$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa File: 2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa (raw, json) Hash identifier: ECvuqiFgvJvz3+BnFD7KI9BcWphdNbCU0lZ0qo4jD44= Subject key identifier: 22:FF:68:B0:44:7E:52:8E:40:6C:97:7D:52:69:08:DD:AE:64:11:3D Certificate issuer: /CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Certificate serial: 010D0C9F4328584BA0D2541BCE418F371F2A0900 Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 399804 IP address blocks: 158.51.124.0/24 maxlen: 24 158.51.125.0/24 maxlen: 24 158.51.126.0/24 maxlen: 24 158.51.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:54:1b:ce:41:8f:37:1f:2a:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=737c78c5-043d-43f9-a3d6-9180e08ab7d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:43:0e:b2:bf:47:9c:69:6f:03:11:e9:6b:98: 84:97:79:eb:de:90:f7:a8:49:73:ff:45:ac:c4:10: 37:8e:69:41:7f:3c:3f:93:a3:44:5f:51:e7:11:28: d2:6f:fc:a5:6b:f6:58:8a:f9:d6:78:6f:87:ef:5c: 50:46:8b:ed:23:b5:d5:96:c9:bd:e0:8c:e2:26:92: 81:e9:2f:70:f3:c1:a4:91:1b:d2:fc:b6:1b:c5:da: 48:6d:39:5a:37:db:f4:23:44:f1:38:68:dd:15:94: 01:7d:45:a0:f8:58:1b:94:52:1e:47:2c:31:91:86: 92:77:29:76:0c:f0:a2:fb:0b:4e:60:19:8b:ab:80: d2:fb:90:29:25:7c:e9:c9:b5:16:61:16:58:c4:8d: 59:eb:ce:ed:37:a5:62:fd:3b:8e:52:e5:82:60:c6: dc:73:da:eb:4e:49:37:ce:ae:03:91:59:6f:00:ca: 10:c2:76:f1:5f:b1:5f:c3:1a:58:1c:34:5b:f8:d1: e0:01:e7:83:02:a5:82:4d:a7:46:a9:45:a1:b6:ec: f2:9b:fe:84:5c:c4:65:a6:4e:65:4a:f2:9e:f1:36: 1e:f2:89:12:e3:0c:5d:7a:25:96:a0:66:7c:41:c8: 1c:89:fa:ce:da:aa:fc:e6:28:0c:dd:fb:71:0d:ba: aa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:FF:68:B0:44:7E:52:8E:40:6C:97:7D:52:69:08:DD:AE:64:11:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl X509v3 Authority Key Identifier: keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer sbgp-ipAddrBlock: critical IPv4: 158.51.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:a2:61:1e:de:79:d6:56:23:b2:18:a3:d3:68:ea:18:74:4b: 8e:cd:27:3b:33:db:be:14:51:44:10:0e:e9:f5:03:c7:ee:7d: 06:57:e3:23:a6:ec:3e:61:57:d5:27:b3:a8:10:ae:89:0b:74: 21:3d:45:96:9d:71:c3:5c:74:80:31:bc:0c:a2:d8:4b:91:77: aa:41:8a:01:42:1d:20:81:23:8e:01:13:73:17:bd:b1:e9:41: 71:94:8f:d3:bc:68:64:01:c7:92:2f:30:e7:f9:ed:e7:4b:b5: e7:c0:97:aa:cd:4c:22:c5:30:eb:c2:0e:61:a5:7e:07:78:2f: 28:d5:82:99:c0:d8:8f:f0:6c:bc:cd:5f:24:97:10:77:20:68: 59:cc:2e:4a:ee:04:61:84:61:af:ec:5c:66:56:80:40:bc:f3: 14:29:85:4f:3b:21:c4:62:5b:77:70:2a:63:0b:b6:b8:45:fa: b8:2b:f1:21:1c:8a:48:10:91:4c:b4:2b:48:9e:57:41:19:d7: 8a:c6:c9:c7:4b:61:e0:a7:7b:05:3b:10:51:95:17:5f:63:9d: 29:23:37:de:e5:ed:e9:9b:2d:c3:8f:8d:67:9f:16:3b:bb:cd: 21:3d:84:cc:44:90:a2:59:49:30:6c:56:96:1b:26:9b:8f:4a: 46:15:ed:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lQbzkGPNx8qCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4 ZTc5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NzM3Yzc4YzUtMDQzZC00M2Y5LWEzZDYtOTE4MGUwOGFiN2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEMOsr9HnGlvAxHpa5iEl3nr3pD3qElz/0Ws xBA3jmlBfzw/k6NEX1HnESjSb/yla/ZYivnWeG+H71xQRovtI7XVlsm94IziJpKB 6S9w88GkkRvS/LYbxdpIbTlaN9v0I0TxOGjdFZQBfUWg+FgblFIeRywxkYaSdyl2 DPCi+wtOYBmLq4DS+5ApJXzpybUWYRZYxI1Z687tN6Vi/TuOUuWCYMbcc9rrTkk3 zq4DkVlvAMoQwnbxX7FfwxpYHDRb+NHgAeeDAqWCTadGqUWhtuzym/6EXMRlpk5l SvKe8TYe8okS4wxdeiWWoGZ8QcgcifrO2qr85igM3ftxDbqqaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCL/aLBEflKOQGyXfVJpCN2uZBE9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YThh MWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvMmYyNDdjYmItMmE3NC0z ZjM1LWI1NGYtYTQyYTI2MTZhNzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGE4YTFhMmQtYzk0OS00ODk2LTkz YjktNzFmOTE3MDQ4ZTc5LzhhOGExYTJkLWM5NDktNDg5Ni05M2I5LTcxZjkxNzA0 OGU3OS5jcmwwHwYDVR0jBBgwFoAUymXieUSlnMpvG8ZlvDcLjW+4z+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5 MTcwNDhlNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnjN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSiYR7eedZWI7IYo9No6hh0S47NJzsz274UUUQQDun1A8fufQZX4yOm 7D5hV9Uns6gQrokLdCE9RZadccNcdIAxvAyi2EuRd6pBigFCHSCBI44BE3MXvbHp QXGUj9O8aGQBx5IvMOf57edLtefAl6rNTCLFMOvCDmGlfgd4LyjVgpnA2I/wbLzN XySXEHcgaFnMLkruBGGEYa/sXGZWgEC88xQphU87IcRiW3dwKmMLtrhF+rgr8SEc ikgQkUy0K0ieV0EZ14rGycdLYeCnewU7EFGVF19jnSkjN97l7embLcOPjWefFju7 zSE9hMxEkKJZSTBsVpYbJpuPSkYV7V4= -----END CERTIFICATE-----Generated at Wed Nov 5 08:52:22 2025 by rpki-client