$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/a17da1ac-b6ea-38cc-babe-f45e1268382c.roa File: a17da1ac-b6ea-38cc-babe-f45e1268382c.roa (raw, json) Hash identifier: Sn+DPop1sBhVUS8vPbIb29o6pR7666Q0yY8J5eaHsXk= Subject key identifier: D3:C2:B0:85:3E:67:B8:42:C2:3F:9E:96:5C:9F:49:D1:69:F7:3E:66 Certificate issuer: /CN=7e81ed8c-9250-496b-9fc6-10701b967c5b Certificate serial: 010D0C9F4328584B398708C3BE61AD8C74843840 Authority key identifier: 26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/a17da1ac-b6ea-38cc-babe-f45e1268382c.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 20220 IP address blocks: 158.51.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:08:c3:be:61:ad:8c:74:84:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e81ed8c-9250-496b-9fc6-10701b967c5b Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=533645fd-9534-454d-8994-3898e3372689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cf:1d:3b:18:78:07:67:6a:56:6e:3f:6e:14: c0:62:b6:01:8d:c6:94:d4:ae:63:78:e4:85:72:c3: 3f:06:90:6e:07:45:b1:3d:33:f7:7f:b4:0d:db:af: 5c:ca:e0:40:35:2e:fa:43:b6:8c:dc:3f:26:cd:c6: 46:02:9f:30:58:dd:58:59:00:75:14:74:0b:80:88: 0e:1e:64:19:79:ef:e9:0b:aa:a9:1c:05:44:53:ad: f1:0f:80:36:88:07:89:e2:01:f0:d6:cf:5d:5e:87: 33:2a:fb:8b:13:80:02:cd:e6:0d:37:89:0b:53:6c: a4:1c:c7:f7:52:32:1d:b4:46:c4:9e:34:22:52:69: b6:e9:07:40:ba:bd:c9:d5:6c:52:dd:dc:45:2b:95: 0b:a3:8f:c7:91:51:87:64:ab:51:33:dd:87:9c:6d: 8b:bf:5f:37:1c:57:d8:30:85:ac:84:56:be:51:99: 37:91:2f:dd:a3:2b:c7:3e:94:17:0a:9f:92:91:c6: 64:bf:c3:2e:cc:f9:59:f6:19:12:dd:60:d9:85:9b: 1c:68:60:74:97:41:e8:a0:74:9b:ae:1a:f0:ed:73: cc:d9:a7:e1:a6:d0:a5:32:17:70:26:c1:0f:86:8a: e3:f6:ed:86:15:7a:94:47:67:8e:33:f6:2f:f2:40: dc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C2:B0:85:3E:67:B8:42:C2:3F:9E:96:5C:9F:49:D1:69:F7:3E:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/a17da1ac-b6ea-38cc-babe-f45e1268382c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.crl X509v3 Authority Key Identifier: keyid:26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer sbgp-ipAddrBlock: critical IPv4: 158.51.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:4d:90:f5:92:85:04:7a:d4:7d:ab:f7:f6:cc:36:ec:79:a6: f5:d9:2a:ac:47:19:c9:6d:c5:e1:f6:ec:95:6c:e9:bc:79:5f: 6d:34:fc:bf:dd:2e:90:6b:77:fb:4c:e3:2a:fe:81:75:52:b0: 7a:cd:ee:b8:fd:30:a9:5f:3b:42:2c:ea:d3:e8:cd:a8:c4:c9: 0b:b4:db:44:0e:44:04:d4:49:68:0b:85:be:16:f8:41:e6:57: 64:9d:2f:6b:df:88:e4:04:09:f4:07:4c:8d:84:48:c3:9b:4b: 9a:12:7f:1a:2a:0c:66:38:c6:47:cb:ce:9b:d6:9b:fa:1c:a5: c3:ef:87:84:06:41:c6:b4:ac:48:75:9e:eb:10:06:af:83:63: 71:38:83:6f:c7:5f:80:a2:4d:00:22:48:e9:4a:7b:1a:83:0f: fe:69:db:56:b4:c2:34:35:34:96:df:bb:1e:64:87:f2:dc:d4: 76:e4:b2:3e:be:d5:a3:03:b8:ca:7f:50:7d:8a:94:a6:10:16: f6:72:f3:ce:04:ba:eb:f3:71:87:24:c8:41:4c:9b:3b:22:cc: d9:f3:f0:0d:a4:79:86:f6:e1:ad:bd:67:57:a9:88:16:61:00: 6e:71:b4:e5:06:d5:4d:83:80:4c:2d:08:9c:70:c1:f4:ff:1a: 3f:28:8a:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hwjDvmGtjHSEOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U4MWVkOGMtOTI1MC00OTZiLTlmYzYtMTA3MDFiOTY3 YzViMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk NTMzNjQ1ZmQtOTUzNC00NTRkLTg5OTQtMzg5OGUzMzcyNjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM8dOxh4B2dqVm4/bhTAYrYBjcaU1K5jeOSF csM/BpBuB0WxPTP3f7QN269cyuBANS76Q7aM3D8mzcZGAp8wWN1YWQB1FHQLgIgO HmQZee/pC6qpHAVEU63xD4A2iAeJ4gHw1s9dXoczKvuLE4ACzeYNN4kLU2ykHMf3 UjIdtEbEnjQiUmm26QdAur3J1WxS3dxFK5ULo4/HkVGHZKtRM92HnG2Lv183HFfY MIWshFa+UZk3kS/doyvHPpQXCp+SkcZkv8MuzPlZ9hkS3WDZhZscaGB0l0HooHSb rhrw7XPM2afhptClMhdwJsEPhorj9u2GFXqUR2eOM/Yv8kDcpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPCsIU+Z7hCwj+ellyfSdFp9z5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83ZTgx ZWQ4Yy05MjUwLTQ5NmItOWZjNi0xMDcwMWI5NjdjNWIvYTE3ZGExYWMtYjZlYS0z OGNjLWJhYmUtZjQ1ZTEyNjgzODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2U4MWVkOGMtOTI1MC00OTZiLTlm YzYtMTA3MDFiOTY3YzViLzdlODFlZDhjLTkyNTAtNDk2Yi05ZmM2LTEwNzAxYjk2 N2M1Yi5jcmwwHwYDVR0jBBgwFoAUJh9ckCEXBboDp20rujcKKNISqkEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83ZTgxZWQ4Yy05MjUwLTQ5NmItOWZjNi0xMDcw MWI5NjdjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnjN0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdNkPWShQR61H2r9/bMNux5pvXZKqxHGcltxeH27JVs6bx5X200/L/d LpBrd/tM4yr+gXVSsHrN7rj9MKlfO0Is6tPozajEyQu020QORATUSWgLhb4W+EHm V2SdL2vfiOQECfQHTI2ESMObS5oSfxoqDGY4xkfLzpvWm/ocpcPvh4QGQca0rEh1 nusQBq+DY3E4g2/HX4CiTQAiSOlKexqDD/5p21a0wjQ1NJbfux5kh/Lc1Hbksj6+ 1aMDuMp/UH2KlKYQFvZy884EuuvzcYckyEFMmzsizNnz8A2keYb24a29Z1epiBZh AG5xtOUG1U2DgEwtCJxwwfT/Gj8oiv8= -----END CERTIFICATE-----Generated at Tue Oct 21 02:31:13 2025 by rpki-client