$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/554d4238-61eb-47da-ab1d-d4546ac40856/b33dba31-e420-3c1f-b89c-10569a291533.roa File: b33dba31-e420-3c1f-b89c-10569a291533.roa (raw, json) Hash identifier: 9MslBYlxkALMmqO6Ny1Tjn3rSVtTcQd2sQkhx9DGC+8= Subject key identifier: 68:60:4B:F8:B9:44:A9:1E:04:8E:44:D5:9F:CE:3B:14:31:F4:3C:99 Certificate issuer: /CN=554d4238-61eb-47da-ab1d-d4546ac40856 Certificate serial: 010D0C9F4328584AF2567BCFB059D77DD31F5980 Authority key identifier: 56:5F:64:BC:5A:74:C5:13:4A:9D:B7:14:B4:C6:FC:28:80:EC:F5:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/554d4238-61eb-47da-ab1d-d4546ac40856.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/554d4238-61eb-47da-ab1d-d4546ac40856/b33dba31-e420-3c1f-b89c-10569a291533.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 3833 IP address blocks: 65.19.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/554d4238-61eb-47da-ab1d-d4546ac40856/554d4238-61eb-47da-ab1d-d4546ac40856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/554d4238-61eb-47da-ab1d-d4546ac40856/554d4238-61eb-47da-ab1d-d4546ac40856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/554d4238-61eb-47da-ab1d-d4546ac40856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:7b:cf:b0:59:d7:7d:d3:1f:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=554d4238-61eb-47da-ab1d-d4546ac40856 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=acd830d1-d977-467a-b8c3-b538e246f9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:db:03:4d:24:25:94:11:c9:59:29:f6:78:88: 2f:95:4c:07:4d:a0:67:78:91:13:22:c4:09:c9:1b: fa:87:b4:66:c1:17:d8:cd:a4:07:a9:81:0c:dd:6a: 7a:25:be:d0:00:49:a1:b6:0e:ff:d4:7d:7b:c1:af: 32:7a:3b:06:f0:e4:ca:1c:c1:ac:e9:4d:ac:3b:e5: 1d:e2:e9:e5:a2:9c:ae:7f:dd:fa:a0:9c:8c:8c:eb: 8e:81:15:37:8a:e2:6e:3b:63:9f:d1:1e:1e:b5:a3: 29:70:51:4f:f0:87:5e:3d:bb:08:88:fc:c9:10:20: 51:73:d5:25:4c:0d:81:19:44:c5:f5:99:bd:61:01: 70:ec:8d:2c:63:51:9d:e4:38:1e:60:da:42:69:91: 16:3d:14:0d:3b:04:5d:a2:d7:c0:f7:57:b6:d2:4b: a7:ce:2e:12:09:3f:d9:7c:24:f1:54:26:9e:7e:f3: 74:bf:f8:97:4f:59:77:8f:40:20:ee:5e:cb:70:43: f7:42:78:db:eb:fa:fa:ec:e4:ff:0f:1a:d4:ca:79: f8:34:6c:8c:c9:19:58:26:4a:80:37:47:79:dc:47: 98:9b:ef:83:5c:ba:f0:b5:87:83:30:4a:64:e6:af: ee:df:6d:fb:d3:bd:10:58:55:3c:96:a8:79:9d:ab: a9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:60:4B:F8:B9:44:A9:1E:04:8E:44:D5:9F:CE:3B:14:31:F4:3C:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/554d4238-61eb-47da-ab1d-d4546ac40856/b33dba31-e420-3c1f-b89c-10569a291533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/554d4238-61eb-47da-ab1d-d4546ac40856/554d4238-61eb-47da-ab1d-d4546ac40856.crl X509v3 Authority Key Identifier: keyid:56:5F:64:BC:5A:74:C5:13:4A:9D:B7:14:B4:C6:FC:28:80:EC:F5:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/554d4238-61eb-47da-ab1d-d4546ac40856.cer sbgp-ipAddrBlock: critical IPv4: 65.19.