$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/137278aa-f1ae-3acb-b058-9033b56e7bc1.roa File: 137278aa-f1ae-3acb-b058-9033b56e7bc1.roa (raw, json) Hash identifier: 3N5CZUY6kqRraXoRrwIzWVjEyRCSydurPigNrGvKBXk= Subject key identifier: 3D:E4:26:63:32:39:BC:1E:16:0B:FC:25:9D:2F:42:13:C7:00:B2:33 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584EFF7778A2B67B953C5E0E4780 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/137278aa-f1ae-3acb-b058-9033b56e7bc1.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 170.225.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:78:a2:b6:7b:95:3c:5e:0e:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=5a3ce79c-7857-4e95-9f64-cad4e1c566d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:54:f2:56:56:c9:71:82:ee:27:34:f6:61:1f: 0b:7b:c0:c4:52:5e:60:99:21:4f:c2:e9:38:b0:09: 73:98:de:63:19:14:13:31:a1:27:ef:de:68:7c:6a: 71:c6:74:30:8d:51:bd:ba:d9:4d:f6:12:53:3d:5d: 04:69:fe:b4:d0:5d:fd:58:64:09:2a:d1:97:5a:4b: 5e:af:8c:66:d4:d6:d1:79:ea:e4:2a:52:9f:3b:1a: 1e:b4:69:37:c4:70:de:da:ce:03:38:7a:43:74:6f: 43:e2:90:99:43:5d:b5:c3:03:39:d4:3a:d3:18:5a: e3:bb:3e:90:c2:ef:82:af:6a:e6:be:97:5b:89:98: b9:ab:80:b7:ff:58:c0:92:2c:e6:8c:96:2f:27:31: 84:e7:ff:0d:0f:27:56:91:c2:7d:9e:16:a5:c1:93: e2:fa:ca:f6:f0:8a:ae:a0:f5:49:10:9d:25:fb:01: fc:50:43:c0:4b:34:48:0f:c6:05:27:dc:95:5a:29: a9:29:ba:6d:0c:2d:74:99:63:e1:4d:a1:56:bc:db: 44:ab:2f:8e:c7:78:bb:17:bf:5f:a0:13:97:7d:6b: 7e:87:1e:08:cc:32:57:43:5f:b4:37:16:6a:6a:51: 47:e5:90:c9:06:cd:e6:f1:9c:85:32:c2:4e:57:37: f5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E4:26:63:32:39:BC:1E:16:0B:FC:25:9D:2F:42:13:C7:00:B2:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/137278aa-f1ae-3acb-b058-9033b56e7bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f2:8a:16:50:18:6d:4a:d6:97:84:23:52:f3:98:ce:2e:86: 68:a5:2d:63:ba:8b:ff:4a:4d:e7:23:2d:39:04:75:2c:a5:ec: af:bc:8e:5b:c6:85:7a:6d:4f:5f:67:11:97:26:c6:b7:df:7b: ef:d1:f4:b5:51:5d:a3:58:d6:9b:b4:3a:ea:eb:5c:dc:95:49: 2a:09:8c:82:20:49:54:e5:24:ae:cc:7d:55:d5:e1:5d:55:d8: d2:94:50:f6:6a:45:74:3a:84:6d:65:41:02:57:67:e2:75:81: a4:66:f4:d4:e4:74:8e:e1:d2:de:80:79:92:b8:91:88:f2:38: d6:dc:6a:88:83:bc:5c:a3:70:45:88:44:e0:be:01:4d:d9:96: 1d:a8:33:02:aa:9d:0d:68:fc:f0:74:ce:89:36:c9:c4:31:75: 99:50:8c:64:42:75:29:f8:61:5f:3a:3c:89:c3:db:16:99:7a: 08:cc:c6:f2:07:ce:4b:95:c7:ed:44:df:9c:09:0b:0e:ee:78: 4d:fa:92:a9:25:10:06:81:88:10:c2:fa:c3:1f:4c:0b:73:98: ba:2b:de:7d:46:9b:26:c7:32:11:df:91:d6:9e:d5:d3:8d:05: e4:d5:92:26:60:57:20:49:b4:d1:ab:5b:ef:2b:d5:59:bd:28: a3:25:c8:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d3iitnuVPF4OR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk NWEzY2U3OWMtNzg1Ny00ZTk1LTlmNjQtY2FkNGUxYzU2NmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVTyVlbJcYLuJzT2YR8Le8DEUl5gmSFPwuk4 sAlzmN5jGRQTMaEn795ofGpxxnQwjVG9utlN9hJTPV0Eaf600F39WGQJKtGXWkte r4xm1NbReerkKlKfOxoetGk3xHDe2s4DOHpDdG9D4pCZQ121wwM51DrTGFrjuz6Q wu+Cr2rmvpdbiZi5q4C3/1jAkizmjJYvJzGE5/8NDydWkcJ9nhalwZPi+sr28Iqu oPVJEJ0l+wH8UEPASzRID8YFJ9yVWimpKbptDC10mWPhTaFWvNtEqy+Ox3i7F79f oBOXfWt+hx4IzDJXQ1+0NxZqalFH5ZDJBs3m8ZyFMsJOVzf1RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3kJmMyObweFgv8JZ0vQhPHALIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvMTM3Mjc4YWEtZjFhZS0z YWNiLWIwNTgtOTAzM2I1NmU3YmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3yihZQGG1K1peEI1LzmM4uhmilLWO6i/9KTecjLTkEdSyl7K+8jlvG hXptT19nEZcmxrffe+/R9LVRXaNY1pu0OurrXNyVSSoJjIIgSVTlJK7MfVXV4V1V 2NKUUPZqRXQ6hG1lQQJXZ+J1gaRm9NTkdI7h0t6AeZK4kYjyONbcaoiDvFyjcEWI ROC+AU3Zlh2oMwKqnQ1o/PB0zok2ycQxdZlQjGRCdSn4YV86PInD2xaZegjMxvIH zkuVx+1E35wJCw7ueE36kqklEAaBiBDC+sMfTAtzmLor3n1GmybHMhHfkdae1dON BeTVkiZgVyBJtNGrW+8r1Vm9KKMlyGQ= -----END CERTIFICATE-----Generated at Sat Sep 19 12:42:50 2026 by rpki-client