$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/5b2478f9-1c54-3a35-8291-2f671808f6c0.roa File: 5b2478f9-1c54-3a35-8291-2f671808f6c0.roa (raw, json) Hash identifier: OPJnZsSqLAoOeLmBvHleo8O2D45FOUfzFHOgT5KQleM= Subject key identifier: F1:A0:D9:89:6C:AC:6A:DA:6F:02:23:82:F8:F2:24:09:FE:94:1A:C0 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F43285849244E7A63A1372272112CB500 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/5b2478f9-1c54-3a35-8291-2f671808f6c0.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 162.33.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:7a:63:a1:37:22:72:11:2c:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=a612d4ec-afb5-4cd2-9e56-24c1be31ffd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f5:e5:34:b9:9d:91:41:ae:75:04:28:2f:c1: fc:9a:73:f3:15:47:63:3b:23:f4:76:11:04:e4:75: d3:41:d8:6c:61:a0:81:62:61:d1:11:5d:5f:12:d3: 98:23:a5:cf:d8:2d:2f:7e:27:0c:a6:83:28:56:51: ac:5b:fb:4d:43:8b:fb:b5:81:5a:0b:84:76:34:bb: c8:1d:7d:11:7c:3f:95:da:5c:c8:6e:31:b2:9d:2d: de:bd:aa:80:ec:76:ef:ac:b0:e8:d9:da:17:26:55: 4c:28:2c:02:2d:f4:8a:ea:91:b7:bb:02:8f:ef:57: 61:c3:0e:f5:84:19:27:ba:f6:d1:b9:9a:6e:5b:af: 19:51:99:53:a7:a9:ac:8f:2d:93:95:57:87:fd:f1: c6:d0:8b:b5:50:fe:83:bf:3a:4b:71:9c:ad:ce:46: c6:7a:59:d4:32:95:c4:df:02:1c:7f:07:f6:fd:05: 7f:a7:97:6f:77:5c:b4:cc:37:dc:d1:c1:ac:8c:76: ef:d0:d1:26:01:22:6d:fc:89:b3:23:03:ad:a3:75: 44:55:c9:b9:20:b9:df:ca:54:08:fb:19:4a:03:07: e6:7b:90:58:45:c4:4a:4e:a1:35:30:25:44:5c:a7: 24:23:9c:7f:c5:30:d2:d8:e3:5c:67:a1:48:7e:1c: 21:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A0:D9:89:6C:AC:6A:DA:6F:02:23:82:F8:F2:24:09:FE:94:1A:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/5b2478f9-1c54-3a35-8291-2f671808f6c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:aa:90:b8:aa:68:36:53:c4:66:b1:4d:00:eb:5b:dd:e9:46: b1:22:57:e4:67:30:f0:bb:65:ef:a9:3a:b7:00:c9:a2:44:40: c6:75:f8:34:76:cf:a3:72:44:ee:28:0d:dd:96:da:b3:35:f8: 0e:b1:1d:cf:a7:23:76:83:28:0f:97:ee:cc:9a:87:c9:e1:7b: d6:0c:2b:d0:fc:65:0a:28:a5:11:23:7f:ec:ac:91:4d:27:e9: 16:38:84:2a:de:fc:95:0e:5c:0e:20:7a:9c:cb:4d:fd:05:5b: db:2e:15:12:5a:7f:14:13:c5:2c:a5:67:47:af:ab:da:42:7c: 37:f1:fc:7b:6e:f5:29:1b:95:66:fb:8c:3f:64:ec:af:15:b4: 3a:88:2b:2a:d6:02:41:6c:94:fe:f2:31:12:b0:88:9f:4a:09: 95:41:53:58:e3:45:ee:29:8f:b9:df:01:bc:ff:39:9d:cc:b4: 19:4b:9f:1d:6f:6b:4b:70:8e:e0:a7:9c:1c:d2:cf:76:e9:0c: 4a:81:b0:be:82:a1:5b:10:1c:68:da:37:da:29:f8:92:60:83: 92:8f:2a:ef:a6:0e:f5:3b:e5:e4:bb:24:d6:bb:d9:2b:f6:99: 1c:03:1d:27:d5:88:1e:8f:ca:4f:e4:8c:1b:76:27:ed:61:56: fb:b9:35:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnpjoTcichEstQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk YTYxMmQ0ZWMtYWZiNS00Y2QyLTllNTYtMjRjMWJlMzFmZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifXlNLmdkUGudQQoL8H8mnPzFUdjOyP0dhEE 5HXTQdhsYaCBYmHREV1fEtOYI6XP2C0vficMpoMoVlGsW/tNQ4v7tYFaC4R2NLvI HX0RfD+V2lzIbjGynS3evaqA7HbvrLDo2doXJlVMKCwCLfSK6pG3uwKP71dhww71 hBknuvbRuZpuW68ZUZlTp6msjy2TlVeH/fHG0Iu1UP6DvzpLcZytzkbGelnUMpXE 3wIcfwf2/QV/p5dvd1y0zDfc0cGsjHbv0NEmASJt/ImzIwOto3VEVcm5ILnfylQI +xlKAwfme5BYRcRKTqE1MCVEXKckI5x/xTDS2ONcZ6FIfhwhQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGg2YlsrGrabwIjgvjyJAn+lBrAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvNWIyNDc4ZjktMWM1NC0z YTM1LTgyOTEtMmY2NzE4MDhmNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyqkLiqaDZTxGaxTQDrW93pRrEiV+RnMPC7Ze+pOrcAyaJEQMZ1+DR2 z6NyRO4oDd2W2rM1+A6xHc+nI3aDKA+X7syah8nhe9YMK9D8ZQoopREjf+yskU0n 6RY4hCre/JUOXA4gepzLTf0FW9suFRJafxQTxSylZ0evq9pCfDfx/Htu9SkblWb7 jD9k7K8VtDqIKyrWAkFslP7yMRKwiJ9KCZVBU1jjRe4pj7nfAbz/OZ3MtBlLnx1v a0twjuCnnBzSz3bpDEqBsL6CoVsQHGjaN9op+JJgg5KPKu+mDvU75eS7JNa72Sv2 mRwDHSfViB6Pyk/kjBt2J+1hVvu5NZc= -----END CERTIFICATE-----Generated at Fri Mar 14 10:23:22 2025 by rpki-client