$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa File: d2b52252-d5a5-31a3-b33f-9ee44d111942.roa (raw, json) Hash identifier: pz+OYfR2kqv0Zr7iYrMLsMWZ7RCpOvGeLiA5SW6sbaE= Subject key identifier: 7F:02:30:A8:E6:DE:CD:39:00:07:F6:23:45:FF:C5:B4:8E:1B:1B:65 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584E66DA09457178ECF1B56E6000 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 16509 IP address blocks: 162.33.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:09:45:71:78:ec:f1:b5:6e:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=118e2346-3735-4502-8b53-7c1f5c0ed215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c0:33:11:b9:aa:aa:a1:6d:08:02:53:a9:54: 4c:13:23:6a:2d:eb:10:ed:df:ad:23:a3:9f:95:cc: f4:57:71:08:5e:00:83:94:72:15:e9:9b:40:36:60: 7b:42:a5:23:80:6b:1f:d2:c5:ac:3e:18:4a:ca:59: cf:91:fb:65:6f:18:47:0f:42:de:36:f6:f2:c9:c2: 81:81:62:89:5f:de:47:8c:d5:1c:5a:0e:6b:e8:9c: c8:9c:ce:aa:a0:45:7c:29:c3:6d:7e:56:e9:28:25: 0f:35:0d:c6:e4:1e:2f:60:b9:c6:2a:f6:07:a2:c5: 33:d9:f6:6e:22:60:6b:d4:7e:88:03:aa:32:12:a8: f2:d5:c5:38:8b:e5:b7:de:c2:73:c8:5e:a1:78:8d: 3d:f5:46:9c:a5:53:27:11:40:84:b8:16:72:20:55: 54:b5:be:e2:d3:73:f7:0f:05:58:d4:eb:4f:be:eb: 4a:b8:da:06:7a:7c:ca:6f:4e:bf:1e:ab:6e:40:e7: 91:59:2f:4b:2e:35:2e:6c:13:fb:01:a4:f8:b3:76: 1a:02:72:b1:70:0c:9a:99:1d:af:58:d0:0c:f0:35: 73:29:52:0b:3c:05:57:6c:6a:ef:b0:53:f5:ac:90: bb:5c:fa:9d:d2:99:47:a1:f5:c9:c4:2f:1d:64:8c: 83:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:02:30:A8:E6:DE:CD:39:00:07:F6:23:45:FF:C5:B4:8E:1B:1B:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:1d:42:37:fa:d7:14:a2:9a:0d:b1:fd:c6:24:e1:04:eb:79: 61:31:89:3a:97:b7:24:9f:1d:7c:3d:e3:da:8f:e5:cd:d3:18: 08:7a:44:f8:e7:2b:9c:ca:20:40:74:ef:d0:26:a1:cb:bc:da: 3d:b9:b9:90:a5:e9:df:88:28:a2:7a:64:57:f0:a3:05:a1:c1: 70:f6:66:17:e1:15:e6:98:97:80:5f:52:67:37:a8:ff:15:0d: 1a:3c:8a:91:cd:b2:ac:88:8c:b2:4a:f2:1e:5e:e1:23:42:52: cd:9b:63:42:67:d4:2d:35:31:17:79:09:1f:ca:8f:fe:7f:36: 12:12:f8:09:1b:69:8c:1d:77:f9:4d:57:d5:38:1e:04:24:c1: 8a:ad:c0:b4:53:eb:9a:2b:44:86:f6:c3:fd:46:8f:2e:da:d3: 9a:c1:5f:fc:7e:f2:11:93:7d:d7:71:fa:4e:be:d4:a8:16:6f: 48:12:4e:f8:a2:8e:4f:cb:10:d6:1a:53:57:47:22:b8:d7:73: eb:e9:3a:5a:dd:ba:33:19:87:84:09:6e:71:23:3d:27:77:1a: a1:f3:28:98:8b:52:38:db:b8:fa:a7:be:a8:f2:fd:3b:d9:50: d7:11:4c:54:b3:f1:17:8b:78:0f:82:c3:8e:b7:d9:aa:40:35: 1b:36:bb:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2glFcXjs8bVuYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk MTE4ZTIzNDYtMzczNS00NTAyLThiNTMtN2MxZjVjMGVkMjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMAzEbmqqqFtCAJTqVRMEyNqLesQ7d+tI6Of lcz0V3EIXgCDlHIV6ZtANmB7QqUjgGsf0sWsPhhKylnPkftlbxhHD0LeNvbyycKB gWKJX95HjNUcWg5r6JzInM6qoEV8KcNtflbpKCUPNQ3G5B4vYLnGKvYHosUz2fZu ImBr1H6IA6oyEqjy1cU4i+W33sJzyF6heI099UacpVMnEUCEuBZyIFVUtb7i03P3 DwVY1OtPvutKuNoGenzKb06/HqtuQOeRWS9LLjUubBP7AaT4s3YaAnKxcAyamR2v WNAM8DVzKVILPAVXbGrvsFP1rJC7XPqd0plHofXJxC8dZIyDWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8CMKjm3s05AAf2I0X/xbSOGxtlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvZDJiNTIyNTItZDVhNS0z MWEzLWIzM2YtOWVlNDRkMTExOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkdQjf61xSimg2x/cYk4QTreWExiTqXtySfHXw949qP5c3TGAh6RPjn K5zKIEB079Amocu82j25uZCl6d+IKKJ6ZFfwowWhwXD2ZhfhFeaYl4BfUmc3qP8V DRo8ipHNsqyIjLJK8h5e4SNCUs2bY0Jn1C01MRd5CR/Kj/5/NhIS+AkbaYwdd/lN V9U4HgQkwYqtwLRT65orRIb2w/1Gjy7a05rBX/x+8hGTfddx+k6+1KgWb0gSTvii jk/LENYaU1dHIrjXc+vpOlrdujMZh4QJbnEjPSd3GqHzKJiLUjjbuPqnvqjy/TvZ UNcRTFSz8ReLeA+Cw4632apANRs2u1Q= -----END CERTIFICATE-----Generated at Mon Jul 6 20:12:17 2026 by rpki-client