$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/91659b14-1fa3-39a1-8710-69be8ad85679.roa File: 91659b14-1fa3-39a1-8710-69be8ad85679.roa (raw, json) Hash identifier: 62vQ0ymSvtD2uEdYWZ0yez75XX7lTo1HSY0ffFXqA9Q= Subject key identifier: B0:06:1F:DD:EA:0F:1D:E7:09:8E:8E:E2:F7:96:D3:84:B1:66:3E:F3 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584A03A54A27D2A2C70DB069FC40 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/91659b14-1fa3-39a1-8710-69be8ad85679.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 14618 IP address blocks: 162.33.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:4a:27:d2:a2:c7:0d:b0:69:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=ec40191a-ce98-414a-8c3a-a22b1a758bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:bd:8c:01:81:76:ee:b3:cd:5e:87:95:1d: 15:7b:d2:b4:9e:58:c2:42:c7:7f:42:8b:31:56:ed: 5c:7e:ee:a0:48:26:20:c1:5b:f1:1e:4d:74:e6:28: 05:4f:a3:e1:10:a5:7f:8f:c1:be:0a:36:f2:eb:82: c0:d1:33:f0:fe:e5:49:da:00:62:a6:15:85:14:b9: 93:99:3e:fe:80:97:40:63:ff:00:b9:d4:75:e0:91: f6:da:2a:3a:06:ca:04:89:cd:d4:75:e0:d4:f3:35: 8d:33:db:c6:79:01:9b:3a:44:69:54:d9:d6:15:4c: 93:83:f0:76:19:62:6a:e2:bd:0e:80:48:9f:ff:77: 97:cf:6d:7c:4d:03:65:c0:6e:e8:20:08:d2:a7:28: 83:8c:e8:97:6c:58:4a:5a:50:23:e7:a8:17:8b:10: bd:86:30:65:1d:70:7e:78:e2:bd:ef:a9:95:4e:33: 10:a1:3f:82:9c:76:e8:38:42:9f:a4:f4:7d:c4:49: 54:86:47:5d:eb:aa:d9:7b:52:22:be:e2:00:bf:30: fd:c4:dc:f6:cc:4d:cf:9d:7b:e9:f6:71:7b:7d:13: 61:cc:84:b3:d4:70:32:78:84:2a:64:50:dd:ab:3a: ef:12:06:0d:ba:0c:3f:08:41:5d:d6:67:b9:db:23: d7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:06:1F:DD:EA:0F:1D:E7:09:8E:8E:E2:F7:96:D3:84:B1:66:3E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/91659b14-1fa3-39a1-8710-69be8ad85679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:e2:96:16:f3:ad:df:13:6b:54:4d:24:e6:3c:34:bf:6b:5e: 7d:f5:4e:3a:dc:c1:9b:e0:da:7b:35:0e:d9:fa:3c:63:3e:27: 21:90:b5:89:20:35:8e:b2:e2:91:6d:4b:88:9c:e0:81:88:bc: df:d8:98:a3:69:8a:d0:ba:01:f3:50:c7:0f:41:fd:ac:94:9a: 0d:3e:93:ea:94:34:7c:34:da:20:68:4f:7a:8c:95:75:fa:2a: 31:b3:38:aa:bd:bf:7e:cd:3c:bc:82:62:c7:ce:e0:a4:e3:cb: e8:6c:d8:02:2a:bf:0a:cb:61:bc:b7:04:81:a8:61:a3:13:f1: ab:28:23:62:73:74:f3:d7:db:e5:38:04:c3:1d:d0:4e:4f:c6: a8:47:4a:31:6c:b6:47:88:bb:58:f3:89:78:2d:b1:65:9e:f6: 72:32:32:cc:df:d1:c9:e3:94:bc:c0:20:d3:2d:98:54:db:32: 5d:00:75:f1:78:3d:7b:cf:0d:e7:f6:23:88:2c:15:da:92:31: a3:75:87:a4:91:3f:9c:70:eb:83:92:5d:1c:40:a8:88:95:aa: 89:e9:73:9d:30:ea:47:0d:5e:1a:e9:b0:d4:68:dc:c0:7a:8e: ac:40:4e:1a:6e:81:10:8b:66:df:3b:d6:3f:42:70:ef:7d:df: b2:ac:5d:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUon0qLHDbBp/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk ZWM0MDE5MWEtY2U5OC00MTRhLThjM2EtYTIyYjFhNzU4YmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGe9jAGBdu6zzV6HlR0Ve9K0nljCQsd/Qosx Vu1cfu6gSCYgwVvxHk105igFT6PhEKV/j8G+Cjby64LA0TPw/uVJ2gBiphWFFLmT mT7+gJdAY/8AudR14JH22io6BsoEic3UdeDU8zWNM9vGeQGbOkRpVNnWFUyTg/B2 GWJq4r0OgEif/3eXz218TQNlwG7oIAjSpyiDjOiXbFhKWlAj56gXixC9hjBlHXB+ eOK976mVTjMQoT+CnHboOEKfpPR9xElUhkdd66rZe1IivuIAvzD9xNz2zE3PnXvp 9nF7fRNhzISz1HAyeIQqZFDdqzrvEgYNugw/CEFd1me52yPX5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAGH93qDx3nCY6O4veW04SxZj7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvOTE2NTliMTQtMWZhMy0z OWExLTg3MTAtNjliZThhZDg1Njc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfilhbzrd8Ta1RNJOY8NL9rXn31TjrcwZvg2ns1Dtn6PGM+JyGQtYkg NY6y4pFtS4ic4IGIvN/YmKNpitC6AfNQxw9B/ayUmg0+k+qUNHw02iBoT3qMlXX6 KjGzOKq9v37NPLyCYsfO4KTjy+hs2AIqvwrLYby3BIGoYaMT8asoI2JzdPPX2+U4 BMMd0E5PxqhHSjFstkeIu1jziXgtsWWe9nIyMszf0cnjlLzAINMtmFTbMl0AdfF4 PXvPDef2I4gsFdqSMaN1h6SRP5xw64OSXRxAqIiVqonpc50w6kcNXhrpsNRo3MB6 jqxAThpugRCLZt871j9CcO9937KsXV4= -----END CERTIFICATE-----Generated at Wed Jun 18 23:46:34 2025 by rpki-client