$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa File: a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa (raw, json) Hash identifier: afBkW92zkX7iF9QZTGesoGHupHqSlqSntAbjT8Is81k= Subject key identifier: 21:96:0F:C4:17:A6:95:90:F8:94:FB:AE:03:EF:48:AF:56:3C:0B:F7 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584A03A54A1A46D48E777459A700 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16509 IP address blocks: 162.33.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:4a:1a:46:d4:8e:77:74:59:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=b8e64dae-98ca-4663-bf3a-f6c4b302fcb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d2:84:ef:6e:03:43:f7:31:e9:c0:0d:86:80: fd:a6:e3:98:6c:36:d7:01:fb:0f:04:47:cb:1c:ef: 9e:2c:1f:a2:f5:50:13:42:34:0e:f2:49:96:40:dd: 28:ea:3b:0c:2e:6a:45:c6:39:8a:e0:28:b6:35:bd: 27:af:f3:57:e6:f7:c0:77:cb:50:b2:f4:3e:e7:2e: eb:79:07:03:7a:67:3e:d3:9b:89:e5:40:c0:06:fa: 26:40:eb:e8:09:42:7d:aa:eb:95:31:28:65:04:ee: 26:8f:3a:cd:10:18:9a:47:b8:0e:cd:54:75:ec:04: cf:23:1e:32:f9:c1:a7:2e:fe:81:c1:74:63:94:f3: 13:5f:36:d9:f2:e3:4a:5c:3f:c5:be:fb:ad:a4:2d: 04:e2:c8:60:d9:18:49:47:0b:74:e8:9f:39:e5:31: 7e:7c:e1:61:a4:b7:d3:fd:bc:01:5f:82:5d:22:5a: e1:f2:d3:54:55:d1:ca:03:fe:53:61:4d:99:8d:89: 06:a4:07:27:9b:f0:6b:98:89:c0:05:7f:0b:b2:1c: b8:4a:56:11:8b:f8:3c:8f:90:ef:b6:7f:a3:3f:06: 0e:83:99:7d:55:ad:72:15:eb:48:fd:b7:c3:c4:3d: 91:02:e1:e5:77:78:d6:e8:ba:9b:68:26:61:f5:e1: 89:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:96:0F:C4:17:A6:95:90:F8:94:FB:AE:03:EF:48:AF:56:3C:0B:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:a8:e3:c1:06:9a:d0:a2:aa:bd:40:14:1e:50:8a:16:7d:dd: 6f:1f:32:b5:ee:37:e0:0a:f1:27:a3:94:12:47:39:d8:ec:74: b1:25:b8:57:d9:5e:7d:70:f1:60:21:f2:34:42:62:63:bf:9a: 2b:38:e4:79:d9:d9:68:8f:e4:13:31:69:b6:4e:ec:33:1c:1f: 97:7e:11:c3:2b:f4:65:05:14:36:87:34:3f:e2:59:d6:5d:41: 84:4f:93:3b:19:7d:4d:78:89:02:73:79:5b:33:4e:d8:e1:99: 57:03:49:5f:b7:b5:d6:3a:55:94:e3:07:20:68:09:22:72:3c: 33:1a:18:a7:7a:92:9c:99:38:9a:9e:e1:d7:60:4f:24:94:53: eb:68:0b:d8:4e:1c:90:6e:8f:c9:34:0d:93:8e:8a:73:36:6e: 41:fb:8a:8c:24:d3:2a:05:d7:df:5d:50:79:38:36:da:e1:40: fe:2e:8e:93:bf:b3:3e:56:63:b7:67:37:e3:8a:fd:03:04:50: cf:d8:0f:7b:08:f0:01:69:34:16:c1:e3:36:b8:4e:b3:8f:6c: 2b:6f:d9:31:11:25:f2:36:25:c0:f3:31:b8:2e:4c:8a:b4:8b: de:e9:5d:78:2c:54:cb:73:98:78:59:81:04:96:a6:6b:9d:4f: 5b:d9:d1:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUoaRtSOd3RZpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk YjhlNjRkYWUtOThjYS00NjYzLWJmM2EtZjZjNGIzMDJmY2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dKE724DQ/cx6cANhoD9puOYbDbXAfsPBEfL HO+eLB+i9VATQjQO8kmWQN0o6jsMLmpFxjmK4Ci2Nb0nr/NX5vfAd8tQsvQ+5y7r eQcDemc+05uJ5UDABvomQOvoCUJ9quuVMShlBO4mjzrNEBiaR7gOzVR17ATPIx4y +cGnLv6BwXRjlPMTXzbZ8uNKXD/FvvutpC0E4shg2RhJRwt06J855TF+fOFhpLfT /bwBX4JdIlrh8tNUVdHKA/5TYU2ZjYkGpAcnm/BrmInABX8Lshy4SlYRi/g8j5Dv tn+jPwYOg5l9Va1yFetI/bfDxD2RAuHld3jW6LqbaCZh9eGJHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGWD8QXppWQ+JT7rgPvSK9WPAv3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvYTNiOTkyNGEtM2NmYS0z MzZkLTk0YmYtNTcwMGQyNmFlNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2o48EGmtCiqr1AFB5QihZ93W8fMrXuN+AK8SejlBJHOdjsdLEluFfZ Xn1w8WAh8jRCYmO/mis45HnZ2WiP5BMxabZO7DMcH5d+EcMr9GUFFDaHND/iWdZd QYRPkzsZfU14iQJzeVszTtjhmVcDSV+3tdY6VZTjByBoCSJyPDMaGKd6kpyZOJqe 4ddgTySUU+toC9hOHJBuj8k0DZOOinM2bkH7iowk0yoF199dUHk4NtrhQP4ujpO/ sz5WY7dnN+OK/QMEUM/YD3sI8AFpNBbB4za4TrOPbCtv2TERJfI2JcDzMbguTIq0 i97pXXgsVMtzmHhZgQSWpmudT1vZ0Tw= -----END CERTIFICATE-----Generated at Sat Jun 14 18:49:55 2025 by rpki-client