$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ca57343a-b2a2-37a7-baa1-0e7094b9f5dd.roa File: ca57343a-b2a2-37a7-baa1-0e7094b9f5dd.roa (raw, json) Hash identifier: 0396sJtWrpSY8DSbIvPjNJknKS8n5msdzynk5ElgVBg= Subject key identifier: 19:2C:E7:12:BD:58:07:A2:84:02:C5:C3:35:42:86:92:9F:0E:9E:26 Certificate issuer: /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c Certificate serial: 010D0C9F4328584A84A64400E69E966131779280 Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ca57343a-b2a2-37a7-baa1-0e7094b9f5dd.roa Signing time: Mon 14 Jul 2025 18:02:28 +0000 ROA not before: Mon 14 Jul 2025 18:02:28 +0000 ROA not after: Sun 12 Oct 2025 18:02:28 +0000 asID: 17045 IP address blocks: 158.51.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:a6:44:00:e6:9e:96:61:31:77:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c Validity Not Before: Jul 14 18:02:28 2025 GMT Not After : Oct 12 18:02:28 2025 GMT Subject: CN=58a8fe54-2215-47d5-84cc-137e5a44409d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:3b:bd:92:59:e3:4e:cd:a8:e3:d4:c7:9f: 34:72:a7:69:b9:89:b6:ff:3c:c6:e6:b1:a3:8e:dc: 4c:41:47:2b:fd:34:75:7f:39:d2:bc:9e:0d:d4:67: 2c:7c:99:57:67:09:d1:c8:83:82:2d:3c:92:f0:5e: a5:aa:48:5d:0f:05:1a:f4:92:53:f2:80:6d:2e:11: ee:43:7f:53:77:8e:95:0d:54:9c:00:fc:34:f3:6e: 5b:f1:dd:20:84:45:52:e1:e6:a6:e2:af:92:45:fb: 4d:1b:44:02:59:cd:41:15:9a:4a:c0:5d:92:a8:63: e9:69:36:e0:89:9e:32:ce:7e:ca:4c:2a:b1:4e:2b: a9:ef:76:8a:07:99:a4:34:8c:35:19:8f:f5:7b:00: 48:dc:ab:45:f7:d9:e4:03:13:e3:a4:46:07:85:fc: e0:53:38:e0:19:93:b8:59:4b:43:10:aa:a3:a9:ff: 0f:9e:5d:36:8a:55:29:87:13:aa:07:2a:f8:0b:6d: f7:ec:8f:14:60:e0:6e:49:4f:c6:31:17:b7:42:22: 79:34:3a:55:f2:b9:b3:04:4f:5f:b5:f1:c3:5f:21: 75:91:31:11:12:81:b7:71:15:b4:32:dd:ff:67:1c: b9:69:60:69:f9:06:9c:37:ce:ab:67:c1:23:f0:61: b1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2C:E7:12:BD:58:07:A2:84:02:C5:C3:35:42:86:92:9F:0E:9E:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ca57343a-b2a2-37a7-baa1-0e7094b9f5dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl X509v3 Authority Key Identifier: keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer sbgp-ipAddrBlock: critical IPv4: 158.51.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:2f:df:3c:3b:01:35:bc:8f:80:01:56:ba:ae:98:9a:65:5c: d0:e1:b6:3d:24:fd:41:8f:b0:91:b2:41:7f:32:4d:ae:05:77: ce:bb:8f:44:84:a0:c6:0d:58:de:40:c4:28:66:9c:fd:c7:ec: ce:19:15:47:10:f8:63:ba:fa:15:24:91:6d:31:5d:1e:52:6a: 95:b3:cc:af:b2:44:bd:a7:6d:48:00:13:0e:1b:40:c2:ad:ff: b5:7a:22:0a:11:56:85:3a:bb:75:b8:72:bc:9f:54:87:e1:03: 88:43:74:77:96:9e:7b:7c:be:b2:ff:44:ed:87:bc:e9:21:48: 40:92:a4:7e:6b:86:41:55:1c:ba:2b:22:b2:19:98:02:cb:8a: ce:bd:60:48:3f:54:8e:4b:a8:f7:2c:77:d2:8d:de:cc:20:5a: f7:f4:71:cb:78:62:e0:08:b2:1b:a2:dd:84:4b:69:ee:01:ad: f8:57:f0:71:4b:c0:84:15:d0:21:d2:24:37:62:33:79:e4:15: e0:a8:3e:90:20:e4:65:22:26:f3:80:c5:1c:c5:59:e5:ef:8d: 25:d3:17:3e:80:aa:1c:fe:b5:91:d0:46:58:74:69:60:f0:5f: 6f:9e:50:f6:3b:4f:e1:6e:e4:93:21:f7:9a:24:e9:e2:be:98: 11:25:03:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEpkQA5p6WYTF3koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzNzM5YTgtNGM4ZC00N2IwLTg0MTMtNzdlMjdhOTY3 MDBjMB4XDTI1MDcxNDE4MDIyOFoXDTI1MTAxMjE4MDIyOFowLzEtMCsGA1UEAxMk NThhOGZlNTQtMjIxNS00N2Q1LTg0Y2MtMTM3ZTVhNDQ0MDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUA7vZJZ407NqOPUx580cqdpuYm2/zzG5rGj jtxMQUcr/TR1fznSvJ4N1GcsfJlXZwnRyIOCLTyS8F6lqkhdDwUa9JJT8oBtLhHu Q39Td46VDVScAPw0825b8d0ghEVS4eam4q+SRftNG0QCWc1BFZpKwF2SqGPpaTbg iZ4yzn7KTCqxTiup73aKB5mkNIw1GY/1ewBI3KtF99nkAxPjpEYHhfzgUzjgGZO4 WUtDEKqjqf8Pnl02ilUphxOqByr4C2337I8UYOBuSU/GMRe3QiJ5NDpV8rmzBE9f tfHDXyF1kTEREoG3cRW0Mt3/Zxy5aWBp+QacN86rZ8Ej8GGxdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBks5xK9WAeihALFwzVChpKfDp4mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3 MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5NjcwMGMvY2E1NzM0M2EtYjJhMi0z N2E3LWJhYTEtMGU3MDk0YjlmNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWMzNzM5YTgtNGM4ZC00N2IwLTg0 MTMtNzdlMjdhOTY3MDBjLzljMzczOWE4LTRjOGQtNDdiMC04NDEzLTc3ZTI3YTk2 NzAwYy5jcmwwHwYDVR0jBBgwFoAU+wIdgT8j/hKbg5O+tBSlJ6W9WXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2Uy N2E5NjcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjPhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8v3zw7ATW8j4ABVrqumJplXNDhtj0k/UGPsJGyQX8yTa4Fd867j0SE oMYNWN5AxChmnP3H7M4ZFUcQ+GO6+hUkkW0xXR5SapWzzK+yRL2nbUgAEw4bQMKt /7V6IgoRVoU6u3W4cryfVIfhA4hDdHeWnnt8vrL/RO2HvOkhSECSpH5rhkFVHLor IrIZmALLis69YEg/VI5LqPcsd9KN3swgWvf0cct4YuAIshui3YRLae4BrfhX8HFL wIQV0CHSJDdiM3nkFeCoPpAg5GUiJvOAxRzFWeXvjSXTFz6Aqhz+tZHQRlh0aWDw X2+eUPY7T+Fu5JMh95ok6eK+mBElAwA= -----END CERTIFICATE-----Generated at Wed Aug 6 09:27:49 2025 by rpki-client