$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa File: f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa (raw, json) Hash identifier: Ast3TdxjjqfGvUjuubnCwojL5BZCkFCRyYWYDS/cUmk= Subject key identifier: 3E:7D:02:98:AD:80:45:02:B5:56:39:87:CC:6A:6E:36:40:28:78:38 Certificate issuer: /CN=22f50b3c-0004-4753-bb50-b088e784de4e Certificate serial: 010D0C9F4328584AB4EB743FF6440D811FBBF000 Authority key identifier: D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 14618 IP address blocks: 158.51.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:74:3f:f6:44:0d:81:1f:bb:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f50b3c-0004-4753-bb50-b088e784de4e Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=2c0d05ab-447c-45d4-8746-49da25e5c1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fc:f3:e4:d3:a8:e4:07:79:46:ea:a3:67:a8: 05:f1:f1:47:60:1c:c1:9b:00:54:a2:fc:b0:ea:e6: 61:ee:32:db:73:81:3e:4b:97:dc:f2:1a:29:e0:f0: c5:e4:9b:46:67:95:e6:47:b2:aa:40:c6:81:0b:03: fd:33:de:7a:3d:0f:46:7c:b7:5f:0d:63:03:b3:e9: 0c:e2:a2:bc:87:db:af:03:a7:ee:1d:dc:aa:d5:97: c1:c3:a1:5a:1b:97:56:5b:80:e6:b4:f7:31:7b:06: 22:7d:2c:17:1c:11:e1:75:b7:72:ba:ac:2e:5c:70: b3:eb:e2:94:9c:20:07:3b:02:90:56:a9:90:5d:d1: cb:88:e6:bb:2b:95:69:b7:28:1b:83:6d:88:b1:07: 49:b7:3d:b3:1b:fd:6c:21:35:cb:18:20:52:1e:67: dd:48:b4:27:ae:1a:b3:ab:5a:4d:4c:a0:14:f9:3c: e3:d4:09:c4:20:99:2e:2c:db:54:26:61:d2:ae:23: 41:66:2d:44:b9:81:f4:d7:39:4f:a2:22:a5:7f:e5: 98:90:aa:2b:4f:2f:85:47:b6:d4:7f:2a:c0:d8:a0: d4:7f:f9:c7:39:ed:d2:10:5f:33:49:ee:f7:af:59: 0d:31:d1:2f:c0:ac:9d:35:f1:26:85:bb:08:b5:6f: a3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:7D:02:98:AD:80:45:02:B5:56:39:87:CC:6A:6E:36:40:28:78:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/f0cd1f02-2899-3c91-b655-0aa1a1eda981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.crl X509v3 Authority Key Identifier: keyid:D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer sbgp-ipAddrBlock: critical IPv4: 158.51.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:3c:37:35:52:59:83:3a:10:b2:07:16:93:87:c3:b8:34:7a: df:fa:eb:84:05:db:83:f0:63:0a:8f:6a:7c:ab:ca:1f:5a:00: f2:23:f6:01:07:9d:04:b0:a8:7b:f4:82:59:aa:ee:21:39:3c: a0:e6:8b:27:d6:06:0f:a7:ad:a9:c7:34:0c:27:7c:9b:6d:dc: 97:b2:2d:f6:cb:db:ef:5c:69:78:be:cf:22:f3:82:a2:83:90: 3c:e1:bc:5f:61:fa:c9:84:0c:8c:e9:42:88:c8:ed:4b:d5:ee: e9:8c:a9:f4:08:68:f6:19:5e:c5:37:36:c8:58:89:10:9e:45: 4b:1c:ff:f5:86:9e:06:c9:70:d3:d8:7c:c0:af:92:56:6e:3e: fa:68:f9:38:35:83:a2:d3:e8:c3:d9:5b:fe:e1:61:7a:75:4d: 35:ec:4d:24:40:5c:6b:ef:d7:39:4a:a7:6e:8e:1a:4e:f7:ae: 7f:bb:42:4e:2b:5d:2b:3c:22:bb:c0:69:e3:3e:cb:d3:c6:ee: 5f:f6:34:f7:95:2b:cb:a7:d0:eb:c3:8f:af:67:ee:1f:06:f7: 1d:24:34:41:c6:2f:69:84:6f:e2:41:2b:75:8f:9d:e7:f5:15: b4:19:92:1b:98:87:4e:0c:2e:9d:56:c4:e0:74:ca:42:17:bb: 1c:c5:90:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq063Q/9kQNgR+78AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmNTBiM2MtMDAwNC00NzUzLWJiNTAtYjA4OGU3ODRk ZTRlMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MmMwZDA1YWItNDQ3Yy00NWQ0LTg3NDYtNDlkYTI1ZTVjMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/zz5NOo5Ad5RuqjZ6gF8fFHYBzBmwBUovyw 6uZh7jLbc4E+S5fc8hop4PDF5JtGZ5XmR7KqQMaBCwP9M956PQ9GfLdfDWMDs+kM 4qK8h9uvA6fuHdyq1ZfBw6FaG5dWW4DmtPcxewYifSwXHBHhdbdyuqwuXHCz6+KU nCAHOwKQVqmQXdHLiOa7K5Vptygbg22IsQdJtz2zG/1sITXLGCBSHmfdSLQnrhqz q1pNTKAU+Tzj1AnEIJkuLNtUJmHSriNBZi1EuYH01zlPoiKlf+WYkKorTy+FR7bU fyrA2KDUf/nHOe3SEF8zSe73r1kNMdEvwKydNfEmhbsItW+jtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD59ApitgEUCtVY5h8xqbjZAKHg4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMmY1 MGIzYy0wMDA0LTQ3NTMtYmI1MC1iMDg4ZTc4NGRlNGUvZjBjZDFmMDItMjg5OS0z YzkxLWI2NTUtMGFhMWExZWRhOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjJmNTBiM2MtMDAwNC00NzUzLWJi NTAtYjA4OGU3ODRkZTRlLzIyZjUwYjNjLTAwMDQtNDc1My1iYjUwLWIwODhlNzg0 ZGU0ZS5jcmwwHwYDVR0jBBgwFoAU0Z+cLma+QyGVSqqdFPgeY/ROTVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMmY1MGIzYy0wMDA0LTQ3NTMtYmI1MC1iMDg4 ZTc4NGRlNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjMJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM8NzVSWYM6ELIHFpOHw7g0et/664QF24PwYwqPanyryh9aAPIj9gEH nQSwqHv0glmq7iE5PKDmiyfWBg+nranHNAwnfJtt3JeyLfbL2+9caXi+zyLzgqKD kDzhvF9h+smEDIzpQojI7UvV7umMqfQIaPYZXsU3NshYiRCeRUsc//WGngbJcNPY fMCvklZuPvpo+Tg1g6LT6MPZW/7hYXp1TTXsTSRAXGvv1zlKp26OGk73rn+7Qk4r XSs8IrvAaeM+y9PG7l/2NPeVK8un0OvDj69n7h8G9x0kNEHGL2mEb+JBK3WPnef1 FbQZkhuYh04MLp1WxOB0ykIXuxzFkLI= -----END CERTIFICATE-----Generated at Tue Aug 5 17:13:07 2025 by rpki-client