$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f63a9c1a-e317-37cb-b863-42b390358653.roa File: f63a9c1a-e317-37cb-b863-42b390358653.roa (raw, json) Hash identifier: OQDd2g0HoRsMT8YohB12LVv7aRaLuTGq6kI3U0BUU/Y= Subject key identifier: B3:E0:53:9F:06:A3:0E:05:73:CC:55:02:8B:34:3E:87:BE:B0:E1:75 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584AD3A0F3E2AE7E66A7B84B3D00 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f63a9c1a-e317-37cb-b863-42b390358653.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 3356 IP address blocks: 161.129.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a0:f3:e2:ae:7e:66:a7:b8:4b:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=a3159b0b-3819-4f45-93e1-9d238ae67c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:57:3e:b4:2b:70:42:5e:3b:a5:c3:ff:f7:51: d2:a3:64:e6:04:f7:c8:78:9f:03:4e:cd:54:23:ee: 74:df:25:d1:d5:c1:24:0c:ba:8d:51:49:74:46:ef: a5:63:fd:52:d3:79:b1:ab:e7:00:aa:03:60:86:e7: 90:47:1c:9a:90:6b:26:42:02:e4:dd:16:8d:1c:d6: 4f:8e:b6:14:98:5f:01:b0:db:b5:4a:2f:f1:81:78: 62:aa:6b:79:de:c4:f2:2a:c1:67:a0:d9:b7:6d:a4: 20:99:5a:d4:cc:1b:58:9b:fb:cb:83:6e:8b:d6:6c: 7b:9c:99:eb:c0:c5:dd:b1:b6:80:84:09:7d:49:bc: df:08:ae:42:0f:ac:63:2a:46:79:d0:5e:26:c8:b4: fd:d9:3a:45:20:f9:46:db:ec:77:ff:ce:6a:61:b1: 0c:a7:f4:5d:0d:62:4e:d6:8c:62:66:59:8f:da:cc: 37:3d:ec:fe:16:fe:08:ae:2e:d3:4f:fa:af:df:19: ab:dc:a8:ea:c8:6c:de:3c:25:cb:02:af:c1:4e:ad: 33:9b:a7:01:cb:de:8e:bd:ef:6d:a2:1f:9c:6e:dc: 7e:40:2c:a3:38:6f:b1:02:ce:19:b3:87:6b:38:83: 18:80:b8:53:fc:4e:08:34:d2:cf:0f:e5:1e:62:a0: a6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E0:53:9F:06:A3:0E:05:73:CC:55:02:8B:34:3E:87:BE:B0:E1:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/f63a9c1a-e317-37cb-b863-42b390358653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:8f:12:3c:43:56:e2:03:91:ec:e3:15:f5:33:63:76:88:80: f6:20:00:23:df:1e:3d:d5:fb:60:b5:85:c1:79:30:66:0f:50: ca:e1:81:2d:8b:fd:30:71:d5:77:33:2d:0e:57:80:c2:19:29: d2:06:91:8f:ac:1a:17:4c:d0:95:25:a1:59:81:c7:5d:6e:8c: c8:70:36:80:fc:21:e5:7a:ba:34:1e:d2:e6:96:4a:cf:70:2b: ed:e3:c0:b6:5d:a2:42:a4:f6:2d:37:b2:57:ec:cb:47:3d:46: 5c:82:d0:df:56:c9:f7:2d:b1:05:2b:3b:03:93:db:fd:8b:cf: 26:d3:3b:6f:bf:da:ff:6d:c4:12:99:db:95:c8:5b:f6:fd:b9: e9:66:58:5a:db:6f:7a:b4:77:19:f9:ec:6b:a4:57:a8:9a:86: f4:75:29:f1:cf:f3:b0:06:25:49:5d:03:58:64:7a:e4:67:33: c0:2c:07:f9:23:e3:06:cf:13:92:00:ac:20:87:7c:77:b4:08: ea:97:14:7b:5d:e3:9a:9d:5c:ac:c8:c8:7e:62:d1:6d:1b:8f: 86:fd:cf:b4:1f:d9:80:5a:31:4b:c2:1f:48:d7:15:0a:54:a3: ad:0f:26:b9:8d:76:5b:19:25:ea:d4:25:a7:40:da:3d:9e:84: 27:ee:df:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPPirn5mp7hLPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk YTMxNTliMGItMzgxOS00ZjQ1LTkzZTEtOWQyMzhhZTY3YzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lc+tCtwQl47pcP/91HSo2TmBPfIeJ8DTs1U I+503yXR1cEkDLqNUUl0Ru+lY/1S03mxq+cAqgNghueQRxyakGsmQgLk3RaNHNZP jrYUmF8BsNu1Si/xgXhiqmt53sTyKsFnoNm3baQgmVrUzBtYm/vLg26L1mx7nJnr wMXdsbaAhAl9SbzfCK5CD6xjKkZ50F4myLT92TpFIPlG2+x3/85qYbEMp/RdDWJO 1oxiZlmP2sw3Pez+Fv4Iri7TT/qv3xmr3KjqyGzePCXLAq/BTq0zm6cBy96Ove9t oh+cbtx+QCyjOG+xAs4Zs4drOIMYgLhT/E4INNLPD+UeYqCmPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPgU58Gow4Fc8xVAos0Poe+sOF1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvZjYzYTljMWEtZTMxNy0z N2NiLWI4NjMtNDJiMzkwMzU4NjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWPEjxDVuIDkezjFfUzY3aIgPYgACPfHj3V+2C1hcF5MGYPUMrhgS2L /TBx1XczLQ5XgMIZKdIGkY+sGhdM0JUloVmBx11ujMhwNoD8IeV6ujQe0uaWSs9w K+3jwLZdokKk9i03slfsy0c9RlyC0N9WyfctsQUrOwOT2/2LzybTO2+/2v9txBKZ 25XIW/b9uelmWFrbb3q0dxn57GukV6iahvR1KfHP87AGJUldA1hkeuRnM8AsB/kj 4wbPE5IArCCHfHe0COqXFHtd45qdXKzIyH5i0W0bj4b9z7Qf2YBaMUvCH0jXFQpU o60PJrmNdlsZJerUJadA2j2ehCfu3yw= -----END CERTIFICATE-----Generated at Sat Aug 23 19:27:09 2025 by rpki-client