$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ca57343a-b2a2-37a7-baa1-0e7094b9f5dd.roa File: ca57343a-b2a2-37a7-baa1-0e7094b9f5dd.roa (raw, json) Hash identifier: 4CKq2bUzGzHKyRgw0981PLzLPD/FzbpsCFrYnRtOhhY= Subject key identifier: CB:0B:02:40:56:AC:AD:A7:11:92:54:DB:57:03:21:D6:37:D6:CA:7B Certificate issuer: /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c Certificate serial: 010D0C9F4328584B64CE6E695E16DDE905A7E7E0 Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ca57343a-b2a2-37a7-baa1-0e7094b9f5dd.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 17045 IP address blocks: 158.51.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:6e:69:5e:16:dd:e9:05:a7:e7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=922dd5a2-1880-4613-abe5-e5348e9230b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e5:22:da:28:b4:42:33:85:41:63:a0:82:e8: 37:bc:a0:d3:0f:03:c8:b6:b6:47:8f:5e:7f:fb:3d: 09:eb:f2:f2:08:e6:f4:96:f3:78:2c:17:11:2b:51: e1:c7:4f:f1:c4:bd:0c:83:9e:d5:e0:c1:73:b5:69: af:ca:d8:96:c0:54:e9:f5:e4:d8:b2:bd:04:7c:e7: 6d:02:b3:7c:a7:60:73:bb:22:d4:85:a7:0b:91:d5: 89:5f:88:17:96:28:03:33:8c:a6:72:ca:36:57:ee: 0e:9a:a2:c5:62:8d:f1:26:b4:3b:1d:52:c8:c0:92: f2:3c:65:59:ae:82:b9:ac:78:0b:4f:43:e1:54:26: c7:fd:2d:28:1b:90:0b:5e:12:d7:a3:42:be:b9:9e: ed:c8:4b:6a:39:59:6f:e7:14:00:63:09:d7:b0:c8: 35:25:5d:aa:1a:87:12:9d:3b:bb:45:ff:51:cd:76: 02:0f:8d:a1:5c:5b:8a:d4:74:b6:0d:1e:fd:5e:98: e4:b9:92:b5:0b:63:db:7a:90:83:9c:c5:fa:33:e3: 1f:8a:84:0e:c9:37:7f:9b:5e:52:67:04:32:4b:c3: d4:ce:90:ea:12:c6:5b:5d:e4:a0:87:f0:ea:aa:22: fb:95:18:82:7c:bb:ac:70:f6:68:84:31:52:78:42: a8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0B:02:40:56:AC:AD:A7:11:92:54:DB:57:03:21:D6:37:D6:CA:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ca57343a-b2a2-37a7-baa1-0e7094b9f5dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl X509v3 Authority Key Identifier: keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer sbgp-ipAddrBlock: critical IPv4: 158.51.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ef:d7:17:96:cb:3a:0b:4a:53:71:49:61:1d:ea:10:f3:21: 5e:89:36:af:b3:e1:81:7b:96:3f:61:ab:7d:64:39:3d:58:87: 17:19:2f:33:c9:ef:28:b3:39:59:59:51:83:a9:50:8d:29:2f: df:1a:20:9a:ab:3a:10:0b:2a:08:0a:b2:10:2f:d4:5e:d7:92: 80:d3:b6:d7:8e:2f:e7:eb:53:fe:b1:7e:af:2b:14:9c:ab:fd: f4:54:31:5c:4c:32:53:8f:74:8a:7c:e0:1d:83:8a:09:d8:ac: b9:1f:52:20:26:f5:8b:93:76:3b:1f:d5:07:13:23:cd:73:62: 6a:fc:bf:e1:8e:57:63:55:6d:39:5f:87:9c:be:88:59:7c:4b: 3f:a9:d9:19:49:a2:fe:db:57:d4:8e:1f:f9:e5:1c:a5:c4:42: 39:ee:6a:c7:43:e4:85:f5:79:fc:51:32:d0:97:5e:41:3b:e5: 2e:2d:18:f9:84:4e:43:c7:9a:94:de:48:3b:90:98:e6:74:7f: d9:73:9d:2d:ef:82:a2:37:36:75:cb:c6:51:94:5f:9b:cb:bd: f5:34:01:d2:e8:eb:ae:e1:48:63:44:10:89:62:30:4c:5e:da: 2b:6d:25:2e:b1:e8:68:4a:15:12:4f:f0:90:4e:90:67:ac:83: 7a:84:9c:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzm5pXhbd6QWn5+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzNzM5YTgtNGM4ZC00N2IwLTg0MTMtNzdlMjdhOTY3 MDBjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OTIyZGQ1YTItMTg4MC00NjEzLWFiZTUtZTUzNDhlOTIzMGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheUi2ii0QjOFQWOggug3vKDTDwPItrZHj15/ +z0J6/LyCOb0lvN4LBcRK1Hhx0/xxL0Mg57V4MFztWmvytiWwFTp9eTYsr0EfOdt ArN8p2BzuyLUhacLkdWJX4gXligDM4ymcso2V+4OmqLFYo3xJrQ7HVLIwJLyPGVZ roK5rHgLT0PhVCbH/S0oG5ALXhLXo0K+uZ7tyEtqOVlv5xQAYwnXsMg1JV2qGocS nTu7Rf9RzXYCD42hXFuK1HS2DR79XpjkuZK1C2PbepCDnMX6M+MfioQOyTd/m15S ZwQyS8PUzpDqEsZbXeSgh/DqqiL7lRiCfLuscPZohDFSeEKoDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsLAkBWrK2nEZJU21cDIdY31sp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3 MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5NjcwMGMvY2E1NzM0M2EtYjJhMi0z N2E3LWJhYTEtMGU3MDk0YjlmNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWMzNzM5YTgtNGM4ZC00N2IwLTg0 MTMtNzdlMjdhOTY3MDBjLzljMzczOWE4LTRjOGQtNDdiMC04NDEzLTc3ZTI3YTk2 NzAwYy5jcmwwHwYDVR0jBBgwFoAU+wIdgT8j/hKbg5O+tBSlJ6W9WXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2Uy N2E5NjcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjPhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3v1xeWyzoLSlNxSWEd6hDzIV6JNq+z4YF7lj9hq31kOT1YhxcZLzPJ 7yizOVlZUYOpUI0pL98aIJqrOhALKggKshAv1F7XkoDTtteOL+frU/6xfq8rFJyr /fRUMVxMMlOPdIp84B2DignYrLkfUiAm9YuTdjsf1QcTI81zYmr8v+GOV2NVbTlf h5y+iFl8Sz+p2RlJov7bV9SOH/nlHKXEQjnuasdD5IX1efxRMtCXXkE75S4tGPmE TkPHmpTeSDuQmOZ0f9lznS3vgqI3NnXLxlGUX5vLvfU0AdLo667hSGNEEIliMExe 2ittJS6x6GhKFRJP8JBOkGesg3qEnL0= -----END CERTIFICATE-----Generated at Mon Oct 20 05:15:52 2025 by rpki-client