18:c4:ba:0b: 88:49:0d:13:27:42:ce:b7:f0:1d:5f:fe:22:b0:b1: a0:39:d1:20:0a:24:47:c3:af:76:9f:76:c6:de:f8: 3f:81:76:3b:e6:51:21:eb:c6:a4:a8:7d:85:8e:8b: cf:23:7a:ec:d8:45:d9:1c:5c:0d:db:3c:9f:f1:7e: 52:2c:9b:9b:a3:65:ca:2c:fe:d4:ba:cf:8c:da:da: 35:29:35:34:6b:13:68:a6:07:c0:13:d0:a6:7d:a2: d8:a5:9b:51:fb:d2:e8:4f:22:fb:78:87:28:a3:b5: 4c:8d:b3:29:51:3d:08:66:72:a1:e6:d1:0f:12:c2: 1b:67:1c:2b:fb:50:20:40:e9:29:15:0e:ef:34:99: fc:d9:28:72:9e:18:f3:bc:2a:51:7a:01:ad:4e:cd: cc:ab:cf:ef:f2:4d:fe:f3:85:34:35:fc:71:53:e7: 14:47:fa:28:ce:6f:ee:24:37:1d:0a:a6:5e:17:3d: 11:f2:dc:08:a0:19:1a:7f:2a:bf:7b:28:70:02:32: fe:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5C:BC:11:D6:B4:5F:3D:C9:2E:F0:07:15:7F:D3:5A:65:BF:E2:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/97e432fe-99ef-32d7-be43-8c4c824afc6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1e:7b:ee:eb:ef:aa:4d:e7:e1:f1:83:69:14:04:65:d2:22: 01:a9:49:1c:07:a6:50:76:1f:91:8c:c5:25:81:7d:c5:c6:db: 2e:8a:8a:bf:52:fb:34:ad:7e:68:61:1f:4f:05:c4:f6:4c:1e: e3:38:f9:ef:8f:1d:85:e7:e0:c3:ae:21:fd:66:e2:20:a4:88: 8c:e9:54:27:d1:3c:98:82:5f:76:38:9b:07:99:65:f7:ba:e5: 8b:e8:00:90:38:ca:f9:2a:bf:6a:bd:e7:8d:2d:fc:cf:a5:db: e9:9a:41:d1:f6:d9:f0:41:34:13:b4:21:c0:1a:12:b2:57:0d: 5a:d9:83:c1:c6:75:6f:e9:93:31:91:70:91:a9:0a:51:46:92: a4:28:01:21:72:af:81:e2:7d:9c:16:cd:29:51:95:d6:9d:b1: 92:4d:8c:99:6d:97:e2:e1:df:f0:e8:a2:cf:d1:3a:b0:86:3d: 7b:fb:24:d8:99:f4:54:02:da:82:63:48:45:fa:ce:48:ba:d3: a8:ad:a6:e5:92:b5:1e:0a:24:dc:a3:de:0e:72:05:36:d5:1e: 36:e7:57:33:80:13:7e:66:a2:68:55:86:57:d4:5e:fb:1a:88: 5a:f7:f2:3d:33:48:08:a7:73:53:aa:b9:c1:46:5e:4f:69:a1: b0:73:0a:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2glTgu0wcsd1egAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk ODljZDE0MjgtOWIzZi00ZWU4LTk2NGEtYTk0ZTYyZDVmMjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsQii6qS6Nqd+x2nHX9Ud05MynGjw/deEtVL k0sdL6y8uq1TYifcXXZcSlUANo5jgYy+csm9CBjEuguISQ0TJ0LOt/AdX/4isLGg OdEgCiRHw692n3bG3vg/gXY75lEh68akqH2FjovPI3rs2EXZHFwN2zyf8X5SLJub o2XKLP7Uus+M2to1KTU0axNopgfAE9CmfaLYpZtR+9LoTyL7eIcoo7VMjbMpUT0I ZnKh5tEPEsIbZxwr+1AgQOkpFQ7vNJn82ShynhjzvCpRegGtTs3Mq8/v8k3+84U0 NfxxU+cUR/oozm/uJDcdCqZeFz0R8twIoBkafyq/eyhwAjL+3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFcvBHWtF89yS7wBxV/01plv+J+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvOTdlNDMyZmUtOTllZi0z MmQ3LWJlNDMtOGM0YzgyNGFmYzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkee+7r76pN5+Hxg2kUBGXSIgGpSRwHplB2H5GMxSWBfcXG2y6Kir9S +zStfmhhH08FxPZMHuM4+e+PHYXn4MOuIf1m4iCkiIzpVCfRPJiCX3Y4mweZZfe6 5YvoAJA4yvkqv2q9540t/M+l2+maQdH22fBBNBO0IcAaErJXDVrZg8HGdW/pkzGR cJGpClFGkqQoASFyr4HifZwWzSlRldadsZJNjJltl+Lh3/Doos/ROrCGPXv7JNiZ 9FQC2oJjSEX6zki606itpuWStR4KJNyj3g5yBTbVHjbnVzOAE35momhVhlfUXvsa iFr38j0zSAinc1OqucFGXk9pobBzCmg= -----END CERTIFICATE-----Generated at Mon Jul 6 18:21:55 2026 by rpki-client