$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/91659b14-1fa3-39a1-8710-69be8ad85679.roa File: 91659b14-1fa3-39a1-8710-69be8ad85679.roa (raw, json) Hash identifier: xcKF+9jj2fRgRTVChwbR/xqJRfdRjQ3o30JhFWme7wU= Subject key identifier: 23:4C:6E:61:B1:FC:36:A9:9F:EA:7D:96:8A:A8:79:2C:7D:E1:97:2D Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584AE4611695D38B3F8D478FBE80 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/91659b14-1fa3-39a1-8710-69be8ad85679.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 162.33.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:16:95:d3:8b:3f:8d:47:8f:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=d6a8f0ce-94a2-43c1-8a6f-74d0d18c451d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:a3:50:33:4e:28:9d:94:6d:ed:f2:d7:b3: 25:6f:fd:d6:a4:46:20:f6:f2:8c:46:e5:38:77:db: 6b:2c:a0:5f:46:99:13:af:f8:1c:fb:9b:a6:c4:89: 22:a9:78:54:6b:c5:10:10:4f:57:36:e4:b9:d3:2d: 40:d6:4a:c4:32:19:26:c5:3c:7b:69:b6:02:73:45: ec:68:c9:f0:4a:4b:1b:49:b6:bc:9d:ab:e0:0c:09: d3:78:00:e0:8d:45:4b:8e:ca:15:b3:7c:d3:06:cf: f1:e5:4d:7c:8b:67:c6:13:04:93:72:c0:3d:f2:fe: 1a:69:58:bf:ad:48:38:1b:27:b4:83:f6:a4:53:38: 14:b0:22:12:e9:57:31:4b:58:12:01:17:b7:e4:59: 44:e3:d6:ad:b3:17:6f:09:0c:ca:46:b8:c1:76:a5: 68:2d:96:a5:3e:32:6c:6b:bc:3d:55:3d:9e:c8:7e: 92:db:8c:b1:df:39:36:7f:63:66:40:43:5a:18:e2: 6d:75:ac:eb:ec:00:d5:b9:79:03:48:13:6f:17:39: 29:e8:52:66:c7:1a:0d:06:d8:20:07:01:10:d2:cc: 98:c9:83:04:ad:dc:7e:1c:00:40:33:f2:70:10:e5: 2c:b8:e3:80:e7:60:ab:a2:09:10:0a:fe:e7:16:03: fb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4C:6E:61:B1:FC:36:A9:9F:EA:7D:96:8A:A8:79:2C:7D:E1:97:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/91659b14-1fa3-39a1-8710-69be8ad85679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:42:f5:21:fe:51:1e:6a:e9:51:18:54:b2:55:b5:81:16:c9: ec:56:6c:a9:17:84:fc:d2:11:ce:2a:4d:1c:b3:bb:97:00:c6: 83:09:8f:6a:9d:52:97:a7:fb:54:31:ee:90:e2:d9:70:68:4a: 20:36:3c:f2:51:14:5e:0b:cb:1b:62:f3:6a:21:5b:37:31:e5: d4:4a:7b:d4:db:c1:f7:18:84:28:9a:f0:68:5c:6a:91:01:09: 5b:76:ea:ba:3b:c3:02:bf:65:80:60:af:60:ed:34:d5:d2:03: ab:fe:1d:62:c4:a6:8d:08:fc:bb:e8:cf:ad:2c:84:ed:49:93: 89:f1:00:72:ea:17:f0:34:a9:d0:36:aa:f7:79:51:4b:20:f6: d2:a3:de:82:8d:bc:91:33:43:14:92:6c:3d:1d:fd:0a:de:07: 34:b2:a7:76:92:6a:bf:9e:d7:fa:69:15:37:0b:82:d7:03:45: b2:be:d6:8b:94:12:34:18:da:5e:46:29:5e:0b:47:99:91:81: d8:c0:f0:49:c5:23:53:94:66:e3:cd:d0:c4:07:ad:3a:5b:ff: 98:94:64:88:6c:80:40:3a:32:aa:68:39:ac:bd:04:cb:24:07: c1:0c:1e:26:70:9a:77:f5:94:8b:a5:96:31:b2:f6:5f:2e:1b: 20:40:b4:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRaV04s/jUePvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDZhOGYwY2UtOTRhMi00M2MxLThhNmYtNzRkMGQxOGM0NTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK6jUDNOKJ2Ube3y17Mlb/3WpEYg9vKMRuU4 d9trLKBfRpkTr/gc+5umxIkiqXhUa8UQEE9XNuS50y1A1krEMhkmxTx7abYCc0Xs aMnwSksbSba8navgDAnTeADgjUVLjsoVs3zTBs/x5U18i2fGEwSTcsA98v4aaVi/ rUg4Gye0g/akUzgUsCIS6VcxS1gSARe35FlE49atsxdvCQzKRrjBdqVoLZalPjJs a7w9VT2eyH6S24yx3zk2f2NmQENaGOJtdazr7ADVuXkDSBNvFzkp6FJmxxoNBtgg BwEQ0syYyYMErdx+HABAM/JwEOUsuOOA52CrogkQCv7nFgP7swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNMbmGx/Dapn+p9loqoeSx94ZctMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvOTE2NTliMTQtMWZhMy0z OWExLTg3MTAtNjliZThhZDg1Njc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdC9SH+UR5q6VEYVLJVtYEWyexWbKkXhPzSEc4qTRyzu5cAxoMJj2qd Upen+1Qx7pDi2XBoSiA2PPJRFF4Lyxti82ohWzcx5dRKe9TbwfcYhCia8GhcapEB CVt26ro7wwK/ZYBgr2DtNNXSA6v+HWLEpo0I/Lvoz60shO1Jk4nxAHLqF/A0qdA2 qvd5UUsg9tKj3oKNvJEzQxSSbD0d/QreBzSyp3aSar+e1/ppFTcLgtcDRbK+1ouU EjQY2l5GKV4LR5mRgdjA8EnFI1OUZuPN0MQHrTpb/5iUZIhsgEA6MqpoOay9BMsk B8EMHiZwmnf1lIulljGy9l8uGyBAtIc= -----END CERTIFICATE-----Generated at Sat Aug 23 09:13:40 2025 by rpki-client