$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/f7b20754-d7af-33b4-9383-4ef18e331984.roa File: f7b20754-d7af-33b4-9383-4ef18e331984.roa (raw, json) Hash identifier: PXFkaRbfNb7MCfGsNOtQfWr9CSjnlANFOwNJpoGKCbM= Subject key identifier: 1E:EE:14:23:07:5F:26:A4:A2:58:3B:3A:14:19:70:FD:36:FB:12:1D Certificate issuer: /CN=803514f9-05ca-4865-b58e-7e1188184f19 Certificate serial: 010D0C9F4328584B6141582C413CDA74A5691000 Authority key identifier: 8A:AB:1A:FF:A2:37:47:C3:08:C6:65:DB:56:61:CF:A3:04:6B:7F:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/f7b20754-d7af-33b4-9383-4ef18e331984.roa Signing time: Wed 01 Oct 2025 18:32:46 +0000 ROA not before: Wed 01 Oct 2025 18:32:46 +0000 ROA not after: Tue 30 Dec 2025 19:32:46 +0000 asID: 30688 IP address blocks: 162.33.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/803514f9-05ca-4865-b58e-7e1188184f19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/803514f9-05ca-4865-b58e-7e1188184f19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:41:58:2c:41:3c:da:74:a5:69:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803514f9-05ca-4865-b58e-7e1188184f19 Validity Not Before: Oct 1 18:32:46 2025 GMT Not After : Dec 30 19:32:46 2025 GMT Subject: CN=f95ed896-28a4-4aee-9b09-e5c976afd4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bc:7d:45:67:ec:6a:9f:ec:ed:a1:6d:31:d8: b0:1f:f9:1d:16:65:3b:66:df:50:ee:3c:0b:f8:de: cb:ec:3e:be:f0:13:b9:0c:ad:11:cb:1a:e1:c6:70: eb:89:2e:52:f1:94:08:78:27:65:fd:98:9a:a9:22: df:7a:fc:a6:2f:c8:34:66:06:54:e7:55:35:a1:0f: 4e:c3:3f:cc:68:c0:b4:0b:02:0c:39:5b:e7:f3:22: df:35:92:6f:b8:8e:f9:9b:d5:c7:d8:1c:c0:c7:fb: 5b:14:e5:68:e5:a6:3c:77:ca:9c:91:eb:a7:ae:b0: 13:c7:20:b9:14:c2:9e:8e:8a:39:d0:c5:04:45:7f: 80:50:5b:de:09:33:11:97:e1:81:c9:92:75:20:2b: 07:28:f6:5a:ad:03:69:d0:90:af:04:2d:be:c6:92: fc:39:b1:ea:42:42:3c:aa:23:62:f0:78:42:58:c8: c7:89:cd:2b:95:7f:cc:9a:30:ba:e9:78:66:64:ae: a1:49:f7:e8:ec:aa:e7:af:d1:b5:46:80:1f:22:f7: e0:2b:ce:4a:94:ae:1d:8a:7e:8d:bc:18:ab:36:4c: 87:cc:a3:aa:e3:c4:57:76:4f:a8:62:fa:65:db:6f: f8:bb:65:0c:fb:6c:d3:56:6e:af:d7:9d:12:a1:5c: c5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:EE:14:23:07:5F:26:A4:A2:58:3B:3A:14:19:70:FD:36:FB:12:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/f7b20754-d7af-33b4-9383-4ef18e331984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19/803514f9-05ca-4865-b58e-7e1188184f19.crl X509v3 Authority Key Identifier: keyid:8A:AB:1A:FF:A2:37:47:C3:08:C6:65:DB:56:61:CF:A3:04:6B:7F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/803514f9-05ca-4865-b58e-7e1188184f19.cer sbgp-ipAddrBlock: critical IPv4: 162.33.