$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/3722329e-a28c-3dbb-b120-e326fbcbaad0.roa File: 3722329e-a28c-3dbb-b120-e326fbcbaad0.roa (raw, json) Hash identifier: ydJPeTMRM/l2w4wgZpa8SKE8TJ3ptqWosyl0KpDDk6c= Subject key identifier: 10:4B:73:88:12:95:EC:8D:FC:FA:D5:C2:40:00:EE:74:4B:BE:20:F2 Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7 Certificate serial: 010D0C9F4328584AADF115361D06CD123EC34F40 Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/3722329e-a28c-3dbb-b120-e326fbcbaad0.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 13638 IP address blocks: 162.33.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:15:36:1d:06:cd:12:3e:c3:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=c8b38696-6aa8-4f03-ad4d-da595ca28631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e0:dc:b3:92:bf:0a:da:1c:b4:72:31:7c:81: 6e:50:df:09:83:47:4b:d3:6b:1e:52:d5:70:fb:b4: 10:7e:dd:b3:7b:ab:f7:3d:70:9b:57:c4:64:33:bd: 4f:4d:05:90:c1:ad:24:2f:41:6c:cd:87:ca:93:c4: 97:a5:23:0f:90:19:31:50:21:0e:a0:a1:b2:73:d4: 87:a2:b2:99:91:2e:b5:d2:18:49:50:b3:a2:f5:5f: 6f:ae:c7:94:29:ab:99:e1:7f:bf:a5:89:ca:d3:83: 6c:1b:6f:89:be:db:c0:60:e5:b7:5e:c2:36:96:14: ef:cb:d2:f9:56:78:03:30:d2:ec:7d:8b:c8:18:36: 37:a2:95:5b:17:d5:90:8c:a4:0a:21:a1:8b:9b:6e: c3:cd:6a:2d:96:fe:fb:16:61:50:d6:b3:10:d7:62: 30:e6:5c:c2:7f:69:ce:19:ce:cc:cf:fe:39:41:23: 52:5b:6a:b9:d2:69:dd:50:7b:17:07:89:e9:f7:6c: c1:b7:b4:a2:4f:13:aa:35:bc:d8:24:8c:c4:ef:8e: 7d:14:32:36:8e:61:a3:1c:26:03:45:78:4f:71:11: cc:3a:ef:dd:00:a2:ba:ac:60:c1:fc:b2:7f:ba:57: 5c:bf:d4:22:d8:f2:fe:7b:6b:50:1c:ac:9f:c1:5c: 75:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4B:73:88:12:95:EC:8D:FC:FA:D5:C2:40:00:EE:74:4B:BE:20:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/3722329e-a28c-3dbb-b120-e326fbcbaad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl X509v3 Authority Key Identifier: keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer sbgp-ipAddrBlock: critical IPv4: 162.33.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d5:01:eb:be:5e:cb:6c:d1:ec:3e:ce:e5:80:e7:76:df:7f: b9:7d:5b:5a:66:0b:8e:1e:15:35:23:91:6b:e5:71:ca:c6:04: bd:59:f2:ee:1d:27:8d:ef:18:83:f7:92:fb:a9:75:f5:bf:87: c8:93:69:02:1a:3b:4d:e3:d8:ab:29:44:05:16:30:6d:ca:82: da:8b:2f:f3:23:ee:53:fa:35:c3:3b:80:ee:bc:7b:2c:54:6f: 7a:73:f0:89:e0:21:03:89:04:44:a5:15:24:33:ed:ad:37:bb: 75:07:84:0d:5d:05:12:77:15:6a:7e:f9:10:b2:ef:fe:1d:4c: 31:ef:0a:fc:66:09:fe:4a:50:ac:31:4b:28:2a:d5:c1:dc:dd: a0:69:33:06:59:da:65:52:6c:40:db:87:43:f6:9b:1b:59:5b: 7d:fb:96:2f:30:ad:3e:e0:68:23:8a:9d:24:51:7d:4e:00:de: a6:09:85:7c:72:7c:f4:81:1f:18:bb:ea:e1:1b:a4:81:89:28: 57:a8:7e:d8:fd:80:de:b0:63:aa:b6:9a:74:08:9f:b3:2e:78: a0:1d:67:67:90:30:33:9e:bc:36:c8:d0:4a:d9:ba:fc:8b:63: ab:0e:62:a9:32:cd:74:a2:ed:c7:eb:f6:45:5e:20:85:fe:f1: 66:87:62:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8RU2HQbNEj7DT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4 ZmI3MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk YzhiMzg2OTYtNmFhOC00ZjAzLWFkNGQtZGE1OTVjYTI4NjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieDcs5K/CtoctHIxfIFuUN8Jg0dL02seUtVw +7QQft2ze6v3PXCbV8RkM71PTQWQwa0kL0FszYfKk8SXpSMPkBkxUCEOoKGyc9SH orKZkS610hhJULOi9V9vrseUKauZ4X+/pYnK04NsG2+JvtvAYOW3XsI2lhTvy9L5 VngDMNLsfYvIGDY3opVbF9WQjKQKIaGLm27DzWotlv77FmFQ1rMQ12Iw5lzCf2nO Gc7Mz/45QSNSW2q50mndUHsXB4np92zBt7SiTxOqNbzYJIzE7459FDI2jmGjHCYD RXhPcRHMOu/dAKK6rGDB/LJ/uldcv9Qi2PL+e2tQHKyfwVx1gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBLc4gSleyN/PrVwkAA7nRLviDyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2 YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvMzcyMjMyOWUtYTI4Yy0z ZGJiLWIxMjAtZTMyNmZiY2JhYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3 NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5 MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFoiEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnVAeu+Xsts0ew+zuWA53bff7l9W1pmC44eFTUjkWvlccrGBL1Z8u4d J43vGIP3kvupdfW/h8iTaQIaO03j2KspRAUWMG3KgtqLL/Mj7lP6NcM7gO68eyxU b3pz8IngIQOJBESlFSQz7a03u3UHhA1dBRJ3FWp++RCy7/4dTDHvCvxmCf5KUKwx Sygq1cHc3aBpMwZZ2mVSbEDbh0P2mxtZW337li8wrT7gaCOKnSRRfU4A3qYJhXxy fPSBHxi76uEbpIGJKFeoftj9gN6wY6q2mnQIn7MueKAdZ2eQMDOevDbI0ErZuvyL Y6sOYqkyzXSi7cfr9kVeIIX+8WaHYps= -----END CERTIFICATE-----Generated at Thu Aug 7 13:00:22 2025 by rpki-client