$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa File: d2b52252-d5a5-31a3-b33f-9ee44d111942.roa (raw, json) Hash identifier: bPyGRbK2d9qofmfcvz7jmHlOZGdJs4M/fmOUzHwvprs= Subject key identifier: 9B:64:74:1D:E9:01:9F:83:B6:D8:15:8E:6E:12:4A:96:68:00:59:E7 Certificate issuer: /CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Certificate serial: 010D0C9F4328584AE4610ED86BD53AE0F558CE00 Authority key identifier: 77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 162.33.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:0e:d8:6b:d5:3a:e0:f5:58:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf65551a-76c3-44b0-b183-7019ab1cdb35 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=57f082c6-acab-470c-aec5-9647a7b5d6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:88:b3:a9:71:af:3f:83:f4:d5:b7:34:06:31: b1:27:0b:2c:e8:7e:00:1f:1b:d1:19:37:14:7a:6a: 13:f2:c6:74:d1:a1:69:e0:0d:5d:72:a5:c2:56:e8: 17:44:a1:47:3d:9c:c1:0a:57:a6:34:56:48:6f:59: 42:3f:94:8a:f3:af:a8:31:ad:4a:e3:be:47:2e:9d: 77:72:c0:d7:4e:65:cb:9f:3e:7c:b3:3b:72:be:b3: 6e:d9:2a:c2:78:55:9e:29:2f:e0:b7:02:54:81:cd: 16:35:db:a9:8f:e6:6e:38:64:5e:35:bf:db:b7:5f: dc:0f:1f:b1:c4:ef:2e:dd:dd:ad:5c:d7:ce:76:17: 4a:5a:09:93:48:b4:08:80:a4:db:eb:30:e8:1b:63: 2c:82:2f:36:c0:77:e3:2d:20:f3:85:1f:6f:2f:0b: 65:7f:6a:c0:ad:f9:a1:cf:1c:4d:30:5c:d1:31:89: eb:f8:4f:30:0a:15:de:37:e3:c1:05:94:6d:9a:ea: 17:ca:e8:1b:df:bb:b6:92:1f:b3:22:ed:57:5e:aa: ae:97:39:3c:f4:d3:9a:39:92:00:dc:18:e8:d8:ca: aa:0b:3c:b0:62:43:b9:79:a8:9c:06:55:04:50:a5: 05:bf:5d:4a:5c:d8:cf:78:3f:18:36:c2:a0:94:3c: cc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:64:74:1D:E9:01:9F:83:B6:D8:15:8E:6E:12:4A:96:68:00:59:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/d2b52252-d5a5-31a3-b33f-9ee44d111942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35/bf65551a-76c3-44b0-b183-7019ab1cdb35.crl X509v3 Authority Key Identifier: keyid:77:8D:50:53:D5:E8:EA:48:31:11:BF:78:82:62:32:7C:19:8B:9E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf65551a-76c3-44b0-b183-7019ab1cdb35.cer sbgp-ipAddrBlock: critical IPv4: 162.33.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:68:8f:df:83:7a:eb:c3:eb:f3:b9:2a:c0:d7:f6:ce:e5:7a: 77:ae:c9:86:47:4f:a7:2a:e6:ac:bc:98:f2:70:fb:17:7c:e7: 3b:30:1a:46:b6:8d:de:4a:ed:b9:9c:9c:b1:75:28:27:fe:63: c5:72:60:13:bb:ce:27:3a:2e:ad:2a:b5:a0:ce:06:29:f6:dd: 6a:a3:f7:81:5c:c1:14:fb:11:28:e2:44:61:cb:d2:dd:b2:18: dd:49:0a:64:16:6e:b6:02:1d:83:6f:8a:ac:23:07:5c:24:dd: 3e:37:7f:93:88:07:2d:24:95:28:39:f0:64:5e:9d:a9:15:d7: 27:b9:09:cc:e4:d7:76:4c:a5:90:a6:44:95:87:c3:da:d0:37: 11:9f:7a:ed:47:a7:9b:c4:3a:df:41:0e:83:6c:9a:d7:b7:81: 73:ca:53:4b:3a:ae:2f:49:33:66:60:c7:f9:0b:28:ff:fc:fc: 74:20:94:cd:92:7f:6c:a0:38:58:37:5b:8e:f4:dc:84:09:89: b2:d2:66:5c:4f:91:4c:ed:f0:d1:70:66:41:91:15:ac:1e:2d: aa:84:78:4a:8a:b2:c6:2d:ac:93:41:69:6f:bc:5b:55:cc:a3: a2:88:66:63:b2:40:ee:9b:c0:80:a6:b2:ed:27:be:61:06:09: 6a:3c:65:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYQ7Ya9U64PVYzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY2NTU1MWEtNzZjMy00NGIwLWIxODMtNzAxOWFiMWNk YjM1MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NTdmMDgyYzYtYWNhYi00NzBjLWFlYzUtOTY0N2E3YjVkNmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoizqXGvP4P01bc0BjGxJwss6H4AHxvRGTcU emoT8sZ00aFp4A1dcqXCVugXRKFHPZzBClemNFZIb1lCP5SK86+oMa1K475HLp13 csDXTmXLnz58sztyvrNu2SrCeFWeKS/gtwJUgc0WNdupj+ZuOGReNb/bt1/cDx+x xO8u3d2tXNfOdhdKWgmTSLQIgKTb6zDoG2Msgi82wHfjLSDzhR9vLwtlf2rArfmh zxxNMFzRMYnr+E8wChXeN+PBBZRtmuoXyugb37u2kh+zIu1XXqqulzk89NOaOZIA 3Bjo2MqqCzywYkO5eaicBlUEUKUFv11KXNjPeD8YNsKglDzMBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtkdB3pAZ+DttgVjm4SSpZoAFnnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1 NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5YWIxY2RiMzUvZDJiNTIyNTItZDVhNS0z MWEzLWIzM2YtOWVlNDRkMTExOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmY2NTU1MWEtNzZjMy00NGIwLWIx ODMtNzAxOWFiMWNkYjM1L2JmNjU1NTFhLTc2YzMtNDRiMC1iMTgzLTcwMTlhYjFj ZGIzNS5jcmwwHwYDVR0jBBgwFoAUd41QU9Xo6kgxEb94gmIyfBmLnvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjY1NTUxYS03NmMzLTQ0YjAtYjE4My03MDE5 YWIxY2RiMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoiF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBoj9+DeuvD6/O5KsDX9s7leneuyYZHT6cq5qy8mPJw+xd85zswGka2 jd5K7bmcnLF1KCf+Y8VyYBO7zic6Lq0qtaDOBin23Wqj94FcwRT7ESjiRGHL0t2y GN1JCmQWbrYCHYNviqwjB1wk3T43f5OIBy0klSg58GRenakV1ye5Cczk13ZMpZCm RJWHw9rQNxGfeu1Hp5vEOt9BDoNsmte3gXPKU0s6ri9JM2Zgx/kLKP/8/HQglM2S f2ygOFg3W4703IQJibLSZlxPkUzt8NFwZkGRFaweLaqEeEqKssYtrJNBaW+8W1XM o6KIZmOyQO6bwICmsu0nvmEGCWo8Zec= -----END CERTIFICATE-----Generated at Wed Aug 20 13:04:21 2025 by rpki-client