$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa File: a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa (raw, json) Hash identifier: k0u/+R23+Y71uvJyf7k6+LxZ0ZjmWZousfU6ecAXMfw= Subject key identifier: E4:01:6B:87:8B:7D:36:E6:70:E5:8C:9D:FD:52:E0:85:A2:27:5C:A7 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F43285849244E81B49A00ACB98F597180 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 162.33.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:81:b4:9a:00:ac:b9:8f:59:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=c1e8ef85-f5d8-4b0b-a6ab-d2237ec1e97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:55:11:31:38:5a:b4:81:81:4a:09:34:ed:f4: 59:28:2f:09:e3:3a:f1:b4:22:8a:1e:91:78:f6:a2: 74:f0:ca:4d:87:c8:cb:c5:46:2d:0c:77:85:ab:7d: 66:e0:e7:a9:b8:6e:e9:fc:7a:1a:34:50:f6:16:f8: d4:5b:cc:5a:9d:f0:b8:20:e5:54:b4:bc:fe:3c:93: d7:be:37:6b:41:48:f4:2b:41:5e:1b:8e:19:e9:8b: fd:a8:37:58:75:4f:d1:03:43:da:cd:52:d2:8d:10: 15:c9:75:6e:bf:42:dd:bb:ff:b8:eb:1b:9f:ab:5c: 7d:96:bb:05:a7:a1:ce:73:87:2c:e2:fa:d6:30:bd: ba:81:49:de:2f:55:7b:6c:09:dd:47:e5:ea:89:ea: d9:80:94:ea:09:69:4f:9a:1d:98:e8:8f:27:84:a3: 12:04:d0:ff:01:26:1e:56:37:e0:c4:bb:d5:08:74: 11:f4:c6:e7:86:97:f3:8c:98:c4:d5:a1:fc:7d:6e: bd:d2:84:fc:39:cc:49:4f:eb:14:ea:be:66:49:c3: 70:b6:b1:3f:0b:da:de:20:58:61:75:c9:55:90:8d: 63:41:4f:76:73:03:0c:75:a7:93:9b:3e:8c:5a:84: 8c:6f:47:11:7c:4d:ce:e5:03:10:ce:d2:d1:c0:f1: 21:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:01:6B:87:8B:7D:36:E6:70:E5:8C:9D:FD:52:E0:85:A2:27:5C:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/a3b9924a-3cfa-336d-94bf-5700d26ae52d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:83:1c:11:9e:00:8d:2b:36:3b:9e:ea:d6:c0:95:91:34:27: 42:78:f0:bb:f8:c4:05:d7:58:44:8e:32:95:06:6c:c2:42:6d: e2:a4:50:34:38:3b:14:a0:ac:f4:19:a5:17:25:65:a6:36:c0: 24:72:99:e2:65:88:8e:86:53:ce:f3:71:bb:26:31:88:fe:e5: 77:2c:fc:39:b7:d0:3c:56:ae:52:f1:c9:81:00:45:0c:09:0b: 9a:99:e4:a5:a2:53:74:c4:f1:42:75:3e:e4:40:d8:35:7f:85: ec:1c:55:8d:1a:cb:f9:7e:7b:95:7e:8f:29:d0:b7:73:17:07: 7d:80:1d:85:73:81:1e:e9:38:72:6b:09:6d:39:f0:b9:87:11: 2f:e3:d2:76:b2:fa:bd:65:a2:69:88:70:f0:8a:21:64:4e:c7: aa:de:ba:0c:54:a0:13:b1:f1:a5:d6:91:2f:f9:a8:95:31:0e: f2:ab:d3:02:15:f6:96:93:a8:8e:86:44:71:a0:30:29:4a:c2: 0c:23:d8:4d:43:20:8d:1d:b8:d0:ec:5e:c6:b5:d2:dc:97:29: 2a:2b:51:b0:1d:32:02:ee:54:5e:3b:33:4d:5d:9c:70:66:95: e3:e7:3d:08:8f:ca:21:ff:69:14:9a:2d:4c:09:9d:ed:43:14: 2f:cd:1d:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkToG0mgCsuY9ZcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk YzFlOGVmODUtZjVkOC00YjBiLWE2YWItZDIyMzdlYzFlOTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1URMThatIGBSgk07fRZKC8J4zrxtCKKHpF4 9qJ08MpNh8jLxUYtDHeFq31m4OepuG7p/HoaNFD2FvjUW8xanfC4IOVUtLz+PJPX vjdrQUj0K0FeG44Z6Yv9qDdYdU/RA0PazVLSjRAVyXVuv0Ldu/+46xufq1x9lrsF p6HOc4cs4vrWML26gUneL1V7bAndR+XqierZgJTqCWlPmh2Y6I8nhKMSBND/ASYe VjfgxLvVCHQR9MbnhpfzjJjE1aH8fW690oT8OcxJT+sU6r5mScNwtrE/C9reIFhh dclVkI1jQU92cwMMdaeTmz6MWoSMb0cRfE3O5QMQztLRwPEh3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQBa4eLfTbmcOWMnf1S4IWiJ1ynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvYTNiOTkyNGEtM2NmYS0z MzZkLTk0YmYtNTcwMGQyNmFlNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmDHBGeAI0rNjue6tbAlZE0J0J48Lv4xAXXWESOMpUGbMJCbeKkUDQ4 OxSgrPQZpRclZaY2wCRymeJliI6GU87zcbsmMYj+5Xcs/Dm30DxWrlLxyYEARQwJ C5qZ5KWiU3TE8UJ1PuRA2DV/hewcVY0ay/l+e5V+jynQt3MXB32AHYVzgR7pOHJr CW058LmHES/j0nay+r1lommIcPCKIWROx6reugxUoBOx8aXWkS/5qJUxDvKr0wIV 9paTqI6GRHGgMClKwgwj2E1DII0duNDsXsa10tyXKSorUbAdMgLuVF47M01dnHBm lePnPQiPyiH/aRSaLUwJne1DFC/NHTU= -----END CERTIFICATE-----Generated at Wed Apr 16 17:00:37 2025 by rpki-client