$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/46e5f02a-6c64-3546-b9b3-d0df60c70801.roa File: 46e5f02a-6c64-3546-b9b3-d0df60c70801.roa (raw, json) Hash identifier: blT3/2Z+OVVZFbNI8AJKr1ORnalbnvDUxq/nE+xDds4= Subject key identifier: 07:39:45:C2:B5:72:AA:C2:5B:56:65:9C:15:A3:2E:23:1C:E9:8D:C0 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F43285849D42FA4A192D263A010FA8780 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/46e5f02a-6c64-3546-b9b3-d0df60c70801.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 25649 IP address blocks: 162.33.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:2f:a4:a1:92:d2:63:a0:10:fa:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=c5c63224-ae97-46c3-bf26-44949a4a1210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:52:f1:9f:68:c0:fa:5e:fa:ed:3b:e9:0b:42: 0f:ac:d3:38:54:59:15:bf:c8:4a:5f:19:60:c4:ab: 18:6e:6a:a7:f4:59:e7:e4:9c:a3:75:4c:1d:c1:4b: b5:7e:b1:c3:5b:39:0a:ad:f0:3b:ca:2b:3f:5d:b7: 16:10:9a:b2:82:d5:39:47:ff:91:c6:e5:42:9f:dd: 2d:1a:01:ee:5b:5f:7e:39:06:16:f0:f5:82:ae:c5: 26:3f:be:79:17:1a:59:3f:a1:e1:fc:62:ee:e8:85: 26:19:d4:8f:d7:9a:9e:9b:56:32:bc:2d:e3:5c:e9: bc:17:83:a4:b8:6b:48:59:88:df:f2:3d:5f:58:c5: 97:be:53:d6:0d:ea:a9:79:c9:56:b1:1b:ba:82:51: 39:70:cb:fb:2e:15:17:a5:2a:a2:5f:07:56:df:c8: 46:bc:a2:37:70:fb:3a:0d:dc:0c:55:67:1f:96:46: cd:29:a0:65:90:2b:e7:fe:68:c4:21:7d:8b:c7:aa: bf:b2:66:6f:a8:60:50:84:0a:8b:95:82:72:4e:c6: 75:34:9a:29:06:be:83:0c:a1:a7:b1:ed:d5:5b:25: 78:df:43:3e:af:55:81:81:db:2d:c9:7d:6d:e5:a5: 9c:87:2f:a9:45:d4:d0:da:ce:5c:9b:90:5c:12:14: 21:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:39:45:C2:B5:72:AA:C2:5B:56:65:9C:15:A3:2E:23:1C:E9:8D:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/46e5f02a-6c64-3546-b9b3-d0df60c70801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 162.33.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a3:8f:54:75:59:07:be:d1:28:83:d6:95:05:a0:a1:52:2e: 5d:d5:13:20:ec:51:d3:91:72:91:65:f8:a6:c5:55:14:9b:ea: 12:e1:73:a3:e6:97:17:3d:d8:19:09:48:cb:73:3b:ba:29:ad: 37:bb:54:35:17:d7:58:bd:42:20:23:e6:4e:0f:b8:81:8c:2a: a8:ef:20:03:04:66:ce:c2:8e:e8:bd:c8:0c:fb:9f:e3:aa:08: 23:0d:99:b9:3e:11:7a:0b:8d:b4:f7:b8:28:65:63:45:57:af: 2e:cc:fb:df:b2:0d:57:a9:58:c9:f4:b6:fa:9c:f2:07:32:86: 27:1a:ab:94:8e:53:e3:d1:fe:b6:92:30:04:80:db:e1:ee:13: 75:11:c5:0d:44:3d:5f:22:e1:d5:86:ef:e8:72:d6:86:c3:4c: 4a:6b:af:f7:f8:51:78:d0:ed:8f:49:3f:76:76:a3:f5:61:3d: 6c:9b:b4:ce:7f:0a:26:a5:38:8e:7b:1c:be:ff:4e:25:00:51: 56:6a:99:07:9e:27:d5:f4:ac:c3:32:94:83:a0:86:9c:6a:d7: 90:04:37:0a:2e:f3:ff:39:ab:15:04:45:2e:b4:f6:bb:b9:1a: da:51:ad:50:91:95:e6:4d:96:3e:4e:c2:ba:69:8e:a9:05:dd: fc:03:bc:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6ShktJjoBD6h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YzVjNjMyMjQtYWU5Ny00NmMzLWJmMjYtNDQ5NDlhNGExMjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VLxn2jA+l767TvpC0IPrNM4VFkVv8hKXxlg xKsYbmqn9Fnn5JyjdUwdwUu1frHDWzkKrfA7yis/XbcWEJqygtU5R/+RxuVCn90t GgHuW19+OQYW8PWCrsUmP755FxpZP6Hh/GLu6IUmGdSP15qem1YyvC3jXOm8F4Ok uGtIWYjf8j1fWMWXvlPWDeqpeclWsRu6glE5cMv7LhUXpSqiXwdW38hGvKI3cPs6 DdwMVWcflkbNKaBlkCvn/mjEIX2Lx6q/smZvqGBQhAqLlYJyTsZ1NJopBr6DDKGn se3VWyV430M+r1WBgdstyX1t5aWchy+pRdTQ2s5cm5BcEhQh6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAc5RcK1cqrCW1ZlnBWjLiMc6Y3AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNDZlNWYwMmEtNmM2NC0z NTQ2LWI5YjMtZDBkZjYwYzcwODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoiHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6jj1R1WQe+0SiD1pUFoKFSLl3VEyDsUdORcpFl+KbFVRSb6hLhc6Pm lxc92BkJSMtzO7oprTe7VDUX11i9QiAj5k4PuIGMKqjvIAMEZs7Cjui9yAz7n+Oq CCMNmbk+EXoLjbT3uChlY0VXry7M+9+yDVepWMn0tvqc8gcyhicaq5SOU+PR/raS MASA2+HuE3URxQ1EPV8i4dWG7+hy1obDTEprr/f4UXjQ7Y9JP3Z2o/VhPWybtM5/ CialOI57HL7/TiUAUVZqmQeeJ9X0rMMylIOghpxq15AENwou8/85qxUERS609ru5 GtpRrVCRleZNlj5OwrppjqkF3fwDvFM= -----END CERTIFICATE-----Generated at Sun Jun 29 16:18:26 2025 by rpki-client