$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa File: 572d45e6-6a32-30de-a6e6-c4214389980b.roa (raw, json) Hash identifier: 5FfPwv1RM5rRKaWZmyMCKRbucpTVx9P4yuKvICKpwvI= Subject key identifier: BB:33:0F:68:1D:8C:8D:AC:C2:9A:3D:2B:D7:77:8F:9E:E5:99:64:F7 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584B1806D2F34B402BC1FB9F3000 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 170.225.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:d2:f3:4b:40:2b:c1:fb:9f:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=b0e47d5e-fec0-495f-88c8-5ac0da5607e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fb:43:4d:23:0d:ea:f2:dd:1c:1d:85:ac:ed: 12:c6:c8:e7:cf:89:37:98:64:4a:57:51:0c:76:96: 48:66:e0:c2:3c:cb:7f:b2:7a:7e:a6:a4:51:e6:d4: 32:41:20:13:8b:72:8a:04:e8:23:9a:8d:18:f1:dc: a3:38:6e:ec:88:78:d2:bb:1b:90:f1:28:a4:5d:83: e6:3e:ad:23:c1:7f:0a:1b:4e:24:96:7c:ed:0d:c4: b7:d6:d6:e1:5b:8e:ec:22:13:e4:1e:ca:ab:19:6d: a7:25:0a:1a:3f:80:d8:12:fa:5f:65:9f:44:d3:b3: 61:4b:31:32:a4:6c:60:41:d3:a3:ca:df:5a:6e:d0: 57:2c:b1:c4:c3:1d:b6:5a:68:b3:5e:3e:d9:f9:79: 84:e5:5d:8f:d3:ad:ae:e4:2f:0d:fb:3f:d8:cd:8b: b6:8a:c8:4b:55:88:be:7f:f2:9c:d4:df:bf:9d:21: 5b:b6:9c:7c:17:f5:53:1b:2f:d5:34:89:8f:31:d9: d5:2a:0d:cb:36:d7:e2:02:93:74:90:99:35:8e:11: b7:4e:a1:a2:02:3e:85:a2:66:3c:c4:64:c5:19:29: 2f:47:0b:8b:7a:36:38:a7:13:b3:f7:6b:fa:37:4f: a8:98:47:bc:f8:a7:a2:4e:30:62:bc:a1:03:c0:3d: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:33:0F:68:1D:8C:8D:AC:C2:9A:3D:2B:D7:77:8F:9E:E5:99:64:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a8:3e:b3:06:4a:a1:cc:fe:6d:7d:cd:3a:e2:04:49:0e:70: 56:d9:df:06:24:61:95:98:85:11:66:f0:86:30:c0:fd:10:a4: 1c:93:cb:23:b7:bd:30:17:a1:d5:1b:e4:43:9c:67:d8:0e:2e: f5:bb:b0:aa:7c:9c:88:44:60:5a:cd:a3:ff:4b:e4:77:6f:14: 0c:bb:0a:4d:b4:1a:85:b0:7c:54:6a:48:e1:58:72:e1:29:87: b9:2b:32:7f:e0:6a:15:de:ec:e0:c6:2b:0c:ac:14:33:55:d3: 4d:8b:c4:6a:c0:f6:85:23:c0:7c:56:ea:d7:cb:ae:99:bc:ed: fb:f7:e6:7a:89:ca:15:1b:0f:59:ae:a9:bc:66:0f:ae:0c:ba: 70:5b:cd:46:97:51:42:9e:bd:a1:cc:72:fd:45:36:44:47:bc: 92:a9:54:98:ad:71:28:0a:c5:b4:5f:f7:ca:2d:53:4d:53:cb: 8f:19:36:5e:bb:83:d2:d3:bd:43:11:30:fc:8c:b2:14:fd:18: fa:48:0a:3e:40:d7:9d:38:c8:2c:d1:8e:a6:64:03:9a:88:d2: 72:00:0e:55:93:8d:02:46:af:d9:65:c4:44:0b:b3:a3:b4:80: bb:36:e9:0c:a7:61:0c:e0:16:02:db:f4:9b:4e:4a:b5:62:92: 07:20:c4:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtLzS0ArwfufMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YjBlNDdkNWUtZmVjMC00OTVmLTg4YzgtNWFjMGRhNTYwN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPtDTSMN6vLdHB2FrO0Sxsjnz4k3mGRKV1EM dpZIZuDCPMt/snp+pqRR5tQyQSATi3KKBOgjmo0Y8dyjOG7siHjSuxuQ8SikXYPm Pq0jwX8KG04klnztDcS31tbhW47sIhPkHsqrGW2nJQoaP4DYEvpfZZ9E07NhSzEy pGxgQdOjyt9abtBXLLHEwx22WmizXj7Z+XmE5V2P062u5C8N+z/YzYu2ishLVYi+ f/Kc1N+/nSFbtpx8F/VTGy/VNImPMdnVKg3LNtfiApN0kJk1jhG3TqGiAj6FomY8 xGTFGSkvRwuLejY4pxOz92v6N0+omEe8+KeiTjBivKEDwD2UXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLszD2gdjI2swpo9K9d3j57lmWT3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvNTcyZDQ1ZTYtNmEzMi0z MGRlLWE2ZTYtYzQyMTQzODk5ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSoPrMGSqHM/m19zTriBEkOcFbZ3wYkYZWYhRFm8IYwwP0QpByTyyO3 vTAXodUb5EOcZ9gOLvW7sKp8nIhEYFrNo/9L5HdvFAy7Ck20GoWwfFRqSOFYcuEp h7krMn/gahXe7ODGKwysFDNV002LxGrA9oUjwHxW6tfLrpm87fv35nqJyhUbD1mu qbxmD64MunBbzUaXUUKevaHMcv1FNkRHvJKpVJitcSgKxbRf98otU01Ty48ZNl67 g9LTvUMRMPyMshT9GPpICj5A1504yCzRjqZkA5qI0nIADlWTjQJGr9llxEQLs6O0 gLs26QynYQzgFgLb9JtOSrVikgcgxLI= -----END CERTIFICATE-----Generated at Wed Oct 8 21:17:17 2025 by rpki-client