$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/97e432fe-99ef-32d7-be43-8c4c824afc6f.roa File: 97e432fe-99ef-32d7-be43-8c4c824afc6f.roa (raw, json) Hash identifier: EBtQ09o0HCnQwlW+iEUGY4R1ho2JQxYG57JwRZX+54k= Subject key identifier: 3F:16:F4:BD:14:B5:A7:D4:BF:4A:2F:2A:2D:7F:94:0B:66:97:11:FF Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584AE4610EEFC6F36E6C5EF9BF80 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/97e432fe-99ef-32d7-be43-8c4c824afc6f.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 162.33.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:0e:ef:c6:f3:6e:6c:5e:f9:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=47fbee95-bef5-4ee0-bcf0-4bd5705964a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6e:a7:72:72:08:34:05:d2:2c:ba:45:43:66: d0:2d:98:77:f1:ca:2a:87:d2:c4:10:7a:18:27:f9: 5f:c2:0b:83:43:a3:83:5a:46:61:8e:62:e9:1b:e7: c2:30:33:2b:ab:05:93:5c:e2:15:1e:63:fd:af:c1: a1:71:c3:51:4d:e2:c5:6a:b5:af:22:d3:a9:fc:92: 9d:7c:a9:8d:f0:bc:4a:5f:d2:3c:bd:fc:09:30:53: 00:a7:4c:d5:7b:48:f9:4f:8c:a5:32:f0:1e:63:4d: da:88:e7:47:9b:56:0d:90:42:d1:e5:62:8f:d9:13: f0:13:e1:a4:12:2a:9f:a1:75:ea:95:65:ae:07:00: 10:2d:18:ce:48:a9:48:45:23:d3:30:70:93:d0:35: 81:f0:50:83:51:f1:79:3b:1f:04:7c:80:43:71:96: c5:97:06:51:08:65:c9:ff:0f:e5:8d:fe:1d:07:ea: 9c:3d:45:50:05:af:2a:9e:9e:ab:33:ec:11:44:45: 0e:d8:49:7d:39:06:d2:bf:1d:be:e6:34:25:89:78: 03:be:29:c9:86:b5:52:40:3f:38:20:6f:f3:1a:1b: ac:3a:3c:3c:05:e0:3c:17:36:bd:40:07:b9:ab:cf: 55:1d:34:e0:81:13:7e:dd:08:67:0c:3c:c0:ae:3f: 80:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:16:F4:BD:14:B5:A7:D4:BF:4A:2F:2A:2D:7F:94:0B:66:97:11:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/97e432fe-99ef-32d7-be43-8c4c824afc6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:5b:46:30:b0:ea:41:d2:23:58:85:06:b7:cd:c5:04:53:80: ce:c0:85:1f:05:6b:40:61:bd:c2:50:09:54:8d:d0:c7:86:0f: 24:42:97:89:a3:60:04:84:f0:ba:7d:b7:b9:0b:59:2c:74:cb: 1f:8e:f4:4c:6e:2c:a0:dc:4d:8a:51:a7:5a:7e:13:a1:a1:6a: 7d:95:04:a5:c1:c1:d1:be:f8:6a:81:3c:a6:bb:10:31:84:45: ba:2b:b9:70:d1:f5:af:52:ef:6d:b5:f1:95:e4:94:da:55:8e: 24:2e:db:ac:55:cd:d8:5d:72:11:8b:09:57:9e:a6:f0:a3:56: cb:22:d4:35:fb:0d:f7:99:2d:78:c1:44:07:05:ff:89:1f:28: f0:40:7f:a7:ca:42:80:de:5f:59:0e:e7:d9:74:80:39:18:0d: ab:aa:50:b0:d2:d0:1e:0f:5d:e0:d4:93:4a:2f:8a:49:ea:d9: 72:e7:e1:bd:50:0c:0b:89:f0:9e:80:d3:c0:b2:30:dc:eb:4d: 22:f3:e1:2e:a4:4f:f6:05:29:8b:7d:12:4f:c2:5d:c8:34:46: aa:58:81:12:0c:e6:dd:c6:6d:0e:ed:3e:ff:5b:2a:21:68:d4: 85:04:6e:d4:d9:82:9a:58:ec:e9:1a:73:9c:09:08:03:76:e3: bf:6e:5d:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYQ7vxvNubF75v4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NDdmYmVlOTUtYmVmNS00ZWUwLWJjZjAtNGJkNTcwNTk2NGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzG6ncnIINAXSLLpFQ2bQLZh38coqh9LEEHoY J/lfwguDQ6ODWkZhjmLpG+fCMDMrqwWTXOIVHmP9r8GhccNRTeLFarWvItOp/JKd fKmN8LxKX9I8vfwJMFMAp0zVe0j5T4ylMvAeY03aiOdHm1YNkELR5WKP2RPwE+Gk EiqfoXXqlWWuBwAQLRjOSKlIRSPTMHCT0DWB8FCDUfF5Ox8EfIBDcZbFlwZRCGXJ /w/ljf4dB+qcPUVQBa8qnp6rM+wRREUO2El9OQbSvx2+5jQliXgDvinJhrVSQD84 IG/zGhusOjw8BeA8Fza9QAe5q89VHTTggRN+3QhnDDzArj+AOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8W9L0UtafUv0ovKi1/lAtmlxH/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvOTdlNDMyZmUtOTllZi0z MmQ3LWJlNDMtOGM0YzgyNGFmYzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpbRjCw6kHSI1iFBrfNxQRTgM7AhR8Fa0BhvcJQCVSN0MeGDyRCl4mj YASE8Lp9t7kLWSx0yx+O9ExuLKDcTYpRp1p+E6Ghan2VBKXBwdG++GqBPKa7EDGE RboruXDR9a9S72218ZXklNpVjiQu26xVzdhdchGLCVeepvCjVssi1DX7DfeZLXjB RAcF/4kfKPBAf6fKQoDeX1kO59l0gDkYDauqULDS0B4PXeDUk0oviknq2XLn4b1Q DAuJ8J6A08CyMNzrTSLz4S6kT/YFKYt9Ek/CXcg0RqpYgRIM5t3GbQ7tPv9bKiFo 1IUEbtTZgppY7Okac5wJCAN2479uXec= -----END CERTIFICATE-----Generated at Sat Aug 23 09:03:45 2025 by rpki-client