$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa File: d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa (raw, json) Hash identifier: GT1GC9+//DJB/NU+nHQrc7P+AB2zy1ieHm3WkbzYxVA= Subject key identifier: 9B:A1:55:BC:7F:51:AE:7D:8E:61:6C:DA:AB:B3:17:86:D2:B3:5F:AB Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584B13D6B85A636AE35D2D6E3928 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 170.225.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:b8:5a:63:6a:e3:5d:2d:6e:39:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=6e2c9a21-8790-49b7-8c83-f610ae004410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1f:aa:24:7d:33:ae:6d:ae:20:ec:1f:c1:4d: d3:e4:52:a0:c8:ac:84:a4:08:3b:bc:b2:37:6b:0f: 33:c3:11:7c:4e:41:64:0e:3e:5e:d7:f3:29:9f:84: 04:7b:2f:85:9a:fa:de:e0:5e:78:0a:fe:5b:aa:d2: 19:bf:2b:1b:67:9c:50:ba:c6:ee:6f:ae:28:e4:92: 26:c0:0c:6b:8c:35:39:24:47:a6:3a:82:12:86:6d: a3:5c:a0:46:de:2b:42:db:10:93:c1:21:28:b3:67: 67:61:9d:82:1f:3e:47:d1:bc:dc:d7:e2:9e:82:52: 03:18:d1:e0:d6:5d:d6:46:af:12:7d:26:bf:4a:04: 59:38:03:d3:5a:70:ae:54:91:e1:03:e5:aa:bf:46: 0b:cd:09:fd:45:02:20:39:83:64:0a:31:d1:ff:63: e5:c5:7e:07:9c:42:93:97:41:24:c9:4a:88:67:49: ce:b4:6c:51:a8:9f:05:80:9a:26:a3:08:03:f5:31: 23:ce:ce:d9:fd:36:47:dd:a7:ff:d9:14:03:29:75: 52:55:6e:94:22:28:4e:88:74:f3:90:14:f4:6b:3e: 01:94:b4:4d:13:cc:89:35:1a:86:9f:9e:43:3a:cd: 05:f5:95:4a:15:4a:8d:65:1c:37:4e:17:39:31:60: 52:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A1:55:BC:7F:51:AE:7D:8E:61:6C:DA:AB:B3:17:86:D2:B3:5F:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f7:84:14:a5:94:6f:ab:0c:8a:d0:59:b9:9c:04:13:97:68: e3:b9:65:d4:5b:86:1a:18:85:bc:32:9d:9e:8b:a7:da:88:ce: f2:5c:c5:89:08:66:c9:ea:b9:59:aa:59:db:3a:c9:5f:fe:56: 82:32:29:85:91:ac:a0:24:47:94:f2:55:1b:61:93:e9:4d:e5: 8e:7c:3f:0a:00:f3:27:cc:01:8e:9f:41:0b:72:61:1f:70:e0: 21:20:12:42:29:0f:c5:04:26:ae:5a:d6:3f:00:51:69:3e:c4: ae:ba:dc:cf:f1:95:58:b3:14:fe:ed:14:8c:e1:99:4e:0b:72: 10:b0:72:c0:05:2a:da:02:82:4b:bf:7c:a9:32:76:37:d7:cc: 4f:ad:94:ba:c9:7a:7d:c2:47:f1:14:71:50:b1:66:3c:ec:81: 6f:4f:b5:da:05:2f:32:fe:38:59:a2:f7:e5:55:30:85:c2:18: 89:6c:26:29:33:d4:10:1f:6d:a9:58:e5:b0:1e:8d:01:13:80: d6:a3:b3:08:c1:28:0d:a9:a5:06:f6:35:50:dd:f8:43:88:a7: fe:d6:14:58:d6:cb:61:24:dd:5f:b7:30:b7:67:79:20:6e:2b: 81:c5:00:0a:d5:fd:3d:b2:83:a7:b5:7b:fe:08:7d:95:f3:64: 69:b8:c8:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1rhaY2rjXS1uOSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NmUyYzlhMjEtODc5MC00OWI3LThjODMtZjYxMGFlMDA0NDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB+qJH0zrm2uIOwfwU3T5FKgyKyEpAg7vLI3 aw8zwxF8TkFkDj5e1/Mpn4QEey+Fmvre4F54Cv5bqtIZvysbZ5xQusbub64o5JIm wAxrjDU5JEemOoIShm2jXKBG3itC2xCTwSEos2dnYZ2CHz5H0bzc1+KeglIDGNHg 1l3WRq8SfSa/SgRZOAPTWnCuVJHhA+Wqv0YLzQn9RQIgOYNkCjHR/2PlxX4HnEKT l0EkyUqIZ0nOtGxRqJ8FgJomowgD9TEjzs7Z/TZH3af/2RQDKXVSVW6UIihOiHTz kBT0az4BlLRNE8yJNRqGn55DOs0F9ZVKFUqNZRw3Thc5MWBSkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuhVbx/Ua59jmFs2quzF4bSs1+rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvZDM1ZmE4MDAtNjkzMS0z MmI3LThmYjEtMjJmNmY4Y2I4NDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHj3hBSllG+rDIrQWbmcBBOXaOO5ZdRbhhoYhbwynZ6Lp9qIzvJcxYkI ZsnquVmqWds6yV/+VoIyKYWRrKAkR5TyVRthk+lN5Y58PwoA8yfMAY6fQQtyYR9w 4CEgEkIpD8UEJq5a1j8AUWk+xK663M/xlVizFP7tFIzhmU4LchCwcsAFKtoCgku/ fKkydjfXzE+tlLrJen3CR/EUcVCxZjzsgW9PtdoFLzL+OFmi9+VVMIXCGIlsJikz 1BAfbalY5bAejQETgNajswjBKA2ppQb2NVDd+EOIp/7WFFjWy2Ek3V+3MLdneSBu K4HFAArV/T2yg6e1e/4IfZXzZGm4yDY= -----END CERTIFICATE-----Generated at Thu Oct 9 01:22:58 2025 by rpki-client