$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/7b943e84-475b-3fcb-8349-68e6038eadaf.roa File: 7b943e84-475b-3fcb-8349-68e6038eadaf.roa (raw, json) Hash identifier: 97waUdDX6y0ShQdnCgKDGTXUsqa9JqSjUXMT90od7gI= Subject key identifier: 94:C5:32:EB:63:7F:B5:2A:DA:86:21:38:BD:30:AD:E6:08:DB:60:53 Certificate issuer: /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c Certificate serial: 010D0C9F4328584B64CE6EA9EA490DBC0A9AB500 Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/7b943e84-475b-3fcb-8349-68e6038eadaf.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 14618 IP address blocks: 158.51.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:6e:a9:ea:49:0d:bc:0a:9a:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a06243f7-d205-4b41-9d22-974d9a93a65e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:19:4b:27:33:bd:57:12:15:e9:66:95:91:cc: 5f:96:0f:bc:d7:72:ca:eb:67:de:9b:3b:cd:cd:b3: 4c:69:67:b6:4d:5d:70:07:c3:59:7b:be:d1:c6:58: 30:db:b4:d9:24:c1:f2:b8:9a:f3:8a:b3:78:4a:e6: 8a:3f:b1:c1:02:2b:72:47:46:94:34:98:da:cf:1f: e6:0b:62:ec:3e:0e:71:d2:27:f7:4a:da:88:53:f3: 12:16:ce:98:24:7f:fd:43:e5:b0:ab:86:d5:09:8e: 9b:76:43:b7:06:46:21:f4:f6:ea:f1:f5:0d:ad:d5: 67:d7:69:4f:ce:25:bb:11:91:a7:72:f2:21:6d:d8: 5b:a6:b6:d7:60:dd:7d:c4:8b:c1:53:af:88:3c:15: 8d:49:2c:3b:95:e5:50:15:7f:57:83:60:4e:46:c9: 8c:9f:4e:6b:23:7e:a5:af:99:c6:d9:80:04:b8:d3: 23:88:97:b8:5c:21:74:bc:dc:d2:39:80:6d:24:df: 89:3c:52:01:2d:9c:07:5a:ec:fd:d7:d6:d1:1b:06: f7:1a:f9:81:50:6c:a2:60:2c:f3:dc:f0:5d:90:17: 9c:41:9b:b4:e4:89:12:ae:96:21:1d:6d:b5:4a:14: 40:08:68:d8:a9:3e:dc:e2:6c:01:85:39:84:76:2d: d5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C5:32:EB:63:7F:B5:2A:DA:86:21:38:BD:30:AD:E6:08:DB:60:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/7b943e84-475b-3fcb-8349-68e6038eadaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl X509v3 Authority Key Identifier: keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer sbgp-ipAddrBlock: critical IPv4: 158.51.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:88:a1:4a:b0:d3:fc:34:f3:01:41:a7:fd:49:e9:14:b1:34: b8:17:65:39:3e:eb:2a:da:a2:99:cf:0d:b4:b8:6a:d8:5e:a0: aa:e2:ab:7a:b3:5f:8f:62:66:ef:51:74:58:08:a0:24:ff:58: 18:07:c1:b0:a6:eb:03:2e:ba:18:e1:83:f8:c5:27:90:2d:ca: 9b:aa:c0:79:a9:ee:c3:c5:13:a0:b5:21:b9:79:de:9f:fa:47: 1e:bd:ed:db:49:6c:b7:9e:fc:c9:e2:9d:48:63:b4:45:45:ec: ba:da:f2:75:98:21:71:46:0b:57:d6:45:81:65:72:d7:88:3e: 89:50:f7:c2:88:83:e1:01:11:59:77:49:d3:4a:e6:cf:f9:a4: 2b:b1:d9:8f:71:c3:ed:72:83:8c:69:f4:51:7b:2e:17:ef:5a: 3b:b6:5a:9e:b2:6d:09:95:e4:a7:49:4d:71:d7:36:d4:5f:9d: 33:64:7c:be:2b:28:81:2b:d8:3f:4f:26:c7:40:16:89:d4:3f: dd:d5:e8:79:cc:64:ba:88:64:df:f4:bd:03:3a:61:d2:98:8c: 58:72:db:76:7d:6e:62:70:d0:8c:c6:76:95:b0:8e:37:74:f4: f1:db:57:83:2b:3b:d7:3e:9a:20:8c:8d:fd:8c:66:47:fd:97: b0:74:41:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzm6p6kkNvAqatQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzNzM5YTgtNGM4ZC00N2IwLTg0MTMtNzdlMjdhOTY3 MDBjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTA2MjQzZjctZDIwNS00YjQxLTlkMjItOTc0ZDlhOTNhNjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxlLJzO9VxIV6WaVkcxflg+813LK62femzvN zbNMaWe2TV1wB8NZe77Rxlgw27TZJMHyuJrzirN4SuaKP7HBAityR0aUNJjazx/m C2LsPg5x0if3StqIU/MSFs6YJH/9Q+Wwq4bVCY6bdkO3BkYh9Pbq8fUNrdVn12lP ziW7EZGncvIhbdhbprbXYN19xIvBU6+IPBWNSSw7leVQFX9Xg2BORsmMn05rI36l r5nG2YAEuNMjiJe4XCF0vNzSOYBtJN+JPFIBLZwHWuz919bRGwb3GvmBUGyiYCzz 3PBdkBecQZu05IkSrpYhHW21ShRACGjYqT7c4mwBhTmEdi3VywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTFMutjf7Uq2oYhOL0wreYI22BTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3 MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5NjcwMGMvN2I5NDNlODQtNDc1Yi0z ZmNiLTgzNDktNjhlNjAzOGVhZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWMzNzM5YTgtNGM4ZC00N2IwLTg0 MTMtNzdlMjdhOTY3MDBjLzljMzczOWE4LTRjOGQtNDdiMC04NDEzLTc3ZTI3YTk2 NzAwYy5jcmwwHwYDVR0jBBgwFoAU+wIdgT8j/hKbg5O+tBSlJ6W9WXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2Uy N2E5NjcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjPhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGIoUqw0/w08wFBp/1J6RSxNLgXZTk+6yraopnPDbS4atheoKriq3qz X49iZu9RdFgIoCT/WBgHwbCm6wMuuhjhg/jFJ5AtypuqwHmp7sPFE6C1Ibl53p/6 Rx697dtJbLee/MninUhjtEVF7Lra8nWYIXFGC1fWRYFlcteIPolQ98KIg+EBEVl3 SdNK5s/5pCux2Y9xw+1yg4xp9FF7LhfvWju2Wp6ybQmV5KdJTXHXNtRfnTNkfL4r KIEr2D9PJsdAFonUP93V6HnMZLqIZN/0vQM6YdKYjFhy23Z9bmJw0IzGdpWwjjd0 9PHbV4MrO9c+miCMjf2MZkf9l7B0QXY= -----END CERTIFICATE-----Generated at Wed Oct 8 19:44:26 2025 by rpki-client