$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa File: a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa (raw, json) Hash identifier: +7Z0vE4jrp/T6hxnA08FNBrr80BA5tNNCjLhcO/Qmyk= Subject key identifier: E1:9A:15:BC:D6:A1:6E:4C:34:C2:E1:0B:29:7E:E7:57:D9:BE:56:F3 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584AE4611680AF08491A01D85D80 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 162.33.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:16:80:af:08:49:1a:01:d8:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=38a3d58c-2374-4b9c-bdfa-a2b4da2f2dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d7:0e:00:ed:87:96:2b:88:a8:ba:34:6e:3d: df:e1:79:b7:33:b2:14:8c:71:e7:b3:61:ed:83:ca: c7:6a:07:97:48:0d:dc:56:0a:39:8a:ca:80:a2:af: c2:62:ea:8e:80:e6:d1:69:1e:7f:68:08:9d:54:d5: d2:e8:34:ab:f2:b5:a5:7d:3c:8f:3c:8b:89:14:bc: 1a:4e:a7:fb:3f:d6:b1:8f:db:bf:4e:da:ce:58:37: a8:cb:04:47:dd:bf:22:50:e5:15:0e:ba:c3:1d:01: 26:57:b9:c9:b5:1d:c6:15:10:a7:65:ce:3b:d1:f2: 26:d4:8a:ab:e6:80:db:55:f8:47:8b:bd:32:65:c7: 4f:9b:a4:37:67:7e:13:db:c8:b6:d3:92:1f:53:50: 57:65:cb:48:b5:41:02:3b:78:1b:f0:30:7f:98:0f: bb:31:8a:c9:49:6b:50:09:b0:c6:0b:ba:76:0c:2b: 0d:60:9a:58:c0:71:e4:14:93:ee:c5:ef:6e:e4:cf: 84:e2:ed:87:51:1e:ba:d3:e1:33:c3:c5:a3:56:c3: 45:33:6e:de:08:75:1e:04:13:5c:0e:ef:2c:82:60: 7b:4a:66:67:36:c5:6b:98:80:19:4f:75:2e:d5:f6: be:9a:fc:bb:e2:ba:74:23:43:55:a9:65:46:2b:32: c4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9A:15:BC:D6:A1:6E:4C:34:C2:E1:0B:29:7E:E7:57:D9:BE:56:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:30:4a:cb:1f:0c:b4:01:1b:84:31:3c:07:1b:8d:b4:0f:b1: 1a:63:81:3c:04:6d:71:a9:08:74:41:5f:f1:30:36:a1:fa:fe: b8:24:8c:9f:c9:33:8c:5e:6b:2a:be:00:d1:ff:7e:c6:b9:91: 80:cd:ba:9e:14:f2:4a:33:7d:bf:d6:0f:09:b7:a0:b8:fe:a6: 0c:29:a0:41:8c:4f:ae:7f:b6:e8:2d:4d:5a:fc:cc:d0:a5:86: 4f:a7:84:2a:73:07:a2:cd:db:05:f3:91:2d:ed:8a:19:5e:81: 6b:b9:fd:46:fc:da:98:c4:af:13:72:89:02:c8:88:66:19:c9: 56:91:ee:9f:b9:50:de:8d:c3:00:56:1a:51:e6:b4:3e:23:5a: b8:ac:cc:0e:6d:63:c7:49:a1:ac:06:b8:a6:f3:a3:51:c2:3c: 3b:5c:bb:55:53:23:3b:42:93:72:c4:3d:d2:cc:14:45:62:7f: e8:48:30:5c:63:f0:a9:0a:6f:76:99:47:32:ff:a4:6e:f7:fe: 55:52:aa:b3:c5:f5:29:28:08:2b:07:1a:2f:95:a4:76:4d:17: c8:10:c3:35:6d:c9:a8:95:13:1d:55:c8:18:c5:9e:94:62:5b: bd:f2:62:33:42:26:ce:5c:3a:ed:7d:2a:93:97:2b:e2:98:34: cc:42:12:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRaArwhJGgHYXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk MzhhM2Q1OGMtMjM3NC00YjljLWJkZmEtYTJiNGRhMmYyZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9cOAO2HliuIqLo0bj3f4Xm3M7IUjHHns2Ht g8rHageXSA3cVgo5isqAoq/CYuqOgObRaR5/aAidVNXS6DSr8rWlfTyPPIuJFLwa Tqf7P9axj9u/TtrOWDeoywRH3b8iUOUVDrrDHQEmV7nJtR3GFRCnZc470fIm1Iqr 5oDbVfhHi70yZcdPm6Q3Z34T28i205IfU1BXZctItUECO3gb8DB/mA+7MYrJSWtQ CbDGC7p2DCsNYJpYwHHkFJPuxe9u5M+E4u2HUR660+Ezw8WjVsNFM27eCHUeBBNc Du8sgmB7SmZnNsVrmIAZT3Uu1fa+mvy74rp0I0NVqWVGKzLEfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGaFbzWoW5MNMLhCyl+51fZvlbzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvYTNiOTkyNGEtM2NmYS0z MzZkLTk0YmYtNTcwMGQyNmFlNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAwSssfDLQBG4QxPAcbjbQPsRpjgTwEbXGpCHRBX/EwNqH6/rgkjJ/J M4xeayq+ANH/fsa5kYDNup4U8kozfb/WDwm3oLj+pgwpoEGMT65/tugtTVr8zNCl hk+nhCpzB6LN2wXzkS3tihlegWu5/Ub82pjErxNyiQLIiGYZyVaR7p+5UN6NwwBW GlHmtD4jWriszA5tY8dJoawGuKbzo1HCPDtcu1VTIztCk3LEPdLMFEVif+hIMFxj 8KkKb3aZRzL/pG73/lVSqrPF9SkoCCsHGi+VpHZNF8gQwzVtyaiVEx1VyBjFnpRi W73yYjNCJs5cOu19KpOXK+KYNMxCEgQ= -----END CERTIFICATE-----Generated at Wed Nov 5 09:52:43 2025 by rpki-client