$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/9c704b07-187e-39ac-b560-db3659b3dc4d.roa File: 9c704b07-187e-39ac-b560-db3659b3dc4d.roa (raw, json) Hash identifier: tP7ehgs0UnLc2gQR/1deVxD6aNrIK0LOEpmLdCZll9k= Subject key identifier: DD:BD:78:D5:9B:37:61:BB:98:59:BA:54:4E:A7:BE:F2:6A:68:97:4F Certificate issuer: /CN=1d394508-6160-4e82-89e3-165fa2784b30 Certificate serial: 010D0C9F4328584AECC11A81EC8511E6763F9660 Authority key identifier: A7:07:57:CD:77:D3:59:F3:D3:90:A9:EB:AB:C5:B6:1D:F8:B9:28:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/9c704b07-187e-39ac-b560-db3659b3dc4d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 399214 IP address blocks: 158.51.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:1a:81:ec:85:11:e6:76:3f:96:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d394508-6160-4e82-89e3-165fa2784b30 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=7cf2a69b-0828-4dfa-b99f-ab33ef02196a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ec:da:7e:7a:bf:cf:f2:39:59:25:dc:fe:a5: 0f:1d:61:2a:6d:64:83:fa:82:5a:53:75:87:5e:77: a5:7d:cb:6f:e4:a3:37:fa:a0:da:d1:7c:99:c5:ec: 33:a6:57:06:78:1d:07:17:ee:95:66:47:43:fb:d8: 0e:c7:f5:68:b7:aa:1f:e8:f5:5d:71:89:eb:88:19: 36:2d:0b:d6:86:75:6e:6c:f7:95:e9:25:8f:56:e0: a4:33:f7:78:28:83:eb:54:c0:b5:2e:bf:c9:9a:c0: 4a:c8:a2:e6:e4:da:9c:61:50:f0:57:9c:0a:c5:c0: 3a:25:db:29:86:56:45:1e:1a:bf:54:31:23:5f:b3: 60:8d:70:06:b5:24:94:24:fe:f1:f8:3a:3c:a5:86: c1:43:ea:dc:85:40:85:57:35:1a:c8:ef:14:5d:df: d8:e9:27:b7:7e:5c:4c:ba:c0:47:6b:f3:e8:1e:16: 92:d7:73:60:58:a1:f8:70:4b:9e:d9:86:c6:6b:1d: 4a:65:9a:cf:96:52:5d:94:37:b3:d0:28:67:52:b1: 8e:41:bd:e1:a8:89:37:92:86:2b:95:b1:fb:ee:19: fa:eb:6a:f7:d9:c1:ca:65:70:f8:09:47:38:d6:95: bf:05:24:d4:03:8a:b8:95:a5:52:8e:29:92:3e:2c: 5d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BD:78:D5:9B:37:61:BB:98:59:BA:54:4E:A7:BE:F2:6A:68:97:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/9c704b07-187e-39ac-b560-db3659b3dc4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.crl X509v3 Authority Key Identifier: keyid:A7:07:57:CD:77:D3:59:F3:D3:90:A9:EB:AB:C5:B6:1D:F8:B9:28:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer sbgp-ipAddrBlock: critical IPv4: 158.51.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:0d:0f:e0:aa:96:2a:0b:1a:eb:f4:44:2b:4d:d7:71:56:85: 57:f4:72:e2:c9:16:1a:e2:f4:47:4c:7c:cc:09:78:1e:f5:92: cd:8b:b5:c2:9a:08:75:96:49:07:1c:ca:33:35:d1:68:24:85: 66:f5:e4:5e:93:d2:e3:0d:c4:bb:4f:84:76:04:c7:8b:2c:99: 8a:c9:bc:12:e4:11:ea:2d:d5:18:62:2b:94:51:ab:84:e9:82: a9:4c:2f:30:93:c7:c8:16:50:72:70:1a:f0:9a:71:12:2a:74: 29:02:ce:f8:ad:3e:6a:17:7b:ee:9d:a2:00:08:e6:b0:a2:93: 9a:55:9e:77:47:d6:e7:2b:9c:f4:31:3b:38:78:a6:6b:fa:89: 71:6e:b2:67:a4:dd:07:5c:39:d9:6d:32:9c:40:4e:dd:c1:de: 80:2b:c4:ff:8c:64:be:97:b2:b1:04:69:dc:3b:22:38:8c:8b: 90:ce:5a:16:da:78:b7:60:f5:7c:7f:88:14:a2:b9:c7:6a:32: 45:68:03:18:1b:d0:05:81:47:85:aa:02:4a:74:0f:0b:a6:28: d2:1e:8d:77:b1:93:49:fe:0e:58:64:ef:42:63:ca:fc:bb:b7: 48:08:a8:37:8c:7f:ea:ca:9e:52:e7:76:af:4a:e5:6b:f0:44: 18:ae:ea:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswRqB7IUR5nY/lmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQzOTQ1MDgtNjE2MC00ZTgyLTg5ZTMtMTY1ZmEyNzg0 YjMwMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk N2NmMmE2OWItMDgyOC00ZGZhLWI5OWYtYWIzM2VmMDIxOTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+zafnq/z/I5WSXc/qUPHWEqbWSD+oJaU3WH Xnelfctv5KM3+qDa0XyZxewzplcGeB0HF+6VZkdD+9gOx/Vot6of6PVdcYnriBk2 LQvWhnVubPeV6SWPVuCkM/d4KIPrVMC1Lr/JmsBKyKLm5NqcYVDwV5wKxcA6Jdsp hlZFHhq/VDEjX7NgjXAGtSSUJP7x+Do8pYbBQ+rchUCFVzUayO8UXd/Y6Se3flxM usBHa/PoHhaS13NgWKH4cEue2YbGax1KZZrPllJdlDez0ChnUrGOQb3hqIk3koYr lbH77hn662r32cHKZXD4CUc41pW/BSTUA4q4laVSjimSPixdhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN29eNWbN2G7mFm6VE6nvvJqaJdPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDM5 NDUwOC02MTYwLTRlODItODllMy0xNjVmYTI3ODRiMzAvOWM3MDRiMDctMTg3ZS0z OWFjLWI1NjAtZGIzNjU5YjNkYzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQzOTQ1MDgtNjE2MC00ZTgyLTg5 ZTMtMTY1ZmEyNzg0YjMwLzFkMzk0NTA4LTYxNjAtNGU4Mi04OWUzLTE2NWZhMjc4 NGIzMC5jcmwwHwYDVR0jBBgwFoAUpwdXzXfTWfPTkKnrq8W2Hfi5KEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDM5NDUwOC02MTYwLTRlODItODllMy0xNjVm YTI3ODRiMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjMKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQND+CqlioLGuv0RCtN13FWhVf0cuLJFhri9EdMfMwJeB71ks2LtcKa CHWWSQccyjM10WgkhWb15F6T0uMNxLtPhHYEx4ssmYrJvBLkEeot1RhiK5RRq4Tp gqlMLzCTx8gWUHJwGvCacRIqdCkCzvitPmoXe+6dogAI5rCik5pVnndH1ucrnPQx Ozh4pmv6iXFusmek3QdcOdltMpxATt3B3oArxP+MZL6XsrEEadw7IjiMi5DOWhba eLdg9Xx/iBSiucdqMkVoAxgb0AWBR4WqAkp0DwumKNIejXexk0n+Dlhk70Jjyvy7 t0gIqDeMf+rKnlLndq9K5WvwRBiu6iU= -----END CERTIFICATE-----Generated at Thu Aug 21 04:56:37 2025 by rpki-client