$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa File: 5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa (raw, json) Hash identifier: MkTDUT+B/0+uovCDLbYPVFjOXE46SkBwka3YVpoKuFo= Subject key identifier: 6D:A5:9A:0F:C5:1F:A9:B9:70:62:8D:22:F4:65:61:15:FB:AF:A7:BF Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584B1806D306C607558517BB8570 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 170.225.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:d3:06:c6:07:55:85:17:bb:85:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=1e9794b2-c817-46aa-9bc8-97c652e9d2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f2:bf:a0:04:4c:32:95:fd:25:9d:e0:a5:d7: 0e:03:9a:89:6d:1b:cc:85:fb:c7:a2:8f:40:f6:48: 20:35:c4:24:c7:35:6c:e4:22:f5:7a:9d:a1:c3:f4: 3b:90:85:ec:f0:36:1a:ac:f8:36:33:0e:3e:62:06: f7:50:26:06:8d:d6:b0:60:d3:e3:5d:98:8b:7d:eb: 1f:bb:88:49:1f:f3:96:af:8c:a4:92:86:35:12:76: 12:85:1c:34:d7:5f:c8:fc:a4:72:c9:2a:33:7a:f7: 15:22:07:77:8a:70:6d:88:e1:98:82:7b:3f:fd:98: 05:62:2b:57:3a:a1:2d:c3:a3:59:e9:63:f1:c9:d9: 59:af:0d:a3:50:3b:a0:67:7b:d1:f8:07:01:85:ad: 2a:15:5f:af:49:35:c7:27:3b:83:d1:02:c6:0d:cb: 0c:be:3f:31:b1:cc:98:0b:43:10:8b:2b:ee:da:fa: 27:93:ba:dd:04:10:d9:a6:f8:40:a0:a8:71:9f:c9: 39:aa:ac:8e:d6:14:ff:0d:c4:84:22:4c:61:8c:4f: b3:4f:a1:b9:ae:9b:ed:a4:fa:df:ab:ff:9c:39:73: 02:47:15:42:5d:ef:6d:1d:bd:79:1c:eb:97:6a:88: ae:fa:4b:75:f7:3d:25:c1:d4:91:66:9d:bf:f5:74: ae:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A5:9A:0F:C5:1F:A9:B9:70:62:8D:22:F4:65:61:15:FB:AF:A7:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d2:5c:c3:68:c9:8c:e9:26:5b:7b:32:23:6f:d9:dd:9d:1e: f3:bf:4e:31:7f:6b:6f:27:cf:7d:ec:00:a4:fa:07:a6:3d:38: eb:c3:fd:39:3c:88:14:01:da:d9:45:9f:a8:c4:e3:81:a1:84: 32:bd:b6:af:55:f5:4e:59:f5:62:fc:b8:10:2b:c6:f5:cf:22: 27:2e:85:f3:70:bc:bf:a7:92:3f:5b:87:53:04:01:2b:17:2d: e9:9e:a4:40:be:db:07:cf:68:6a:29:c6:2b:84:b9:c2:51:15: a8:28:91:5a:fd:3d:1a:48:3c:02:2a:63:99:d9:aa:43:c3:7a: 2e:93:38:9e:ce:67:6f:0b:89:22:9f:04:a3:e2:88:e9:ad:98: bd:d0:31:b2:ea:c3:74:13:cb:3e:1b:0f:79:b8:8c:f6:05:88: d3:12:7d:05:af:c2:38:2b:0e:8e:ae:27:32:aa:24:85:5a:9e: 32:57:6b:a9:81:f4:81:06:0d:a0:9e:22:3b:15:43:3d:18:b9: 4e:c3:45:f4:d5:83:b4:21:64:a2:62:de:7b:50:47:0c:cd:e1: fb:9b:46:94:0e:ab:73:56:9c:08:f5:71:c2:2f:eb:0b:81:7b: 00:2e:f3:e3:0b:6a:53:ae:11:6b:c9:fb:2d:c8:ed:e9:f7:1e: 52:3c:c8:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtMGxgdVhRe7hXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MWU5Nzk0YjItYzgxNy00NmFhLTliYzgtOTdjNjUyZTlkMmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/K/oARMMpX9JZ3gpdcOA5qJbRvMhfvHoo9A 9kggNcQkxzVs5CL1ep2hw/Q7kIXs8DYarPg2Mw4+Ygb3UCYGjdawYNPjXZiLfesf u4hJH/OWr4ykkoY1EnYShRw011/I/KRyySozevcVIgd3inBtiOGYgns//ZgFYitX OqEtw6NZ6WPxydlZrw2jUDugZ3vR+AcBha0qFV+vSTXHJzuD0QLGDcsMvj8xscyY C0MQiyvu2vonk7rdBBDZpvhAoKhxn8k5qqyO1hT/DcSEIkxhjE+zT6G5rpvtpPrf q/+cOXMCRxVCXe9tHb15HOuXaoiu+kt19z0lwdSRZp2/9XSu6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2lmg/FH6m5cGKNIvRlYRX7r6e/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvNWE3ZjkyYmUtNjZiMi0z MjA0LThhOGYtNzUxZjM2NGU3YzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPSXMNoyYzpJlt7MiNv2d2dHvO/TjF/a28nz33sAKT6B6Y9OOvD/Tk8 iBQB2tlFn6jE44GhhDK9tq9V9U5Z9WL8uBArxvXPIicuhfNwvL+nkj9bh1MEASsX LemepEC+2wfPaGopxiuEucJRFagokVr9PRpIPAIqY5nZqkPDei6TOJ7OZ28LiSKf BKPiiOmtmL3QMbLqw3QTyz4bD3m4jPYFiNMSfQWvwjgrDo6uJzKqJIVanjJXa6mB 9IEGDaCeIjsVQz0YuU7DRfTVg7QhZKJi3ntQRwzN4fubRpQOq3NWnAj1ccIv6wuB ewAu8+MLalOuEWvJ+y3I7en3HlI8yME= -----END CERTIFICATE-----Generated at Thu Oct 9 01:21:56 2025 by rpki-client