$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/ca837581-cade-381c-8a7e-a8a78340eb4c.roa File: ca837581-cade-381c-8a7e-a8a78340eb4c.roa (raw, json) Hash identifier: gwT/gkJTEpQuL8nTqmBbT38ursHLpZ1/6EsgbGxgsSA= Subject key identifier: 04:34:BD:BB:55:55:DC:45:5E:EC:63:B8:F4:2A:51:30:6C:E1:C7:7C Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F4328584A019025F4B7E5AC78071CEA00 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/ca837581-cade-381c-8a7e-a8a78340eb4c.roa Signing time: Wed 28 May 2025 19:07:01 +0000 ROA not before: Wed 28 May 2025 19:07:01 +0000 ROA not after: Tue 26 Aug 2025 19:07:01 +0000 asID: 7311 IP address blocks: 162.33.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:01:90:25:f4:b7:e5:ac:78:07:1c:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: May 28 19:07:01 2025 GMT Not After : Aug 26 19:07:01 2025 GMT Subject: CN=fa556cfb-51d3-4856-b6cf-974d9cf5f470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:03:b1:74:01:af:6e:7e:1e:43:b3:bf:e3: 3f:f0:23:3c:f9:f7:06:56:67:1c:dc:b2:5c:e4:9a: 56:d8:bc:ed:c3:f7:38:92:da:32:0c:9f:24:fb:5d: 75:1a:78:eb:4b:15:18:7a:02:38:6b:4e:59:6c:f6: 99:c4:34:b1:81:a7:54:d3:24:7e:18:81:27:69:fc: fc:49:1f:98:bd:ab:bc:65:1c:3f:bb:0c:92:46:18: ae:18:5f:7c:d1:ef:61:81:0e:f6:3c:4c:87:ad:62: 87:1c:5c:50:89:8d:3e:40:ae:73:29:85:5e:e4:7f: 2b:a8:a5:46:8a:2e:c1:27:f9:2d:34:2a:9e:84:63: ab:61:79:a9:16:d6:c5:ac:39:95:38:09:ba:8d:19: f7:2c:5f:9e:d4:6c:e8:24:fd:a7:6b:a8:4e:5b:76: f1:33:eb:03:d9:7e:a8:5b:40:f2:16:1b:f9:6b:b3: 68:52:f4:bc:d6:fc:28:34:b6:f1:a8:1c:9b:ff:f7: 95:67:33:95:7e:52:f8:b7:46:32:4a:ac:a6:37:e6: 6b:b6:71:3f:90:a7:78:a7:7a:b9:37:89:77:b6:a5: 76:d3:ad:ff:e2:25:9a:94:0e:1a:1e:15:f6:1a:e9: 0a:bd:e3:e2:30:af:49:0b:76:d1:9c:25:8c:3c:27: 96:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:34:BD:BB:55:55:DC:45:5E:EC:63:B8:F4:2A:51:30:6C:E1:C7:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/ca837581-cade-381c-8a7e-a8a78340eb4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: 162.33.180.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b2:2b:62:c3:32:15:77:26:05:f4:f0:78:3d:c8:3d:80:fe: 22:03:57:44:66:07:45:5d:11:80:b4:95:5d:1b:b6:dd:7d:c2: 70:24:a6:40:d9:a2:be:42:99:19:14:32:3c:69:41:b8:a9:e7: bf:58:7b:dc:8c:21:73:6f:6b:e9:37:93:3d:45:8f:f5:6a:08: 25:3d:ae:c4:21:2d:10:d8:0e:3d:21:a2:0f:e3:d3:63:1f:56: 2d:88:f0:59:c4:b1:4e:90:0e:27:7e:47:3e:a2:1a:35:5d:0c: 81:01:17:b8:fc:3a:1d:83:a4:a0:43:50:49:ee:7b:7d:16:a7: 11:ff:c3:e3:dc:d1:ee:d7:af:a4:ce:0f:ff:2e:d9:e5:7c:45: 3b:60:52:28:ff:76:79:88:ce:b3:9f:86:ce:05:cb:0e:49:fc: f5:6d:6c:5d:eb:d1:84:e9:fb:89:da:4b:de:17:b5:3d:3e:7d: 30:48:5f:1f:3c:5b:31:47:67:a1:5f:43:2c:06:eb:2d:46:69: c7:c8:9e:59:40:18:13:c3:f5:52:3e:d4:af:9d:be:71:23:b8: f7:53:17:a4:3e:57:c7:d4:ee:76:2a:7f:81:3c:e0:95:92:b8: f4:13:12:c7:65:5e:b8:d2:92:9c:98:e9:eb:f5:d9:a1:5a:08: 95:52:89:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoBkCX0t+WseAcc6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI1MDUyODE5MDcwMVoXDTI1MDgyNjE5MDcwMVowLzEtMCsGA1UEAxMk ZmE1NTZjZmItNTFkMy00ODU2LWI2Y2YtOTc0ZDljZjVmNDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscYDsXQBr25+HkOzv+M/8CM8+fcGVmcc3LJc 5JpW2Lztw/c4ktoyDJ8k+111GnjrSxUYegI4a05ZbPaZxDSxgadU0yR+GIEnafz8 SR+Yvau8ZRw/uwySRhiuGF980e9hgQ72PEyHrWKHHFxQiY0+QK5zKYVe5H8rqKVG ii7BJ/ktNCqehGOrYXmpFtbFrDmVOAm6jRn3LF+e1GzoJP2na6hOW3bxM+sD2X6o W0DyFhv5a7NoUvS81vwoNLbxqByb//eVZzOVflL4t0YySqymN+ZrtnE/kKd4p3q5 N4l3tqV2063/4iWalA4aHhX2GukKvePiMK9JC3bRnCWMPCeWUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQ0vbtVVdxFXuxjuPQqUTBs4cd8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvY2E4Mzc1ODEtY2FkZS0z ODFjLThhN2UtYThhNzgzNDBlYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoiG0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeyK2LDMhV3JgX08Hg9yD2A/iIDV0RmB0VdEYC0lV0btt19wnAkpkDZ or5CmRkUMjxpQbip579Ye9yMIXNva+k3kz1Fj/VqCCU9rsQhLRDYDj0hog/j02Mf Vi2I8FnEsU6QDid+Rz6iGjVdDIEBF7j8Oh2DpKBDUEnue30WpxH/w+Pc0e7Xr6TO D/8u2eV8RTtgUij/dnmIzrOfhs4Fyw5J/PVtbF3r0YTp+4naS94XtT0+fTBIXx88 WzFHZ6FfQywG6y1GacfInllAGBPD9VI+1K+dvnEjuPdTF6Q+V8fU7nYqf4E84JWS uPQTEsdlXrjSkpyY6ev12aFaCJVSiQA= -----END CERTIFICATE-----Generated at Mon Jun 30 11:57:32 2025 by rpki-client