$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa File: d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa (raw, json) Hash identifier: jS7ObxwlpKx+BBD0ODiOMH5ZbF8P5I3/7zt06rcfuvQ= Subject key identifier: 97:83:96:F9:7B:3F:D7:F1:54:D5:DB:15:2E:19:6B:C1:FD:A4:E1:5B Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584F374D25D7E1055F90E126AB40 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 170.225.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:25:d7:e1:05:5f:90:e1:26:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=335dd112-35a1-46f8-a1fa-09b258acf44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e1:40:47:6f:70:97:48:7f:3c:b3:e7:6c:2c: 95:a5:4c:45:61:a0:71:2f:75:c1:37:d9:f1:12:9a: 2f:d9:24:89:4a:f0:01:65:0a:f2:ee:f6:52:51:aa: 21:83:05:9e:46:05:d7:f4:01:df:54:0f:77:ad:78: 14:bc:54:77:a3:27:eb:db:09:34:77:ff:0f:5e:13: a6:79:be:72:2b:a2:9e:27:70:2e:0e:b1:15:78:95: d3:35:81:66:81:11:80:57:b3:9d:99:07:d1:2d:88: 98:31:0c:5b:51:34:86:de:3e:4c:44:04:f4:1c:ce: 95:0b:8f:3c:3d:60:d4:ad:b4:bf:b6:cf:f6:87:f4: 2f:e2:a8:61:f1:c4:d9:ab:2d:ef:07:f2:03:89:16: b7:5c:fa:9f:85:0a:be:a9:24:ce:7e:cc:e9:43:aa: e2:1d:f6:25:3e:4c:ba:71:a1:91:9e:b8:63:2a:c2: 5f:c8:e2:7c:c6:7f:5b:ad:e8:09:21:de:1b:d5:2f: d9:58:a8:7c:2f:b6:dd:55:5c:69:ca:a0:c4:3d:20: b7:5d:00:34:1b:ec:dd:70:d1:87:11:88:be:05:6b: 4c:b0:e5:1f:c6:53:4e:d7:6c:e1:78:22:d5:e7:98: 0f:0d:62:39:a3:e0:10:57:ab:c6:7a:94:5a:07:41: 00:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:83:96:F9:7B:3F:D7:F1:54:D5:DB:15:2E:19:6B:C1:FD:A4:E1:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:09:c6:af:db:51:54:9a:76:2d:21:e4:a1:5b:4b:59:f7:0a: 5a:79:8e:87:0f:25:69:ce:cd:78:36:43:4e:68:83:4c:15:89: 63:0d:46:a0:a3:a1:81:69:88:1a:38:0d:fb:f5:45:e7:d6:ef: 53:5f:d1:a1:67:6f:1c:ff:37:df:f1:fc:93:92:86:8f:70:9f: cb:f1:db:90:fb:43:c9:c6:48:41:14:0c:78:38:be:15:97:8c: 90:7d:86:b3:d8:8e:50:69:94:67:6c:d2:51:59:f7:ce:90:07: 86:e4:35:9f:b9:85:f1:ec:9c:e1:96:7a:92:c1:2c:42:74:49: 2c:56:a6:e2:50:d0:f5:96:33:dd:b8:98:ce:35:57:22:8e:e6: a5:a8:bc:f3:dc:f9:ae:e5:fd:c7:c9:a0:40:65:f2:6c:18:e7: 4d:91:ff:38:76:3a:83:5d:b9:fb:8c:97:40:37:1b:2b:b7:f4: 69:5e:7f:94:a7:09:79:78:c7:5d:12:c2:ba:db:a2:f5:8b:1c: c7:68:82:bb:0b:b6:0f:ab:c1:6d:22:e3:ab:03:7a:0f:cb:83: 92:31:15:71:b8:d3:92:65:de:fb:04:97:3d:77:26:6e:71:f5: 79:c4:a0:35:ba:48:1e:90:27:d5:a9:59:80:1a:f3:4e:0f:53: 22:b0:e8:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TSXX4QVfkOEmq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk MzM1ZGQxMTItMzVhMS00NmY4LWExZmEtMDliMjU4YWNmNDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuFAR29wl0h/PLPnbCyVpUxFYaBxL3XBN9nx Epov2SSJSvABZQry7vZSUaohgwWeRgXX9AHfVA93rXgUvFR3oyfr2wk0d/8PXhOm eb5yK6KeJ3AuDrEVeJXTNYFmgRGAV7OdmQfRLYiYMQxbUTSG3j5MRAT0HM6VC488 PWDUrbS/ts/2h/Qv4qhh8cTZqy3vB/IDiRa3XPqfhQq+qSTOfszpQ6riHfYlPky6 caGRnrhjKsJfyOJ8xn9bregJId4b1S/ZWKh8L7bdVVxpyqDEPSC3XQA0G+zdcNGH EYi+BWtMsOUfxlNO12zheCLV55gPDWI5o+AQV6vGepRaB0EAHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeDlvl7P9fxVNXbFS4Za8H9pOFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvZDM1ZmE4MDAtNjkzMS0z MmI3LThmYjEtMjJmNmY4Y2I4NDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4Jxq/bUVSadi0h5KFbS1n3Clp5jocPJWnOzXg2Q05og0wViWMNRqCj oYFpiBo4Dfv1RefW71Nf0aFnbxz/N9/x/JOSho9wn8vx25D7Q8nGSEEUDHg4vhWX jJB9hrPYjlBplGds0lFZ986QB4bkNZ+5hfHsnOGWepLBLEJ0SSxWpuJQ0PWWM924 mM41VyKO5qWovPPc+a7l/cfJoEBl8mwY502R/zh2OoNdufuMl0A3Gyu39Glef5Sn CXl4x10SwrrbovWLHMdogrsLtg+rwW0i46sDeg/Lg5IxFXG405Jl3vsElz13Jm5x 9XnEoDW6SB6QJ9WpWYAa804PUyKw6NE= -----END CERTIFICATE-----Generated at Sat Sep 19 12:41:57 2026 by rpki-client