$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/33b5444d-1e8b-3bf1-869a-48412810c7b1.roa File: 33b5444d-1e8b-3bf1-869a-48412810c7b1.roa (raw, json) Hash identifier: qMEJhRtenyp+KjvMEPDAG42wBK88M1EanVWr/PngNko= Subject key identifier: B2:34:76:C4:EA:5E:57:C5:46:9B:B8:4C:41:9F:52:F2:C7:51:09:BB Certificate issuer: /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Certificate serial: 010D0C9F4328584EED51FF42B09B6F61E7FB6980 Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/33b5444d-1e8b-3bf1-869a-48412810c7b1.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 11475 IP address blocks: 65.181.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:51:ff:42:b0:9b:6f:61:e7:fb:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=1fb4b2b2-18e7-4b55-8eec-5b1f9cd368c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e1:56:42:4e:a1:5e:47:ea:23:c9:cf:30:3c: 20:1e:c9:5f:33:cc:f5:1d:47:74:51:28:ed:1e:2f: b8:39:1f:40:72:a8:f2:82:00:e4:77:e0:91:06:6f: 4d:c0:0c:a0:61:78:de:ee:1a:b6:0d:59:a9:fd:d9: db:1d:97:7d:81:98:44:76:80:31:9e:3e:1e:b8:34: 6c:86:b2:7d:cb:55:96:d2:58:cf:7d:6c:e9:94:86: 0c:75:dc:88:35:85:3a:e2:16:39:09:22:65:15:46: 2a:4d:bb:a1:31:1f:00:a3:9c:08:6c:91:d1:d6:e6: 50:a0:19:9b:28:45:6b:49:35:f9:7e:a5:28:2b:ca: b9:85:9c:f4:60:28:df:55:b6:dc:e6:0f:6f:bd:95: f1:95:f8:f7:7b:ce:a9:81:3c:af:6c:8e:c0:81:ee: e9:57:48:f8:37:63:43:cf:a1:58:2a:b6:ae:23:b2: 6d:69:6b:d9:74:df:cb:07:38:f2:65:ea:d1:46:ce: ae:95:eb:89:19:df:00:e4:dd:5e:de:4e:fc:a6:5c: d8:31:d5:69:8f:22:3d:f6:e6:6b:72:b5:1c:4c:52: 16:99:89:e1:3a:bf:94:5b:47:9f:c3:78:84:c0:61: 4c:b7:9f:53:17:b1:b8:7c:64:7a:eb:07:36:1f:84: f1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:34:76:C4:EA:5E:57:C5:46:9B:B8:4C:41:9F:52:F2:C7:51:09:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/33b5444d-1e8b-3bf1-869a-48412810c7b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl X509v3 Authority Key Identifier: keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer sbgp-ipAddrBlock: critical IPv4: 65.181.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1b:f7:30:da:64:29:f7:25:6b:18:7f:f0:f3:60:a4:33:8b: c4:b8:4c:e8:91:ad:f4:4b:6a:41:a2:30:ee:bf:75:98:e9:23: 10:76:42:f9:5c:70:6d:76:a5:69:81:73:fa:c3:30:e0:8a:a6: 26:c2:cf:e8:c2:b0:a1:4e:a8:9c:04:85:f2:a2:be:c3:d0:f4: 23:34:d3:35:d8:e3:0e:77:c6:5d:3a:d1:34:03:0d:18:7d:2e: 04:ed:24:8f:7a:4b:2c:f2:13:26:28:e4:ba:06:0e:8a:8a:37: 41:3d:81:a9:4b:97:08:cb:33:a2:b4:3f:bd:f1:8b:f0:a2:fa: 77:8d:ac:66:f6:28:64:13:35:83:07:41:5b:7f:f7:ab:ab:ee: 23:af:2b:1e:51:d0:80:9c:9e:08:4b:7e:12:9d:1c:69:96:27: 9c:8e:56:17:d7:ce:5a:e2:b4:bb:64:10:64:ef:8b:f9:35:72: e8:a0:99:4f:05:b3:84:70:e8:2f:9e:63:66:4e:4f:d7:c4:47: d3:00:78:a1:81:70:d4:52:fb:0c:ac:d9:90:e5:00:b4:4a:09: 33:5e:ef:5b:82:41:b1:9e:33:61:a0:52:7d:04:51:3a:ac:2b: 7e:e6:15:30:60:42:75:54:8a:55:08:ff:df:d0:b0:61:b2:bd: 01:29:f9:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUf9CsJtvYef7aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3ZDE3MWQtNzkxNy00YTIxLWI2Y2MtOGEyNzAzOTgw MmE1MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MWZiNGIyYjItMThlNy00YjU1LThlZWMtNWIxZjljZDM2OGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOFWQk6hXkfqI8nPMDwgHslfM8z1HUd0USjt Hi+4OR9AcqjyggDkd+CRBm9NwAygYXje7hq2DVmp/dnbHZd9gZhEdoAxnj4euDRs hrJ9y1WW0ljPfWzplIYMddyINYU64hY5CSJlFUYqTbuhMR8Ao5wIbJHR1uZQoBmb KEVrSTX5fqUoK8q5hZz0YCjfVbbc5g9vvZXxlfj3e86pgTyvbI7Age7pV0j4N2ND z6FYKrauI7JtaWvZdN/LBzjyZerRRs6uleuJGd8A5N1e3k78plzYMdVpjyI99uZr crUcTFIWmYnhOr+UW0efw3iEwGFMt59TF7G4fGR66wc2H4TxnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLI0dsTqXlfFRpu4TEGfUvLHUQm7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdk MTcxZC03OTE3LTRhMjEtYjZjYy04YTI3MDM5ODAyYTUvMzNiNTQ0NGQtMWU4Yi0z YmYxLTg2OWEtNDg0MTI4MTBjN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmY3ZDE3MWQtNzkxNy00YTIxLWI2 Y2MtOGEyNzAzOTgwMmE1L2JmN2QxNzFkLTc5MTctNGEyMS1iNmNjLThhMjcwMzk4 MDJhNS5jcmwwHwYDVR0jBBgwFoAUrfa9+KlGwDdFy21HxWzSxxXvijswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdkMTcxZC03OTE3LTRhMjEtYjZjYy04YTI3 MDM5ODAyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQbUyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIb9zDaZCn3JWsYf/DzYKQzi8S4TOiRrfRLakGiMO6/dZjpIxB2Qvlc cG12pWmBc/rDMOCKpibCz+jCsKFOqJwEhfKivsPQ9CM00zXY4w53xl060TQDDRh9 LgTtJI96SyzyEyYo5LoGDoqKN0E9galLlwjLM6K0P73xi/Ci+neNrGb2KGQTNYMH QVt/96ur7iOvKx5R0ICcnghLfhKdHGmWJ5yOVhfXzlritLtkEGTvi/k1cuigmU8F s4Rw6C+eY2ZOT9fER9MAeKGBcNRS+wys2ZDlALRKCTNe71uCQbGeM2GgUn0EUTqs K37mFTBgQnVUilUI/9/QsGGyvQEp+cs= -----END CERTIFICATE-----Generated at Sat Sep 5 10:05:33 2026 by rpki-client