$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/9e38af58-44dc-3d4d-8374-4dcd32e76092.roa File: 9e38af58-44dc-3d4d-8374-4dcd32e76092.roa (raw, json) Hash identifier: yF6vUzeshQReHAndX42hKg5BN6VSNwa6pt9z0ITF7Ok= Subject key identifier: 54:E9:4B:0B:9E:88:9E:0B:8A:6C:A1:C6:C3:41:66:E4:7E:69:A1:91 Certificate issuer: /CN=22f50b3c-0004-4753-bb50-b088e784de4e Certificate serial: 010D0C9F4328584B95A793DF77FB51AE837DEC00 Authority key identifier: D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/9e38af58-44dc-3d4d-8374-4dcd32e76092.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 158.51.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:93:df:77:fb:51:ae:83:7d:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f50b3c-0004-4753-bb50-b088e784de4e Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4b53c20f-760d-482a-bd31-9328ef56f944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0a:7b:94:2a:9f:ed:4b:3a:47:21:95:c4:0a: b8:bf:6d:b4:09:c4:04:2f:81:4d:5a:fd:fc:62:06: e3:c7:6d:56:5e:3b:7c:b2:74:d6:c6:9e:b1:73:06: f0:bc:7d:7b:e2:7e:69:47:c3:2d:65:95:34:18:9b: 23:cd:d1:22:8d:7a:5f:8e:b1:36:b4:4d:ce:c9:10: 7e:37:79:7b:be:b2:43:61:4a:ce:61:51:e6:5a:b4: 5d:e1:cb:90:fa:7e:7e:e1:8e:f7:22:37:0c:de:6d: c4:3b:35:07:a0:8c:af:18:c7:a7:f7:47:9f:a9:6c: 30:9d:50:9d:2c:7c:63:3e:1e:8b:a4:35:10:b0:49: 5c:e4:06:49:3b:c7:2b:e4:73:2d:de:99:d1:bf:42: 59:57:ba:8d:40:e8:66:dc:ea:6d:5b:45:3d:0a:0f: 83:a3:ea:14:e9:19:25:1f:1a:c9:48:c5:0c:85:30: c8:46:85:ef:6f:4c:cd:54:d1:9c:1e:a0:56:ad:f5: 51:aa:30:ac:b2:b3:a0:19:99:f6:91:97:ae:b5:85: 83:ed:92:8b:94:08:5b:40:45:3b:21:8a:a4:5d:3e: d0:b5:ab:08:ec:0b:35:48:cd:45:5f:05:21:fe:c2: c7:9c:f7:0a:f2:19:3f:75:ec:76:17:4a:ad:0b:b7: b2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E9:4B:0B:9E:88:9E:0B:8A:6C:A1:C6:C3:41:66:E4:7E:69:A1:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/9e38af58-44dc-3d4d-8374-4dcd32e76092.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.crl X509v3 Authority Key Identifier: keyid:D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer sbgp-ipAddrBlock: critical IPv4: 158.51.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a4:fa:72:5d:d6:68:76:47:11:e5:1a:b5:ac:a6:f7:35:70: cc:22:8a:6b:57:cd:2a:04:40:54:f3:14:e2:35:9b:02:c9:94: e8:f2:fd:ec:2b:29:d2:06:0d:fe:78:d6:70:14:ab:cd:d0:88: f7:d9:d7:c3:d1:c4:f2:fa:f2:75:e1:3c:c0:0a:e6:36:3f:3b: 12:73:97:d5:9b:bd:4a:6a:54:5b:2f:01:2e:0e:24:b5:08:3f: d8:1f:50:bb:61:f4:c0:02:88:85:8c:41:57:e3:ea:3d:a5:16: 52:47:fb:6f:71:26:a0:fe:dc:66:eb:3a:2b:48:23:97:3d:ff: 32:c1:4f:98:bf:07:9d:4f:bc:38:84:10:71:bd:e9:8a:fd:49: ef:08:8a:40:df:81:c9:8a:72:d4:71:c2:08:1f:7b:37:97:21: 34:20:2d:54:33:8e:a1:9a:21:93:d7:f5:d2:95:69:f1:a0:22: 51:df:66:ff:33:49:36:aa:e3:f2:b0:66:7e:be:c9:9f:be:ad: 10:67:f9:38:75:96:4b:11:8c:48:87:c6:1e:ad:44:64:17:f7: 5f:d7:b5:31:e5:dc:6a:37:ef:9e:75:ea:e8:34:c6:6a:32:bd: 48:ac:7e:22:70:4e:96:86:c1:f4:04:3c:5c:f4:5b:83:57:54: aa:d7:07:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5Pfd/tRroN97AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJmNTBiM2MtMDAwNC00NzUzLWJiNTAtYjA4OGU3ODRk ZTRlMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGI1M2MyMGYtNzYwZC00ODJhLWJkMzEtOTMyOGVmNTZmOTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigp7lCqf7Us6RyGVxAq4v220CcQEL4FNWv38 Ygbjx21WXjt8snTWxp6xcwbwvH174n5pR8MtZZU0GJsjzdEijXpfjrE2tE3OyRB+ N3l7vrJDYUrOYVHmWrRd4cuQ+n5+4Y73IjcM3m3EOzUHoIyvGMen90efqWwwnVCd LHxjPh6LpDUQsElc5AZJO8cr5HMt3pnRv0JZV7qNQOhm3OptW0U9Cg+Do+oU6Rkl HxrJSMUMhTDIRoXvb0zNVNGcHqBWrfVRqjCssrOgGZn2kZeutYWD7ZKLlAhbQEU7 IYqkXT7QtasI7As1SM1FXwUh/sLHnPcK8hk/dex2F0qtC7eyLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTpSwueiJ4LimyhxsNBZuR+aaGRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMmY1 MGIzYy0wMDA0LTQ3NTMtYmI1MC1iMDg4ZTc4NGRlNGUvOWUzOGFmNTgtNDRkYy0z ZDRkLTgzNzQtNGRjZDMyZTc2MDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjJmNTBiM2MtMDAwNC00NzUzLWJi NTAtYjA4OGU3ODRkZTRlLzIyZjUwYjNjLTAwMDQtNDc1My1iYjUwLWIwODhlNzg0 ZGU0ZS5jcmwwHwYDVR0jBBgwFoAU0Z+cLma+QyGVSqqdFPgeY/ROTVcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMmY1MGIzYy0wMDA0LTQ3NTMtYmI1MC1iMDg4 ZTc4NGRlNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjMJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByk+nJd1mh2RxHlGrWspvc1cMwiimtXzSoEQFTzFOI1mwLJlOjy/ewr KdIGDf541nAUq83QiPfZ18PRxPL68nXhPMAK5jY/OxJzl9WbvUpqVFsvAS4OJLUI P9gfULth9MACiIWMQVfj6j2lFlJH+29xJqD+3GbrOitII5c9/zLBT5i/B51PvDiE EHG96Yr9Se8IikDfgcmKctRxwggfezeXITQgLVQzjqGaIZPX9dKVafGgIlHfZv8z STaq4/KwZn6+yZ++rRBn+Th1lksRjEiHxh6tRGQX91/XtTHl3Go375516ug0xmoy vUisfiJwTpaGwfQEPFz0W4NXVKrXB28= -----END CERTIFICATE-----Generated at Mon Oct 20 21:21:09 2025 by rpki-client