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:7d:96:30:a9:2c:af:7d:fe:eb:7c:c0:f0:1d:80:e9:d2:34: 86:05:34:4c:ff:f9:86:0a:19:63:a0:d4:30:97:f7:df:40:f1: 18:80:e4:05:33:d5:28:5e:f2:44:14:e3:f0:8a:ea:f2:01:22: c5:a0:77:59:a7:9e:b6:46:53:d7:f4:7c:6c:b6:93:1f:b4:c0: 1c:8b:38:dd:8e:56:8d:be:4a:26:71:4f:dc:37:31:78:c6:92: a7:e1:1e:11:d6:c4:95:40:fc:be:7c:5b:2c:27:d5:4a:b7:64: ce:60:12:2a:38:ab:2b:3e:e9:2a:65:b6:dd:2f:90:25:0e:69: 70:f3:ec:00:c5:10:8f:83:37:bc:0f:0c:cd:73:01:ee:52:04: 6d:50:3b:b4:a9:c4:8e:b2:2c:3e:ec:ed:55:b2:67:72:80:0b: 0a:95:67:5c:7f:15:b3:51:dd:fd:35:88:cb:c0:e1:64:79:0a: 8a:ea:e9:d7:59:78:c4:aa:97:37:6a:46:aa:ad:f9:5e:d6:70: 88:48:4b:29:02:54:4c:62:17:d1:d0:97:d4:cf:b9:87:1d:e0: a3:7e:e2:6f:23:09:a2:e7:c3:34:02:bf:d6:b1:56:e6:e1:77: 43:e0:d5:9a:d7:47:8c:78:0a:88:44:b9:68:89:c8:42:59:4c: 96:7b:56:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEthQVgsQTzadKVpEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAzNTE0ZjktMDVjYS00ODY1LWI1OGUtN2UxMTg4MTg0 ZjE5MB4XDTI1MTAwMTE4MzI0NloXDTI1MTIzMDE5MzI0NlowLzEtMCsGA1UEAxMk Zjk1ZWQ4OTYtMjhhNC00YWVlLTliMDktZTVjOTc2YWZkNGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrx9RWfsap/s7aFtMdiwH/kdFmU7Zt9Q7jwL +N7L7D6+8BO5DK0RyxrhxnDriS5S8ZQIeCdl/ZiaqSLfevymL8g0ZgZU51U1oQ9O wz/MaMC0CwIMOVvn8yLfNZJvuI75m9XH2BzAx/tbFOVo5aY8d8qckeunrrATxyC5 FMKejoo50MUERX+AUFveCTMRl+GByZJ1ICsHKPZarQNp0JCvBC2+xpL8ObHqQkI8 qiNi8HhCWMjHic0rlX/MmjC66XhmZK6hSffo7Krnr9G1RoAfIvfgK85KlK4din6N vBirNkyHzKOq48RXdk+oYvpl22/4u2UM+2zTVm6v150SoVzFHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7uFCMHXyakolg7OhQZcP02+xIdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84MDM1 MTRmOS0wNWNhLTQ4NjUtYjU4ZS03ZTExODgxODRmMTkvZjdiMjA3NTQtZDdhZi0z M2I0LTkzODMtNGVmMThlMzMxOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODAzNTE0ZjktMDVjYS00ODY1LWI1 OGUtN2UxMTg4MTg0ZjE5LzgwMzUxNGY5LTA1Y2EtNDg2NS1iNThlLTdlMTE4ODE4 NGYxOS5jcmwwHwYDVR0jBBgwFoAUiqsa/6I3R8MIxmXbVmHPowRrf6YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84MDM1MTRmOS0wNWNhLTQ4NjUtYjU4ZS03ZTEx ODgxODRmMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoiEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE19ljCpLK99/ut8wPAdgOnSNIYFNEz/+YYKGWOg1DCX999A8RiA5AUz 1She8kQU4/CK6vIBIsWgd1mnnrZGU9f0fGy2kx+0wByLON2OVo2+SiZxT9w3MXjG kqfhHhHWxJVA/L58Wywn1Uq3ZM5gEio4qys+6Spltt0vkCUOaXDz7ADFEI+DN7wP DM1zAe5SBG1QO7SpxI6yLD7s7VWyZ3KACwqVZ1x/FbNR3f01iMvA4WR5Corq6ddZ eMSqlzdqRqqt+V7WcIhISykCVExiF9HQl9TPuYcd4KN+4m8jCaLnwzQCv9axVubh d0Pg1ZrXR4x4CohEuWiJyEJZTJZ7Vqs= -----END CERTIFICATE-----Generated at Wed Oct 8 19:32:54 2025 by rpki-client