$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa File: d2b52252-d5a5-31a3-b33f-9ee44d111942.roa (raw, json) Hash identifier: 9Bv+ojoPqrC1QQAKjwrWocRXwp2MteOHmCv5imE7c9Y= Subject key identifier: 09:AB:13:8E:5F:9A:1F:57:CF:2F:E1:83:3E:1C:4D:15:2D:C5:B1:96 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584A03A543A5625FF3BD8EF5CF7C Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16509 IP address blocks: 162.33.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:43:a5:62:5f:f3:bd:8e:f5:cf:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=39605ad8-cab7-4775-8c1a-43bee711c3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4d:a2:3d:70:64:eb:99:4e:cb:91:90:a9:bf: 76:7b:51:58:3f:ec:9b:d0:f1:be:e7:48:a4:de:65: 77:74:4b:9c:31:c0:9f:0e:02:08:43:f7:37:12:92: 78:c7:26:d8:67:7f:2a:60:88:08:68:6e:24:3f:69: df:ad:ee:5e:31:7a:ab:67:11:2a:8d:67:92:78:e4: 6e:ba:38:1d:b9:12:82:c5:95:23:ef:35:78:3e:67: a3:d5:01:e5:5f:40:ed:95:91:55:4c:ca:c5:81:26: 5d:80:32:2e:a8:8e:f0:63:c0:3e:09:f1:da:55:b3: 34:ee:ab:2f:3c:4e:8d:6a:b2:2a:68:04:e8:de:2a: f2:ba:d8:16:96:cf:db:e7:6a:94:0d:26:c5:bc:13: fa:22:96:97:8c:68:39:87:a3:28:35:ba:fe:37:2b: a4:47:8c:7a:30:2b:98:02:d6:c8:96:20:27:3a:1b: d1:ac:da:93:29:38:cc:e1:55:8c:87:0d:b1:4c:32: 9e:d8:df:51:de:5b:8c:1e:74:3e:a3:84:92:aa:3b: 0a:c0:09:30:bd:cc:90:fe:d0:ca:ad:bd:e0:94:c7: 8c:a5:a3:a9:55:ac:91:ad:8d:38:1e:f8:4b:a6:cb: 76:ee:3d:f7:88:af:7c:43:84:23:ee:ad:d4:e5:f5: 05:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AB:13:8E:5F:9A:1F:57:CF:2F:E1:83:3E:1C:4D:15:2D:C5:B1:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:98:16:2f:fe:e9:10:b7:cf:7c:d4:b9:60:73:be:c4:46:76: 6b:61:cc:c0:a5:83:8d:21:29:97:cb:5d:83:d4:98:fe:de:4d: 2b:d1:b0:60:74:75:dd:17:c9:7d:ae:2f:7d:de:02:ed:80:55: c2:90:ba:a4:59:b2:f4:37:fd:51:67:94:33:37:37:a2:ad:8b: a7:c6:a2:a0:9f:6b:dd:3b:9b:a2:ac:42:b7:89:25:84:07:71: d8:8f:38:6e:a3:10:cf:1f:26:a9:e3:92:ae:74:41:38:f1:58: 16:6c:3f:b0:75:9a:84:dd:b4:52:98:1e:8f:11:63:4b:68:cf: de:38:23:5d:7d:0e:a3:7c:dc:a9:cf:77:5d:eb:c7:4a:8c:07: ef:1b:35:a8:ef:0a:c8:49:4d:00:a9:01:e6:9b:0c:64:e4:22: 4c:2f:aa:fa:ad:ce:7c:aa:08:d2:08:54:35:ad:d3:4b:78:6d: 67:0d:ab:f0:12:5b:40:5a:6c:ff:41:d3:37:5f:1d:5d:d5:09: 8a:e3:56:0b:28:df:99:61:98:e6:09:49:6b:57:c4:f3:8b:a1: e1:e6:c9:7c:62:a0:65:95:cf:28:aa:b7:4e:5e:34:51:86:7a: 90:bd:e9:82:26:ae:10:f2:65:79:56:ef:20:07:4b:0b:eb:f1: fd:f1:f4:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUOlYl/zvY71z3wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk Mzk2MDVhZDgtY2FiNy00Nzc1LThjMWEtNDNiZWU3MTFjM2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE2iPXBk65lOy5GQqb92e1FYP+yb0PG+50ik 3mV3dEucMcCfDgIIQ/c3EpJ4xybYZ38qYIgIaG4kP2nfre5eMXqrZxEqjWeSeORu ujgduRKCxZUj7zV4Pmej1QHlX0DtlZFVTMrFgSZdgDIuqI7wY8A+CfHaVbM07qsv PE6NarIqaATo3iryutgWls/b52qUDSbFvBP6IpaXjGg5h6MoNbr+NyukR4x6MCuY AtbIliAnOhvRrNqTKTjM4VWMhw2xTDKe2N9R3luMHnQ+o4SSqjsKwAkwvcyQ/tDK rb3glMeMpaOpVayRrY04HvhLpst27j33iK98Q4Qj7q3U5fUFlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmrE45fmh9Xzy/hgz4cTRUtxbGWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvZDJiNTIyNTItZDVhNS0z MWEzLWIzM2YtOWVlNDRkMTExOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSYFi/+6RC3z3zUuWBzvsRGdmthzMClg40hKZfLXYPUmP7eTSvRsGB0 dd0XyX2uL33eAu2AVcKQuqRZsvQ3/VFnlDM3N6Kti6fGoqCfa907m6KsQreJJYQH cdiPOG6jEM8fJqnjkq50QTjxWBZsP7B1moTdtFKYHo8RY0toz944I119DqN83KnP d13rx0qMB+8bNajvCshJTQCpAeabDGTkIkwvqvqtznyqCNIIVDWt00t4bWcNq/AS W0BabP9B0zdfHV3VCYrjVgso35lhmOYJSWtXxPOLoeHmyXxioGWVzyiqt05eNFGG epC96YImrhDyZXlW7yAHSwvr8f3x9NI= -----END CERTIFICATE-----Generated at Sat Jun 14 06:44:17 2025 by rpki-client