$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/33b5444d-1e8b-3bf1-869a-48412810c7b1.roa File: 33b5444d-1e8b-3bf1-869a-48412810c7b1.roa (raw, json) Hash identifier: 9HQTfCvzOuu+Hex6A9rz4bgAab9SZIKdMxkgBgJE98c= Subject key identifier: 99:A0:98:1F:43:C4:81:17:54:CC:76:90:AF:0C:63:7C:91:F5:20:CD Certificate issuer: /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Certificate serial: 010D0C9F4328584F8F3DA96E80884BD0B10A83C0 Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/33b5444d-1e8b-3bf1-869a-48412810c7b1.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 11475 IP address blocks: 65.181.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:a9:6e:80:88:4b:d0:b1:0a:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=d457f4f7-cdb8-4d61-9e0c-3846d6e89113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:7c:73:f8:e3:72:37:78:c0:57:6f:cd:cc:dd: b6:ac:7f:fe:ff:44:8a:8a:f7:c4:7d:08:00:e4:6c: 95:f7:68:b5:7a:54:65:95:4d:4a:2b:9b:62:a0:d7: 71:0f:74:55:d6:78:af:1f:29:58:b2:29:e9:9c:75: 02:8d:65:c8:34:70:76:99:48:aa:5b:ff:ae:59:93: cf:0e:05:60:74:85:5d:46:5b:ac:44:95:98:4a:51: 2d:f5:5e:b5:eb:e5:ff:f9:9c:6d:26:64:c9:4a:4a: 51:4e:92:1f:cd:03:f6:85:d5:d5:53:39:9b:7d:22: c5:d4:69:57:ea:2e:de:f8:72:ed:53:03:b8:9f:d2: b3:b7:d3:c6:fb:92:67:29:ec:7c:e0:32:d6:5a:ba: ac:40:83:85:55:dd:78:ec:4c:94:95:7c:5c:4e:50: 21:6e:ad:6d:87:67:b7:6f:b7:64:fd:b6:b8:2b:b6: 5d:c2:d5:83:70:9b:7f:52:65:93:42:70:70:35:79: 1e:10:5a:e8:08:3f:7e:cf:ed:bf:8e:13:3a:35:5a: 96:bf:47:c3:fc:75:d9:72:df:3e:23:be:01:f5:9d: 30:eb:66:e5:9f:89:47:00:81:3b:01:9a:b8:87:5e: f5:18:6d:d1:97:72:35:d8:57:57:cc:4d:15:5d:22: 0e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A0:98:1F:43:C4:81:17:54:CC:76:90:AF:0C:63:7C:91:F5:20:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/33b5444d-1e8b-3bf1-869a-48412810c7b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl X509v3 Authority Key Identifier: keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer sbgp-ipAddrBlock: critical IPv4: 65.181.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:de:7a:aa:fe:fd:ec:7a:29:ab:d4:ec:de:03:8c:ae:0e:9e: 04:20:f6:03:91:69:36:b9:5a:48:d9:3b:69:87:4d:d6:3e:a0: d9:d0:a2:df:58:cf:8e:fa:07:53:68:81:69:88:23:2b:2a:50: df:d8:5b:7d:5e:d3:eb:b8:e6:e6:3d:5c:d3:79:c7:b9:a7:2f: a5:92:ae:b5:a5:cb:fc:a1:43:d0:60:8a:ed:0d:62:6c:e0:26: 0c:90:59:97:c8:26:0f:70:5d:1a:9f:30:45:44:4d:5b:e6:d4: f0:2f:ed:8c:9c:a5:9d:b4:77:fb:42:fb:b7:f9:d1:ac:5a:92: cc:6b:8c:c6:ea:b1:49:01:e1:de:43:86:57:fd:43:82:cf:43: 7f:59:15:68:5e:92:de:77:63:a7:4a:fb:ef:0b:d4:fd:49:27: 80:f9:24:86:f8:8a:80:25:2c:b8:bc:33:62:33:90:44:71:3e: d7:cf:e2:e6:47:d3:d7:66:e5:c1:00:b0:00:f1:2d:2a:0e:74: 68:ed:72:8b:6b:bf:e6:6c:f5:29:5f:fa:b0:e0:5c:f9:25:7d: 42:95:3d:fd:89:09:21:b3:d4:0c:d4:7c:51:f7:7a:77:0e:d4: d4:25:56:0a:5a:11:ca:b6:b1:59:55:6b:24:07:19:0e:6d:15: 66:b2:1c:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPalugIhL0LEKg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3ZDE3MWQtNzkxNy00YTIxLWI2Y2MtOGEyNzAzOTgw MmE1MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk ZDQ1N2Y0ZjctY2RiOC00ZDYxLTllMGMtMzg0NmQ2ZTg5MTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nxz+ONyN3jAV2/NzN22rH/+/0SKivfEfQgA 5GyV92i1elRllU1KK5tioNdxD3RV1nivHylYsinpnHUCjWXINHB2mUiqW/+uWZPP DgVgdIVdRlusRJWYSlEt9V616+X/+ZxtJmTJSkpRTpIfzQP2hdXVUzmbfSLF1GlX 6i7e+HLtUwO4n9Kzt9PG+5JnKex84DLWWrqsQIOFVd147EyUlXxcTlAhbq1th2e3 b7dk/ba4K7ZdwtWDcJt/UmWTQnBwNXkeEFroCD9+z+2/jhM6NVqWv0fD/HXZct8+ I74B9Z0w62bln4lHAIE7AZq4h171GG3Rl3I12FdXzE0VXSIOkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmgmB9DxIEXVMx2kK8MY3yR9SDNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdk MTcxZC03OTE3LTRhMjEtYjZjYy04YTI3MDM5ODAyYTUvMzNiNTQ0NGQtMWU4Yi0z YmYxLTg2OWEtNDg0MTI4MTBjN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmY3ZDE3MWQtNzkxNy00YTIxLWI2 Y2MtOGEyNzAzOTgwMmE1L2JmN2QxNzFkLTc5MTctNGEyMS1iNmNjLThhMjcwMzk4 MDJhNS5jcmwwHwYDVR0jBBgwFoAUrfa9+KlGwDdFy21HxWzSxxXvijswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdkMTcxZC03OTE3LTRhMjEtYjZjYy04YTI3 MDM5ODAyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQbUyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjeeqr+/ex6KavU7N4DjK4OngQg9gORaTa5WkjZO2mHTdY+oNnQot9Y z476B1NogWmIIysqUN/YW31e0+u45uY9XNN5x7mnL6WSrrWly/yhQ9Bgiu0NYmzg JgyQWZfIJg9wXRqfMEVETVvm1PAv7YycpZ20d/tC+7f50axaksxrjMbqsUkB4d5D hlf9Q4LPQ39ZFWhekt53Y6dK++8L1P1JJ4D5JIb4ioAlLLi8M2IzkERxPtfP4uZH 09dm5cEAsADxLSoOdGjtcotrv+Zs9Slf+rDgXPklfUKVPf2JCSGz1AzUfFH3encO 1NQlVgpaEcq2sVlVayQHGQ5tFWayHLY= -----END CERTIFICATE-----Generated at Tue Oct 27 17:35:02 2026 by rpki-client