$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa File: 98d4dcd1-7048-351e-8685-4eb20dda3967.roa (raw, json) Hash identifier: IO0WTPU/dPH4ZONW3JoVXsOlYCxvY1o5bPM8fL/SDfs= Subject key identifier: 31:20:7D:3E:7C:C8:BA:D3:8F:F0:09:A8:08:9A:31:D2:4E:12:A3:96 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584F2EED1728CEBBAA3D2AA4AA00 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 170.225.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:17:28:ce:bb:aa:3d:2a:a4:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=7fd868b7-160a-4097-a722-f3327fa7a5a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3c:60:c7:5e:23:5d:b0:49:e8:c0:a4:02:65: b6:cb:37:13:3a:38:5c:76:07:f1:a0:20:cb:3a:6d: d3:01:3e:27:a8:f7:28:25:c9:20:ba:a0:aa:6a:1c: 7e:c7:8a:3b:a7:2b:1c:bb:f2:a2:71:a1:e7:cd:a1: 77:18:73:5f:ee:29:79:64:15:97:b7:ff:29:e8:63: 27:7f:35:9c:3a:78:ce:e2:50:d3:38:8f:80:ff:a8: 67:d0:a3:c5:b9:e5:37:e9:39:f7:b2:bc:88:7a:e0: 71:5b:c1:a4:8a:11:3d:3b:9e:64:6e:08:1c:fb:02: f5:b7:28:7d:75:51:7b:20:04:cb:8b:d0:5e:43:63: c5:af:ea:53:7b:89:68:bf:52:54:70:4e:85:c9:1e: b2:80:a7:a8:91:5f:43:ad:ed:df:b4:6e:35:dd:19: ac:ae:f3:d2:da:23:d3:c8:d8:c6:03:5d:a9:8a:d5: 4a:ef:00:6e:c7:05:17:5f:14:47:8d:ff:2c:4d:d4: 48:1e:94:31:cc:b6:52:6b:13:86:3e:76:05:c7:3c: 82:1c:7b:b1:50:0a:c7:45:66:d4:08:dc:02:9d:86: c4:95:34:0b:dd:f9:6b:ae:7a:49:3c:b3:06:b7:3f: f2:99:b2:ae:96:b2:3d:a2:f0:3c:7a:70:d8:1d:8e: 71:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:20:7D:3E:7C:C8:BA:D3:8F:F0:09:A8:08:9A:31:D2:4E:12:A3:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:72:e0:80:3f:e6:10:c4:1e:7c:bc:c3:7e:2a:27:4c:27:da: f4:67:51:32:c6:f7:37:66:2f:25:79:60:fb:3d:06:0c:58:c4: a4:b8:2a:59:1e:09:b7:a9:e6:d4:bf:5b:9f:fa:b5:1d:e8:23: aa:a7:74:17:2f:2f:b3:ac:e1:05:93:ab:54:2a:42:e9:f8:11: 0d:9b:b0:29:e4:88:59:f5:03:ee:d5:f0:40:b6:b4:dc:4c:e1: a1:98:bf:53:f4:58:d3:84:ba:2f:49:33:a5:75:89:e5:0f:73: 95:c5:5f:47:cd:bb:00:75:7a:b4:a9:04:a3:e3:72:df:12:61: 5c:66:8c:4b:34:03:68:48:6a:54:79:51:83:54:ba:78:e1:ff: eb:0b:85:5a:9c:1f:33:a1:22:37:66:5a:c2:1b:bc:f5:6e:d3: 9d:97:9e:8e:1b:30:77:a4:0b:9f:85:5c:8f:eb:70:ba:7c:90: d9:84:ed:31:23:24:6a:58:d5:48:62:8f:0e:c6:2a:f3:b8:81: 1c:0d:58:9d:49:3e:05:98:44:ec:71:fd:be:72:0c:88:7d:71: ee:48:f3:c9:d4:ab:9f:9b:60:63:88:4e:e3:b9:a3:44:1c:b6: ea:34:d0:e9:9a:fa:7f:1d:ed:07:29:49:75:ba:5d:50:b4:3b: 9f:f4:65:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RcozruqPSqkqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk N2ZkODY4YjctMTYwYS00MDk3LWE3MjItZjMzMjdmYTdhNWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojxgx14jXbBJ6MCkAmW2yzcTOjhcdgfxoCDL Om3TAT4nqPcoJckguqCqahx+x4o7pyscu/KicaHnzaF3GHNf7il5ZBWXt/8p6GMn fzWcOnjO4lDTOI+A/6hn0KPFueU36Tn3sryIeuBxW8GkihE9O55kbggc+wL1tyh9 dVF7IATLi9BeQ2PFr+pTe4lov1JUcE6FyR6ygKeokV9Dre3ftG413RmsrvPS2iPT yNjGA12pitVK7wBuxwUXXxRHjf8sTdRIHpQxzLZSaxOGPnYFxzyCHHuxUArHRWbU CNwCnYbElTQL3flrrnpJPLMGtz/ymbKulrI9ovA8enDYHY5xCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEgfT58yLrTj/AJqAiaMdJOEqOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvOThkNGRjZDEtNzA0OC0z NTFlLTg2ODUtNGViMjBkZGEzOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAty4IA/5hDEHny8w34qJ0wn2vRnUTLG9zdmLyV5YPs9BgxYxKS4Klke Cbep5tS/W5/6tR3oI6qndBcvL7Os4QWTq1QqQun4EQ2bsCnkiFn1A+7V8EC2tNxM 4aGYv1P0WNOEui9JM6V1ieUPc5XFX0fNuwB1erSpBKPjct8SYVxmjEs0A2hIalR5 UYNUunjh/+sLhVqcHzOhIjdmWsIbvPVu052Xno4bMHekC5+FXI/rcLp8kNmE7TEj JGpY1Uhijw7GKvO4gRwNWJ1JPgWYROxx/b5yDIh9ce5I88nUq5+bYGOITuO5o0Qc tuo00Oma+n8d7QcpSXW6XVC0O5/0ZYw= -----END CERTIFICATE-----Generated at Sat Sep 19 12:40:57 2026 by rpki-client