$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bd8d42a6-65b5-3543-9f7a-3219e1a3608c.roa File: bd8d42a6-65b5-3543-9f7a-3219e1a3608c.roa (raw, json) Hash identifier: O3lsTjoXJrDzRpAfP2G5QHgdMmJPGhPreCgR68ZzbnE= Subject key identifier: 92:1B:82:66:14:F2:9A:5C:1B:1C:2F:1C:D3:FE:09:26:83:A3:08:32 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584B1806D8776E7368C0D30BC3B0 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bd8d42a6-65b5-3543-9f7a-3219e1a3608c.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 203963 IP address blocks: 162.33.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:d8:77:6e:73:68:c0:d3:0b:c3:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=ac7305d0-5601-4284-ba01-c94327dc871e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:79:2e:8b:3b:30:52:97:68:68:24:3c:2a:95: cd:69:b4:ac:84:99:0a:68:11:ea:ee:50:50:16:44: 93:ef:41:fd:79:c7:94:bd:da:5e:e3:95:15:dd:9a: 81:12:f3:fc:99:9b:15:6f:e1:fe:59:a4:f3:6d:b6: 2e:60:4e:ac:ac:ed:88:d9:35:6b:ef:3b:d8:bc:1f: e7:29:ff:80:dd:72:e6:f3:28:d4:be:a7:c9:2e:d6: 39:fe:32:dc:00:96:ce:bc:04:e4:e8:80:8a:7c:32: ca:15:2a:1e:f8:c5:b0:a2:61:d3:c6:70:51:78:9c: f0:a8:26:ed:52:75:fa:84:9f:3b:44:9e:c5:ef:e1: 67:5f:f6:a6:89:62:9e:89:b3:74:e0:88:58:ff:02: 1a:91:ba:f2:b0:a5:71:9f:97:b3:5d:94:24:b9:de: 63:7d:e9:73:7c:09:f6:22:54:e7:e3:0e:2c:4f:19: 73:e3:29:71:e1:d1:f8:b8:eb:3f:d5:85:79:05:23: 6a:ac:4f:60:e2:b7:e7:cc:1f:b3:de:9a:a2:f0:94: ef:86:21:17:bd:3a:79:ce:2f:23:0b:e3:30:a6:40: 5b:db:2a:9f:4e:16:57:6e:b7:e6:35:83:18:a8:b1: 0b:76:de:df:e9:c5:0b:f2:c8:a0:1c:e1:4e:34:89: 43:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1B:82:66:14:F2:9A:5C:1B:1C:2F:1C:D3:FE:09:26:83:A3:08:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/bd8d42a6-65b5-3543-9f7a-3219e1a3608c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 162.33.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:99:d4:99:05:46:94:74:07:32:23:b2:f3:03:82:82:3a:26: 13:fb:ee:8f:f9:d4:64:d6:99:9a:56:5f:f2:5a:31:b5:1a:6b: a0:91:b2:25:4a:c2:bf:70:a4:26:dd:46:c7:0d:b6:30:5e:d6: 52:98:6e:04:9c:fa:87:75:37:8a:e6:ae:7e:8e:d0:eb:f4:d9: cf:e4:d0:20:a1:f4:05:a6:ac:74:54:e3:60:65:2d:49:e8:0f: 82:43:43:d5:c7:a2:b5:a8:8d:1f:29:10:fe:09:cc:20:c3:51: 25:b3:06:1a:51:b8:27:74:77:2f:dc:c1:0d:fe:27:98:7b:91: 7c:b1:e7:64:1b:14:0a:11:a3:4d:91:c7:93:63:4c:de:28:55: 4b:f9:43:46:68:43:b9:9b:05:17:86:3e:a0:15:b6:43:c6:f0: 54:e8:f5:ba:99:05:7d:c3:aa:e6:85:64:28:84:08:5d:76:00: b2:a8:1a:3e:ae:27:57:09:c2:e2:20:54:db:9e:eb:41:91:c5: 4d:c3:a3:52:65:df:10:35:a0:73:e1:62:48:b4:16:b9:71:2d: b8:7a:62:12:94:46:ca:6b:eb:68:20:5e:9c:fe:94:bc:0b:38: 7d:9a:17:a3:dd:b7:8f:1d:f9:23:76:b7:ba:8d:00:aa:00:2f: be:8f:61:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBth3bnNowNMLw7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YWM3MzA1ZDAtNTYwMS00Mjg0LWJhMDEtYzk0MzI3ZGM4NzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnkuizswUpdoaCQ8KpXNabSshJkKaBHq7lBQ FkST70H9eceUvdpe45UV3ZqBEvP8mZsVb+H+WaTzbbYuYE6srO2I2TVr7zvYvB/n Kf+A3XLm8yjUvqfJLtY5/jLcAJbOvATk6ICKfDLKFSoe+MWwomHTxnBReJzwqCbt UnX6hJ87RJ7F7+FnX/amiWKeibN04IhY/wIakbrysKVxn5ezXZQkud5jfelzfAn2 IlTn4w4sTxlz4ylx4dH4uOs/1YV5BSNqrE9g4rfnzB+z3pqi8JTvhiEXvTp5zi8j C+MwpkBb2yqfThZXbrfmNYMYqLELdt7f6cUL8sigHOFONIlD1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIbgmYU8ppcGxwvHNP+CSaDowgyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvYmQ4ZDQyYTYtNjViNS0z NTQzLTlmN2EtMzIxOWUxYTM2MDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiGnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiZ1JkFRpR0BzIjsvMDgoI6JhP77o/51GTWmZpWX/JaMbUaa6CRsiVK wr9wpCbdRscNtjBe1lKYbgSc+od1N4rmrn6O0Ov02c/k0CCh9AWmrHRU42BlLUno D4JDQ9XHorWojR8pEP4JzCDDUSWzBhpRuCd0dy/cwQ3+J5h7kXyx52QbFAoRo02R x5NjTN4oVUv5Q0ZoQ7mbBReGPqAVtkPG8FTo9bqZBX3DquaFZCiECF12ALKoGj6u J1cJwuIgVNue60GRxU3Do1Jl3xA1oHPhYki0FrlxLbh6YhKURspr62ggXpz+lLwL OH2aF6Pdt48d+SN2t7qNAKoAL76PYak= -----END CERTIFICATE-----Generated at Wed Nov 5 00:19:14 2025 by rpki-client