$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/c0abde07-4a6d-396c-b836-ba3936287aac.roa File: c0abde07-4a6d-396c-b836-ba3936287aac.roa (raw, json) Hash identifier: us6i9He3YEN5QHkbIrlELHCRYjApGCE7eYV4NIVXorc= Subject key identifier: 15:54:81:DE:71:22:F1:15:8B:15:40:33:89:83:FC:7E:5D:08:AF:55 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584A03A54A355B093DC7F06CDECC Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/c0abde07-4a6d-396c-b836-ba3936287aac.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 14618 IP address blocks: 162.33.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:4a:35:5b:09:3d:c7:f0:6c:de:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=0f269a37-e7fc-4a9a-80c1-5b5f1b796a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:c1:60:d1:3c:65:95:25:2c:d4:e6:cf:ae: 41:cc:fa:11:50:d3:27:73:cd:c3:86:ea:91:f6:00: 41:c6:12:e2:dc:95:a7:eb:8f:a0:a6:8a:bf:44:4c: 1c:3b:56:42:85:d0:ee:ae:06:ff:ad:83:95:dc:be: 83:85:12:ad:91:4e:ec:06:d5:e8:9a:db:10:93:ea: 2b:39:3f:60:ad:3b:ac:72:1e:da:d8:87:10:45:03: 5b:f6:b8:a8:fa:ce:3c:90:48:16:f7:ef:96:31:32: 0d:be:01:6f:a9:43:95:a0:80:e7:45:9d:58:d3:24: 93:2a:84:bb:18:a2:38:b4:2d:87:af:20:4b:c0:d2: f7:60:5a:5d:1c:3b:eb:05:1b:df:ef:70:2f:94:dc: bd:1f:bc:42:fb:32:4c:2b:66:c9:0b:3f:f8:f5:64: cb:a8:44:e8:30:99:b7:13:3e:8b:93:ae:94:59:b0: 47:e9:d5:0f:6b:8a:4b:74:da:27:03:46:a5:e0:8b: f4:ec:a0:5e:98:58:56:c6:42:33:02:14:20:16:a5: e8:44:77:55:e6:c5:7c:64:98:38:13:2b:c5:eb:cb: 6c:f7:fd:0f:39:f5:b6:88:e5:b0:6d:6f:d5:77:9e: 08:4b:0e:bd:76:7e:52:ab:8a:dd:67:4d:c7:2d:72: 9c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:54:81:DE:71:22:F1:15:8B:15:40:33:89:83:FC:7E:5D:08:AF:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/c0abde07-4a6d-396c-b836-ba3936287aac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:94:6d:3c:54:91:f2:ba:33:9e:bd:70:06:11:c5:b4:f4:3a: 41:f9:2a:a5:db:c6:1c:da:b3:de:b8:ef:50:d0:3f:c8:4a:09: 53:0c:98:b8:56:a1:75:f0:50:f0:37:d0:0d:f4:af:11:04:89: e1:26:3c:b2:95:04:22:98:eb:30:85:5f:ee:6e:f5:a2:78:e3: 3d:cc:f9:e1:48:1b:59:4f:b3:c9:44:65:66:8b:e2:43:84:b5: 39:14:79:f4:77:ce:81:26:a4:cd:04:aa:b7:e4:8d:f9:54:91: f1:b0:6f:6f:d0:c5:82:e7:31:83:a4:fd:d1:81:0f:a3:e6:3d: d3:c4:3d:16:ca:ae:7f:16:e3:08:dd:02:36:01:08:36:6e:90: e1:f0:b4:09:13:a0:57:c5:7e:da:f2:8d:d4:cb:a2:34:14:1b: 1f:e4:0c:b5:d2:5b:e5:9f:73:8b:8f:6f:99:03:bd:43:de:51: d1:e4:3f:89:a7:ba:98:29:e0:3d:55:1e:6b:49:de:67:9d:92: 79:02:06:c0:49:1d:10:d8:68:b7:46:92:ad:e9:bb:09:4d:4a: 68:9b:d5:1f:6e:a5:3a:14:98:c8:e1:21:a1:07:27:e8:d6:09: 55:64:b8:a1:d8:26:db:88:ef:fb:85:96:f8:90:dc:11:c7:d2: 25:98:91:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUo1Wwk9x/Bs3swwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MGYyNjlhMzctZTdmYy00YTlhLTgwYzEtNWI1ZjFiNzk2YTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL3BYNE8ZZUlLNTmz65BzPoRUNMnc83DhuqR 9gBBxhLi3JWn64+gpoq/REwcO1ZChdDurgb/rYOV3L6DhRKtkU7sBtXomtsQk+or OT9grTusch7a2IcQRQNb9rio+s48kEgW9++WMTINvgFvqUOVoIDnRZ1Y0ySTKoS7 GKI4tC2HryBLwNL3YFpdHDvrBRvf73AvlNy9H7xC+zJMK2bJCz/49WTLqEToMJm3 Ez6Lk66UWbBH6dUPa4pLdNonA0al4Iv07KBemFhWxkIzAhQgFqXoRHdV5sV8ZJg4 EyvF68ts9/0POfW2iOWwbW/Vd54ISw69dn5Sq4rdZ03HLXKcrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVUgd5xIvEVixVAM4mD/H5dCK9VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvYzBhYmRlMDctNGE2ZC0z OTZjLWI4MzYtYmEzOTM2Mjg3YWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiUbTxUkfK6M569cAYRxbT0OkH5KqXbxhzas96471DQP8hKCVMMmLhW oXXwUPA30A30rxEEieEmPLKVBCKY6zCFX+5u9aJ44z3M+eFIG1lPs8lEZWaL4kOE tTkUefR3zoEmpM0EqrfkjflUkfGwb2/QxYLnMYOk/dGBD6PmPdPEPRbKrn8W4wjd AjYBCDZukOHwtAkToFfFftryjdTLojQUGx/kDLXSW+Wfc4uPb5kDvUPeUdHkP4mn upgp4D1VHmtJ3medknkCBsBJHRDYaLdGkq3puwlNSmib1R9upToUmMjhIaEHJ+jW CVVkuKHYJtuI7/uFlviQ3BHH0iWYkUs= -----END CERTIFICATE-----Generated at Wed Jun 18 16:00:01 2025 by rpki-client