$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/5b2478f9-1c54-3a35-8291-2f671808f6c0.roa File: 5b2478f9-1c54-3a35-8291-2f671808f6c0.roa (raw, json) Hash identifier: o5SZ00CjBD9w4EroswbZwqxZ2GhOhMzzHhfaY9rgqzs= Subject key identifier: A4:56:AD:74:6B:1E:2D:26:A7:60:56:0C:C8:E7:08:0A:98:D1:55:60 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584A03A54390C9FC92DDADCB3800 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/5b2478f9-1c54-3a35-8291-2f671808f6c0.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 16509 IP address blocks: 162.33.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:43:90:c9:fc:92:dd:ad:cb:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=5cb89037-5279-40fb-b098-65b018210638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a6:8a:2d:f9:d3:5b:c6:41:89:8b:56:2b:c7: ec:61:ce:a8:fe:fc:36:6d:74:9d:8f:67:f3:69:d7: 49:c8:c0:f9:08:a5:e0:ad:69:a9:0a:b7:2c:df:ce: 6b:51:04:0a:41:dc:19:83:39:7c:af:e8:a4:5f:6b: 25:62:df:f6:cd:70:9e:62:8e:eb:bc:ac:84:27:de: 65:7e:da:37:b8:cd:75:f9:c5:04:c2:47:8c:79:cf: 3f:8a:67:a3:d0:8b:01:80:5f:bd:58:a6:e7:23:32: 20:2f:f4:99:5a:75:99:a1:2d:2e:e1:74:63:95:77: 6f:c0:cc:4e:d1:b1:ec:48:59:a9:4b:06:37:af:b6: d3:a2:d9:28:f0:6c:1c:d5:47:66:d8:f7:47:55:e8: d3:71:15:7b:fe:fe:d9:91:f0:04:e8:03:34:ef:b5: 1c:69:29:e5:5c:1f:a0:51:ae:18:77:05:79:cd:07: de:f7:f6:fd:cd:0f:1c:fe:ae:22:2b:86:32:b0:f5: a1:5f:4f:80:f6:ec:5a:eb:9b:68:a8:f8:fe:cc:f3: 96:85:ef:1c:a8:c2:f1:cd:22:0c:82:1d:97:1b:54: bf:ea:c2:e5:ed:4e:8d:4d:ab:3d:9f:fa:33:e3:f6: 0c:d0:4c:d7:e9:d6:9c:7d:41:f6:6a:3a:4f:e0:ab: d0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:56:AD:74:6B:1E:2D:26:A7:60:56:0C:C8:E7:08:0A:98:D1:55:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/5b2478f9-1c54-3a35-8291-2f671808f6c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d2:8b:e3:ba:1a:7e:4b:c4:49:00:c8:80:3f:a1:16:58:98: 15:ac:78:4b:3a:ad:9c:20:c6:c1:28:fd:97:0a:64:5d:30:74: 70:c8:95:04:bd:2a:cf:82:69:2d:ee:7e:cc:58:dc:07:95:08: 10:e9:fd:49:b0:4a:0c:07:97:4c:cd:c3:62:0f:7a:f0:d4:bf: 69:41:e5:b1:de:ae:91:62:9c:ae:1a:86:c9:c9:d0:d0:04:9f: e5:3b:bb:9c:84:0d:5a:e4:d8:68:68:78:a1:e6:06:ef:8e:5c: b1:66:a8:4a:3c:98:36:ba:c3:6e:e2:e1:cc:32:57:dd:ec:6e: b7:2e:cc:35:de:6e:14:f4:21:33:2e:dd:df:fa:a7:01:aa:38: 9f:4a:ba:42:ef:f6:8a:a2:07:4b:f9:48:bc:85:1a:aa:fb:de: 86:5b:20:87:44:d5:a8:ac:0d:d1:e3:ed:92:e9:60:ce:74:96: 0c:ca:69:95:72:d0:14:5c:8f:5f:f4:0a:5c:d8:71:f1:0f:73: e7:76:0f:de:01:a7:e4:0d:42:a9:93:fd:d9:4d:e1:ef:f1:a4: 0b:3e:e8:76:2d:5c:e6:fb:9c:ba:2a:60:c6:da:40:78:10:40: e6:18:c0:0d:04:c4:7e:53:51:39:de:a0:f5:df:47:65:20:66: 75:50:b8:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUOQyfyS3a3LOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk NWNiODkwMzctNTI3OS00MGZiLWIwOTgtNjViMDE4MjEwNjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqaKLfnTW8ZBiYtWK8fsYc6o/vw2bXSdj2fz addJyMD5CKXgrWmpCrcs385rUQQKQdwZgzl8r+ikX2slYt/2zXCeYo7rvKyEJ95l fto3uM11+cUEwkeMec8/imej0IsBgF+9WKbnIzIgL/SZWnWZoS0u4XRjlXdvwMxO 0bHsSFmpSwY3r7bTotko8Gwc1Udm2PdHVejTcRV7/v7ZkfAE6AM077UcaSnlXB+g Ua4YdwV5zQfe9/b9zQ8c/q4iK4YysPWhX0+A9uxa65toqPj+zPOWhe8cqMLxzSIM gh2XG1S/6sLl7U6NTas9n/oz4/YM0EzX6dacfUH2ajpP4KvQWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRWrXRrHi0mp2BWDMjnCAqY0VVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvNWIyNDc4ZjktMWM1NC0z YTM1LTgyOTEtMmY2NzE4MDhmNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbSi+O6Gn5LxEkAyIA/oRZYmBWseEs6rZwgxsEo/ZcKZF0wdHDIlQS9 Ks+CaS3ufsxY3AeVCBDp/UmwSgwHl0zNw2IPevDUv2lB5bHerpFinK4ahsnJ0NAE n+U7u5yEDVrk2GhoeKHmBu+OXLFmqEo8mDa6w27i4cwyV93sbrcuzDXebhT0ITMu 3d/6pwGqOJ9KukLv9oqiB0v5SLyFGqr73oZbIIdE1aisDdHj7ZLpYM50lgzKaZVy 0BRcj1/0ClzYcfEPc+d2D94Bp+QNQqmT/dlN4e/xpAs+6HYtXOb7nLoqYMbaQHgQ QOYYwA0ExH5TUTneoPXfR2UgZnVQuFg= -----END CERTIFICATE-----Generated at Mon Jun 2 16:51:53 2025 by rpki-client