$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/c0abde07-4a6d-396c-b836-ba3936287aac.roa File: c0abde07-4a6d-396c-b836-ba3936287aac.roa (raw, json) Hash identifier: zekdgJlaWTnAOc5CM8THIUKpMX/44u58V1aKFIDeSdg= Subject key identifier: DA:E3:08:0A:95:74:4C:C9:3C:37:D8:B9:89:A7:56:76:B7:1E:5E:38 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584AE46116AAF4BEAF2CEEB5B600 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/c0abde07-4a6d-396c-b836-ba3936287aac.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 162.33.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:16:aa:f4:be:af:2c:ee:b5:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=4863cd5b-46a4-4390-b47d-7d4739d5e2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:28:a2:f0:91:ae:9b:a5:72:60:35:b4:7e:4a: 5a:c9:62:b0:5c:91:6f:a5:fa:1d:a2:ed:c8:1b:76: a7:6f:d0:50:8d:68:e5:b4:01:20:61:4d:f3:96:f1: e9:38:b4:73:97:af:e6:31:a3:ad:69:6f:68:b2:af: d8:6b:03:76:5e:01:e9:ef:31:b5:3c:07:e0:98:28: 0b:2b:13:f7:df:90:06:f4:78:29:88:2d:24:95:d0: e8:8b:1a:da:8a:90:2a:32:c5:64:8c:f9:85:d9:6f: 42:50:20:e2:a2:fd:12:f9:52:93:1f:16:aa:9f:26: 44:c1:56:fe:68:e1:32:f1:66:5c:7d:57:bd:e9:3a: 71:58:12:42:88:fa:06:d6:d1:7a:3d:7a:22:74:50: 86:b8:58:46:45:e0:a9:e3:2f:c4:5b:bf:1c:08:27: cd:fa:fd:4a:05:03:3d:30:4e:a9:7d:b4:0a:0c:68: a3:7d:b9:4b:f6:93:80:e2:fd:2b:6b:b1:db:84:73: b3:cd:45:03:f4:c5:13:59:2e:11:5c:a0:40:40:db: 10:d2:7a:99:2e:a2:5f:90:dc:87:23:3d:b8:1a:af: 05:cf:f5:77:58:21:53:aa:ae:a5:dd:31:f5:33:53: a9:eb:fe:65:92:bd:d8:43:f7:a8:de:54:c7:bd:e0: 84:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E3:08:0A:95:74:4C:C9:3C:37:D8:B9:89:A7:56:76:B7:1E:5E:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/c0abde07-4a6d-396c-b836-ba3936287aac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:f3:57:30:43:82:7e:61:fe:b0:43:ee:c1:33:57:68:16:57: 52:03:3d:72:ad:d7:a8:15:46:38:e9:9c:f5:ff:de:5d:93:1c: 2a:27:a9:3d:6f:66:5b:94:7f:fd:07:7f:fb:9f:9c:6b:d3:d0: d1:41:fa:70:a6:d4:71:1e:24:40:bd:2b:94:75:d6:bd:1e:f4: 30:3b:fb:d2:d3:a3:51:1a:fe:2a:be:5c:b5:ff:dc:98:6b:6f: be:bc:1a:51:1f:e9:d2:53:35:94:23:2d:c1:4c:41:80:e4:e3: eb:ad:e9:e6:28:70:cf:11:f5:82:10:59:56:0d:b2:ee:16:cf: 4e:c1:77:bc:da:26:9e:e3:3e:52:53:02:68:13:ab:fa:e6:36: bb:fb:ca:cf:a2:a7:44:e7:52:67:49:7b:ba:64:02:3b:1c:ee: 72:38:9c:ba:e3:c0:38:4d:bd:c3:72:32:7c:23:cd:67:ce:ad: f0:3a:4a:1b:dd:41:7c:fc:89:1d:f9:40:4c:a4:0f:8d:0f:fd: e2:27:a4:61:67:0e:40:c1:2f:3f:0a:ef:ae:15:73:26:a9:92: 1c:28:40:c1:29:16:59:e8:8f:fe:22:1d:af:ee:2f:c4:f4:e3: 37:c4:82:97:79:09:d4:f3:dd:75:e8:48:5a:e0:f2:3f:e2:c2: 3c:fa:a7:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRaq9L6vLO61tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NDg2M2NkNWItNDZhNC00MzkwLWI0N2QtN2Q0NzM5ZDVlMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyii8JGum6VyYDW0fkpayWKwXJFvpfodou3I G3anb9BQjWjltAEgYU3zlvHpOLRzl6/mMaOtaW9osq/YawN2XgHp7zG1PAfgmCgL KxP335AG9HgpiC0kldDoixraipAqMsVkjPmF2W9CUCDiov0S+VKTHxaqnyZEwVb+ aOEy8WZcfVe96TpxWBJCiPoG1tF6PXoidFCGuFhGReCp4y/EW78cCCfN+v1KBQM9 ME6pfbQKDGijfblL9pOA4v0ra7HbhHOzzUUD9MUTWS4RXKBAQNsQ0nqZLqJfkNyH Iz24Gq8Fz/V3WCFTqq6l3TH1M1Op6/5lkr3YQ/eo3lTHveCEoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrjCAqVdEzJPDfYuYmnVna3Hl44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvYzBhYmRlMDctNGE2ZC0z OTZjLWI4MzYtYmEzOTM2Mjg3YWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPzVzBDgn5h/rBD7sEzV2gWV1IDPXKt16gVRjjpnPX/3l2THConqT1v ZluUf/0Hf/ufnGvT0NFB+nCm1HEeJEC9K5R11r0e9DA7+9LTo1Ea/iq+XLX/3Jhr b768GlEf6dJTNZQjLcFMQYDk4+ut6eYocM8R9YIQWVYNsu4Wz07Bd7zaJp7jPlJT AmgTq/rmNrv7ys+ip0TnUmdJe7pkAjsc7nI4nLrjwDhNvcNyMnwjzWfOrfA6Shvd QXz8iR35QEykD40P/eInpGFnDkDBLz8K764VcyapkhwoQMEpFlnoj/4iHa/uL8T0 4zfEgpd5CdTz3XXoSFrg8j/iwjz6pww= -----END CERTIFICATE-----Generated at Sat Aug 23 09:07:08 2025 by rpki-client