$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/33b5444d-1e8b-3bf1-869a-48412810c7b1.roa File: 33b5444d-1e8b-3bf1-869a-48412810c7b1.roa (raw, json) Hash identifier: bO6XZauv6JG2wnhCtb1cBi+mb2j7hwpMYWQMmm0p2pI= Subject key identifier: 87:56:E6:65:8D:B1:C8:71:BF:86:D9:82:23:DE:54:6C:FB:E8:58:72 Certificate issuer: /CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Certificate serial: 010D0C9F4328584D6AAA657A5CFA3E13B69A6600 Authority key identifier: AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/33b5444d-1e8b-3bf1-869a-48412810c7b1.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 11475 IP address blocks: 65.181.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:65:7a:5c:fa:3e:13:b6:9a:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7d171d-7917-4a21-b6cc-8a27039802a5 Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=a39867fa-2f86-4da4-b83a-c4bbd31c84b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d2:b5:ee:1f:b0:f8:19:ba:ba:7f:60:51:85: 5c:b3:43:b1:e8:e3:8e:b7:e9:46:ac:9f:31:0c:03: 5c:23:2b:f2:91:f7:10:c1:0e:65:a1:8d:60:99:e3: af:25:7a:26:27:3d:78:c5:97:35:d9:e8:26:4c:71: 21:26:76:65:bd:27:86:46:5d:ff:f5:ea:4d:73:e7: e4:1c:6b:e8:ee:18:b9:0a:df:fa:16:4a:0e:3e:61: c4:5b:d3:7f:08:71:c0:15:de:ca:af:60:94:6d:13: c5:aa:06:46:67:fd:b3:66:69:7b:d8:54:da:3c:7a: 61:9d:5c:0d:da:52:a5:78:6d:b0:e8:1e:63:5c:47: ca:c8:58:6a:aa:a3:70:2f:50:22:74:62:8d:43:5f: ea:68:b5:2d:ae:02:72:58:6f:03:37:6d:a6:48:e1: ee:c5:b1:2f:1e:a9:c2:37:ff:6a:74:88:75:ee:0f: b7:13:c7:53:97:99:09:dd:39:84:7b:75:d5:07:28: 89:df:eb:d7:ad:f0:3d:a8:85:41:28:d8:53:06:56: 41:27:47:3c:33:4d:14:f1:71:67:f4:31:c9:8f:e8: 24:0b:9a:3e:1b:87:9a:6a:6d:ab:10:72:90:0e:2d: 9e:c2:05:00:5b:f8:cd:4e:64:09:2d:f0:30:f5:1b: 42:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:56:E6:65:8D:B1:C8:71:BF:86:D9:82:23:DE:54:6C:FB:E8:58:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/33b5444d-1e8b-3bf1-869a-48412810c7b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5/bf7d171d-7917-4a21-b6cc-8a27039802a5.crl X509v3 Authority Key Identifier: keyid:AD:F6:BD:F8:A9:46:C0:37:45:CB:6D:47:C5:6C:D2:C7:15:EF:8A:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf7d171d-7917-4a21-b6cc-8a27039802a5.cer sbgp-ipAddrBlock: critical IPv4: 65.181.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:6a:13:bf:52:6c:7b:06:90:9b:bc:06:1a:4e:6f:da:87:2b: 7c:27:f5:43:92:73:9b:39:28:fe:38:76:87:1d:08:54:78:41: a8:9d:23:f6:d3:aa:e3:63:20:c0:13:71:56:4a:70:79:59:77: 69:79:b9:0d:66:8a:05:14:72:66:bc:0a:a2:0f:bb:94:e8:2a: 25:14:dd:90:e0:54:e9:9c:06:a7:9b:13:eb:c5:b9:a3:cc:8d: fa:2b:d7:87:3a:95:f7:6c:ce:5a:78:18:e2:c0:f5:73:7b:4c: d7:d1:ec:b3:f1:87:8b:fd:a0:87:cc:67:63:04:d2:07:66:70: 75:f4:76:d8:dd:dd:14:e1:13:12:df:d8:d2:d7:68:36:08:12: 8c:29:5e:c4:aa:a6:86:31:ce:29:fe:be:4b:cc:c1:29:a5:4e: 68:47:e5:6c:6b:92:33:6e:43:8b:d2:3e:9f:5c:21:0a:88:ff: 71:67:7a:cf:35:e8:3a:b0:c4:b4:42:f8:5c:d6:d4:3a:f1:e1: 02:aa:f4:2f:a4:f7:d9:17:36:14:3f:b7:a9:5b:d0:66:7f:4e: 40:aa:3b:5d:b5:17:4f:20:ca:da:f6:02:87:1f:62:ed:e1:85: f1:28:65:e4:00:74:5a:2a:3a:2c:ca:94:63:8a:c7:5c:e0:31: fa:5e:a5:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqmV6XPo+E7aaZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3ZDE3MWQtNzkxNy00YTIxLWI2Y2MtOGEyNzAzOTgw MmE1MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk YTM5ODY3ZmEtMmY4Ni00ZGE0LWI4M2EtYzRiYmQzMWM4NGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dK17h+w+Bm6un9gUYVcs0Ox6OOOt+lGrJ8x DANcIyvykfcQwQ5loY1gmeOvJXomJz14xZc12egmTHEhJnZlvSeGRl3/9epNc+fk HGvo7hi5Ct/6FkoOPmHEW9N/CHHAFd7Kr2CUbRPFqgZGZ/2zZml72FTaPHphnVwN 2lKleG2w6B5jXEfKyFhqqqNwL1AidGKNQ1/qaLUtrgJyWG8DN22mSOHuxbEvHqnC N/9qdIh17g+3E8dTl5kJ3TmEe3XVByiJ3+vXrfA9qIVBKNhTBlZBJ0c8M00U8XFn 9DHJj+gkC5o+G4eaam2rEHKQDi2ewgUAW/jNTmQJLfAw9RtCSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdW5mWNschxv4bZgiPeVGz76FhyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdk MTcxZC03OTE3LTRhMjEtYjZjYy04YTI3MDM5ODAyYTUvMzNiNTQ0NGQtMWU4Yi0z YmYxLTg2OWEtNDg0MTI4MTBjN2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmY3ZDE3MWQtNzkxNy00YTIxLWI2 Y2MtOGEyNzAzOTgwMmE1L2JmN2QxNzFkLTc5MTctNGEyMS1iNmNjLThhMjcwMzk4 MDJhNS5jcmwwHwYDVR0jBBgwFoAUrfa9+KlGwDdFy21HxWzSxxXvijswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iZjdkMTcxZC03OTE3LTRhMjEtYjZjYy04YTI3 MDM5ODAyYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQbUyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9qE79SbHsGkJu8BhpOb9qHK3wn9UOSc5s5KP44docdCFR4QaidI/bT quNjIMATcVZKcHlZd2l5uQ1migUUcma8CqIPu5ToKiUU3ZDgVOmcBqebE+vFuaPM jfor14c6lfdszlp4GOLA9XN7TNfR7LPxh4v9oIfMZ2ME0gdmcHX0dtjd3RThExLf 2NLXaDYIEowpXsSqpoYxzin+vkvMwSmlTmhH5WxrkjNuQ4vSPp9cIQqI/3Fnes81 6DqwxLRC+FzW1Drx4QKq9C+k99kXNhQ/t6lb0GZ/TkCqO121F08gytr2AocfYu3h hfEoZeQAdFoqOizKlGOKx1zgMfpepSI= -----END CERTIFICATE-----Generated at Wed Apr 15 21:52:23 2026 by rpki-client