$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/5b2478f9-1c54-3a35-8291-2f671808f6c0.roa File: 5b2478f9-1c54-3a35-8291-2f671808f6c0.roa (raw, json) Hash identifier: IjqafBRFOtIgt4Paz9cchwa8Zhvt84HK7j6Ywpzh4Ds= Subject key identifier: B6:3B:34:3A:A5:9C:61:8E:95:11:D8:0D:6D:81:5A:AD:79:E0:F0:61 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584AE4610EC00698E51D82788650 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/5b2478f9-1c54-3a35-8291-2f671808f6c0.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 162.33.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:0e:c0:06:98:e5:1d:82:78:86:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=c4829131-f0da-493e-90d6-79eaf245decf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:72:d7:65:8a:9c:fb:e9:ca:85:29:08:ea:03: 19:a8:d3:4f:75:db:7f:f2:1d:30:ff:32:40:79:a5: 4c:af:3b:50:87:1a:67:de:87:e1:95:14:94:29:e3: 82:64:bd:47:01:bb:74:2e:83:2c:e5:1f:0a:ae:29: af:4d:49:63:86:3e:72:66:11:3a:2d:30:ca:b5:cf: 7c:5f:aa:8a:c6:64:82:62:bf:d4:e7:4a:15:c9:a1: 22:1c:99:5f:f3:72:32:3b:d0:36:a6:dc:09:b4:65: 07:9b:f6:52:13:04:fd:a9:fa:5b:8f:98:6b:fd:3c: 1e:f9:39:75:d3:9b:44:f4:36:ff:0e:17:38:03:7f: f6:10:57:4b:f7:a0:52:42:64:a6:8b:fd:05:b0:48: 23:2f:46:45:8c:1a:85:af:43:0d:2a:04:ae:76:08: 5d:98:04:1a:a2:5f:64:bc:3c:3f:96:f4:16:d3:91: 9d:94:7f:fb:fa:59:7a:29:aa:6a:a2:4a:b5:55:f5: 85:f2:2e:64:f9:b5:f7:e7:00:88:42:3b:bc:a3:9a: 6b:b5:67:95:99:fa:33:12:05:c1:a1:74:ce:d8:3f: 62:a3:7b:74:be:18:c9:84:5c:94:03:78:96:78:25: ed:4f:5c:69:f4:01:e3:96:44:37:f9:e1:04:b1:4b: bf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3B:34:3A:A5:9C:61:8E:95:11:D8:0D:6D:81:5A:AD:79:E0:F0:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/5b2478f9-1c54-3a35-8291-2f671808f6c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c4:87:32:c2:7d:09:f9:67:f7:ab:be:09:df:48:ee:f7:31: 38:74:09:90:dd:eb:58:83:07:aa:02:b8:c4:da:c9:c4:4c:39: 26:50:73:cd:bf:41:d9:d6:1f:83:e9:4e:4d:f2:28:e6:03:84: 24:db:46:39:1e:80:a4:25:04:5b:80:31:2b:cd:71:12:64:e0: ac:5f:7d:4b:bf:b8:aa:13:62:a9:77:6a:d9:4b:3c:ee:d5:21: 81:6e:84:1c:5a:69:c2:12:aa:73:01:de:7e:0e:70:9b:24:06: 6b:a5:34:37:36:20:cd:7d:2a:14:ee:8a:64:13:60:c6:47:81: ce:4b:3a:1e:ee:cb:17:ca:26:00:34:e5:ba:d1:0f:e4:fb:13: 6d:91:26:8e:3e:6a:32:40:4b:0c:41:27:8a:44:6c:9b:1b:f6: 73:4a:d9:2e:6d:aa:d5:47:2f:f9:50:61:15:c4:34:9c:d7:6c: a9:0a:a1:91:05:4a:74:c9:ad:4f:a0:2d:9a:7b:16:6d:49:c6: 65:bf:95:83:e3:52:3b:d3:7b:b7:72:48:ed:b3:11:8a:a9:d4: 24:10:87:85:0c:ee:25:cb:8b:7f:47:a5:98:79:8e:e6:40:8c: c9:4c:0e:30:94:3b:4d:c1:80:8d:be:27:1e:be:dc:8b:72:05: 29:75:00:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYQ7ABpjlHYJ4hlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YzQ4MjkxMzEtZjBkYS00OTNlLTkwZDYtNzllYWYyNDVkZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3LXZYqc++nKhSkI6gMZqNNPddt/8h0w/zJA eaVMrztQhxpn3ofhlRSUKeOCZL1HAbt0LoMs5R8KrimvTUljhj5yZhE6LTDKtc98 X6qKxmSCYr/U50oVyaEiHJlf83IyO9A2ptwJtGUHm/ZSEwT9qfpbj5hr/Twe+Tl1 05tE9Db/Dhc4A3/2EFdL96BSQmSmi/0FsEgjL0ZFjBqFr0MNKgSudghdmAQaol9k vDw/lvQW05GdlH/7+ll6Kapqokq1VfWF8i5k+bX35wCIQju8o5prtWeVmfozEgXB oXTO2D9io3t0vhjJhFyUA3iWeCXtT1xp9AHjlkQ3+eEEsUu/ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLY7NDqlnGGOlRHYDW2BWq154PBhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvNWIyNDc4ZjktMWM1NC0z YTM1LTgyOTEtMmY2NzE4MDhmNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbEhzLCfQn5Z/ervgnfSO73MTh0CZDd61iDB6oCuMTaycRMOSZQc82/ QdnWH4PpTk3yKOYDhCTbRjkegKQlBFuAMSvNcRJk4KxffUu/uKoTYql3atlLPO7V IYFuhBxaacISqnMB3n4OcJskBmulNDc2IM19KhTuimQTYMZHgc5LOh7uyxfKJgA0 5brRD+T7E22RJo4+ajJASwxBJ4pEbJsb9nNK2S5tqtVHL/lQYRXENJzXbKkKoZEF SnTJrU+gLZp7Fm1JxmW/lYPjUjvTe7dySO2zEYqp1CQQh4UM7iXLi39HpZh5juZA jMlMDjCUO03BgI2+Jx6+3ItyBSl1AJs= -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:14 2025 by rpki-client