$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/ca837581-cade-381c-8a7e-a8a78340eb4c.roa File: ca837581-cade-381c-8a7e-a8a78340eb4c.roa (raw, json) Hash identifier: m2PIPuNeGNtdFIZEJ26/pfgkq3lQepYthVkh0rBViGM= Subject key identifier: 0F:E6:69:91:66:B0:EF:27:7F:1A:E3:2E:92:B1:9D:CD:5A:0F:3A:15 Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F4328584AE1971D494E1704C51B411480 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/ca837581-cade-381c-8a7e-a8a78340eb4c.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 7311 IP address blocks: 162.33.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:97:1d:49:4e:17:04:c5:1b:41:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=d856fc94-552f-4e30-aaf7-a4dfdb76976f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:59:8e:1e:af:8e:04:2b:db:21:4d:b1:39:04: 6a:68:73:76:1b:fc:a0:1d:41:6f:cd:35:2c:b1:8f: 4a:27:06:fd:08:c0:44:8d:2e:aa:44:e9:ef:18:3a: 02:c5:5b:18:03:5a:bb:a6:16:38:e0:fc:01:48:87: db:fb:27:ab:fb:f3:5f:7f:9a:60:06:db:81:20:93: c3:a9:a5:ab:47:5e:d7:56:b2:f7:72:9a:c3:19:19: 79:b4:47:2f:9f:44:e1:d4:95:63:3e:28:c3:73:10: 7a:c4:34:e3:52:93:d8:32:f0:cf:ec:31:59:a4:f8: 6a:de:1c:60:28:fc:a4:64:3d:50:0d:4d:66:12:de: 26:e4:6c:ab:a8:f0:cf:46:fb:4e:05:81:b8:c8:7d: ff:b5:14:92:80:b0:4b:6d:48:ba:91:91:8b:12:60: 06:fb:dd:53:0e:f9:ec:05:d9:a5:04:bb:6f:91:78: f6:5a:58:3d:01:02:fd:a3:14:a5:16:9d:fd:18:8d: 9b:aa:0c:7a:2c:7c:87:ba:20:55:45:70:ca:7f:39: cd:8f:2f:42:cf:61:bb:1a:e9:c4:ea:30:5c:3f:e1: 54:9c:73:45:8b:57:13:b5:7a:fa:54:a9:88:93:b5: 47:99:a4:ca:84:86:d7:5e:b2:1e:39:a8:50:66:2b: 5f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E6:69:91:66:B0:EF:27:7F:1A:E3:2E:92:B1:9D:CD:5A:0F:3A:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/ca837581-cade-381c-8a7e-a8a78340eb4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: 162.33.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:7f:4a:71:d2:8c:ec:91:44:a1:92:8a:72:a3:3e:97:ba:1b: 3d:c7:cd:a8:88:c5:e8:e2:a0:19:1f:46:07:ab:3c:4f:73:56: 1d:77:42:fa:25:10:40:52:3c:f2:a3:ea:13:84:06:51:9b:0b: bf:00:64:ec:1e:b0:a6:4c:af:db:12:27:84:af:38:22:4b:15: 87:63:6a:7a:45:1a:a7:48:17:ab:21:4f:62:ea:90:0a:9b:03: 06:bf:58:dd:c2:6a:22:99:60:f2:e0:f9:fb:09:95:12:fd:ed: 85:1c:d9:d8:b1:c5:d0:93:17:6f:67:38:ee:d8:80:da:3b:ce: 2f:d9:36:51:3b:f4:92:5d:dd:66:bf:3d:c7:ad:8d:48:8c:e4: 6e:ff:87:f3:a9:d8:48:c3:e6:46:69:c3:cc:57:7b:8f:ee:ab: 17:94:fc:85:8b:37:9f:6d:75:ad:47:57:e4:d0:7d:37:ab:18: 64:a5:cb:a2:22:5e:17:7b:c2:00:9f:de:37:02:d2:19:63:35: d9:3d:0a:ff:37:80:95:d6:a9:2b:04:47:64:86:d1:13:7b:04: d0:98:b7:00:a1:e4:ce:95:7f:9e:37:91:74:d1:df:6e:91:17: e0:1f:16:ae:93:0e:89:6a:a6:b0:f8:da:38:ca:0b:b0:96:5d: b8:98:56:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlx1JThcExRtBFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk ZDg1NmZjOTQtNTUyZi00ZTMwLWFhZjctYTRkZmRiNzY5NzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFmOHq+OBCvbIU2xOQRqaHN2G/ygHUFvzTUs sY9KJwb9CMBEjS6qROnvGDoCxVsYA1q7phY44PwBSIfb+yer+/Nff5pgBtuBIJPD qaWrR17XVrL3cprDGRl5tEcvn0Th1JVjPijDcxB6xDTjUpPYMvDP7DFZpPhq3hxg KPykZD1QDU1mEt4m5GyrqPDPRvtOBYG4yH3/tRSSgLBLbUi6kZGLEmAG+91TDvns BdmlBLtvkXj2Wlg9AQL9oxSlFp39GI2bqgx6LHyHuiBVRXDKfznNjy9Cz2G7GunE 6jBcP+FUnHNFi1cTtXr6VKmIk7VHmaTKhIbXXrIeOahQZitfOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/maZFmsO8nfxrjLpKxnc1aDzoVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvY2E4Mzc1ODEtY2FkZS0z ODFjLThhN2UtYThhNzgzNDBlYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoiG0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJV/SnHSjOyRRKGSinKjPpe6Gz3HzaiIxejioBkfRgerPE9zVh13Qvol EEBSPPKj6hOEBlGbC78AZOwesKZMr9sSJ4SvOCJLFYdjanpFGqdIF6shT2LqkAqb Awa/WN3CaiKZYPLg+fsJlRL97YUc2dixxdCTF29nOO7YgNo7zi/ZNlE79JJd3Wa/ PcetjUiM5G7/h/Op2EjD5kZpw8xXe4/uqxeU/IWLN59tda1HV+TQfTerGGSly6Ii Xhd7wgCf3jcC0hljNdk9Cv83gJXWqSsER2SG0RN7BNCYtwCh5M6Vf543kXTR326R F+AfFq6TDolqprD42jjKC7CWXbiYVtk= -----END CERTIFICATE-----Generated at Sun Aug 24 07:58:46 2025 by rpki-client