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:5c:74:65:61:37:31:c9:5e:2e:f3:5a:3f:8c:7c:ba:1b:41: 09:c2:e1:f7:a5:01:50:b2:07:f8:17:cf:e0:de:a6:39:e8:7e: d2:47:9e:17:5f:74:59:60:8f:df:09:92:9d:24:00:77:d7:89: ae:f3:67:fe:a8:64:92:53:a5:77:68:fc:9c:9c:41:07:5b:60: e2:fe:d3:21:5b:07:3e:f0:ff:1d:56:99:9b:30:07:6f:a1:1a: 25:99:c7:82:51:be:2a:1f:be:d0:c3:ce:62:1b:f2:d7:62:17: 19:a5:1c:09:77:93:80:31:11:18:7c:d0:2c:dc:4e:98:59:ab: 7f:e1:63:fc:34:4a:80:e9:d7:e5:9a:a2:24:a4:1f:56:4f:13: 54:f6:9c:00:6f:e8:9e:02:16:80:c7:df:91:3c:b0:72:5e:cc: b4:0a:f1:8c:ac:19:19:01:21:d9:df:04:82:80:2b:8d:d2:65: a5:a8:bc:1a:b5:50:00:59:3c:12:fd:ce:c1:4d:ee:06:3e:95: e3:89:87:0e:4a:16:a9:2c:d8:6c:8d:a9:e1:97:9f:22:13:e8: e6:29:16:7a:76:43:32:c6:37:10:05:b5:88:10:f2:f3:36:16: 3a:08:3a:19:60:6c:1e:96:a5:53:e2:3d:9f:f7:8f:3c:03:1f: 0f:7f:b5:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnvPsFnXfdMfWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU0ZDQyMzgtNjFlYi00N2RhLWFiMWQtZDQ1NDZhYzQw ODU2MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk YWNkODMwZDEtZDk3Ny00NjdhLWI4YzMtYjUzOGUyNDZmOWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9sDTSQllBHJWSn2eIgvlUwHTaBneJETIsQJ yRv6h7RmwRfYzaQHqYEM3Wp6Jb7QAEmhtg7/1H17wa8yejsG8OTKHMGs6U2sO+Ud 4unlopyuf936oJyMjOuOgRU3iuJuO2Of0R4etaMpcFFP8IdePbsIiPzJECBRc9Ul TA2BGUTF9Zm9YQFw7I0sY1Gd5DgeYNpCaZEWPRQNOwRdotfA91e20kunzi4SCT/Z fCTxVCaefvN0v/iXT1l3j0Ag7l7LcEP3Qnjb6/r67OT/DxrUynn4NGyMyRlYJkqA N0d53EeYm++DXLrwtYeDMEpk5q/u3237070QWFU8lqh5naupIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhgS/i5RKkeBI5E1Z/OOxQx9DyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81NTRk NDIzOC02MWViLTQ3ZGEtYWIxZC1kNDU0NmFjNDA4NTYvYjMzZGJhMzEtZTQyMC0z YzFmLWI4OWMtMTA1NjlhMjkxNTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTU0ZDQyMzgtNjFlYi00N2RhLWFi MWQtZDQ1NDZhYzQwODU2LzU1NGQ0MjM4LTYxZWItNDdkYS1hYjFkLWQ0NTQ2YWM0 MDg1Ni5jcmwwHwYDVR0jBBgwFoAUVl9kvFp0xRNKnbcUtMb8KIDs9WEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81NTRkNDIzOC02MWViLTQ3ZGEtYWIxZC1kNDU0 NmFjNDA4NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQRPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9cdGVhNzHJXi7zWj+MfLobQQnC4felAVCyB/gXz+DepjnoftJHnhdf dFlgj98Jkp0kAHfXia7zZ/6oZJJTpXdo/JycQQdbYOL+0yFbBz7w/x1WmZswB2+h GiWZx4JRviofvtDDzmIb8tdiFxmlHAl3k4AxERh80CzcTphZq3/hY/w0SoDp1+Wa oiSkH1ZPE1T2nABv6J4CFoDH35E8sHJezLQK8YysGRkBIdnfBIKAK43SZaWovBq1 UABZPBL9zsFN7gY+leOJhw5KFqks2GyNqeGXnyIT6OYpFnp2QzLGNxAFtYgQ8vM2 FjoIOhlgbB6WpVPiPZ/3jzwDHw9/tXA= -----END CERTIFICATE-----Generated at Sat Aug 23 23:30:04 2025 by rpki-client