$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa File: f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa (raw, json) Hash identifier: JnQRLYnejJM8zizoYfMJ8vCo+KOxXZL54eUF+WrBEWI= Subject key identifier: 6B:F4:BA:B7:3B:71:AB:8A:5C:88:3F:02:2B:C2:62:B6:B9:93:04:82 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584EFF777895B923586A785A9800 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 14618 IP address blocks: 170.225.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:78:95:b9:23:58:6a:78:5a:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=7410a19c-0eca-4868-a53d-febd4a34a98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f0:43:10:0c:34:de:23:a0:d3:f7:2a:c9:2a: 21:c4:08:68:70:9d:10:1a:da:8f:cd:5b:fc:74:89: e3:bd:ce:0e:15:1e:ee:fc:4a:0d:09:1d:6e:c8:d9: 27:e6:62:61:57:95:21:b6:7e:eb:2d:e7:7c:58:8f: a8:92:db:54:b7:f1:76:08:00:2a:db:8c:c2:53:29: 82:f8:aa:4b:10:30:fd:2d:68:92:45:4d:95:4a:3e: 8a:0b:20:f0:ab:49:f5:91:d5:7b:25:43:bf:e0:3b: 23:85:bf:04:26:8b:76:e7:b2:4f:92:c6:ad:bf:6b: 61:ba:73:cd:69:61:8f:b9:f7:db:78:5a:ef:80:3d: 76:1f:2f:37:5d:2f:f4:75:71:93:96:ca:f6:21:70: c0:b7:13:11:41:19:7e:46:9b:5c:c8:2f:52:c5:93: 72:9c:30:be:10:aa:8d:00:e1:e6:95:09:4d:4d:b6: fd:1e:34:18:c3:02:38:e7:a4:4d:c7:06:b5:e4:b1: 42:a3:ac:7e:54:0c:07:fa:fc:71:b5:9d:87:65:3b: d7:64:f2:ed:90:5c:ac:5c:6e:73:51:0e:1f:05:26: ec:bc:ba:e1:e9:ad:72:7d:61:33:3c:f1:56:bd:53: bc:e5:07:ce:4d:28:94:b1:fa:6f:eb:65:7f:a2:a1: 2c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F4:BA:B7:3B:71:AB:8A:5C:88:3F:02:2B:C2:62:B6:B9:93:04:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:6a:fe:6a:5e:2b:54:13:cd:3a:db:95:5f:e0:2c:47:23:a1: 9c:47:71:d3:d0:1f:24:51:3c:a9:5e:83:c3:ef:0a:cb:ed:83: 8f:8b:71:cc:63:38:52:38:b7:ae:8d:9f:0d:03:0b:d4:ed:7e: b8:28:ed:d1:b5:d4:43:61:70:7f:01:3e:ed:2c:5f:d0:6f:94: 65:a1:44:b9:1e:49:d0:f8:e1:20:4d:bc:26:0e:e8:83:ea:e9: 20:ca:6a:6a:8b:6a:76:03:87:73:a7:d3:70:7a:05:a5:a4:d9: 44:a0:3e:d2:d7:8b:e9:dd:c2:3f:47:4f:73:e0:f8:83:3e:72: 93:d5:3e:c4:e5:c6:21:97:35:84:eb:e2:da:9a:04:7b:2e:8c: f2:91:18:cf:b9:8c:44:29:c9:d1:37:10:e6:09:c1:e5:52:61: 91:c8:28:f6:bc:70:9e:31:12:6c:9d:4c:38:b8:0d:60:75:87: 1c:02:69:fa:6f:d5:53:0b:ec:53:d3:d4:84:dd:00:65:bc:79: 0e:9c:ad:12:13:8d:70:d3:9e:38:2e:79:02:68:8b:bf:c3:b9: ce:a9:17:67:c2:90:a7:e1:54:18:ad:b6:0a:1b:df:32:82:41: e5:7e:03:32:eb:17:7c:68:21:af:b3:58:c9:6b:27:1f:df:ce: 06:9e:95:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d3iVuSNYanhamAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk NzQxMGExOWMtMGVjYS00ODY4LWE1M2QtZmViZDRhMzRhOThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvBDEAw03iOg0/cqySohxAhocJ0QGtqPzVv8 dInjvc4OFR7u/EoNCR1uyNkn5mJhV5Uhtn7rLed8WI+okttUt/F2CAAq24zCUymC +KpLEDD9LWiSRU2VSj6KCyDwq0n1kdV7JUO/4Dsjhb8EJot257JPksatv2thunPN aWGPuffbeFrvgD12Hy83XS/0dXGTlsr2IXDAtxMRQRl+RptcyC9SxZNynDC+EKqN AOHmlQlNTbb9HjQYwwI456RNxwa15LFCo6x+VAwH+vxxtZ2HZTvXZPLtkFysXG5z UQ4fBSbsvLrh6a1yfWEzPPFWvVO85QfOTSiUsfpv62V/oqEstwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGv0urc7cauKXIg/AivCYra5kwSCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvZjU5MWMzZjgtZmU2Mi0z Y2VhLThiNGUtNDZlMmVjYTMyMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpq/mpeK1QTzTrblV/gLEcjoZxHcdPQHyRRPKleg8PvCsvtg4+Lccxj OFI4t66Nnw0DC9Ttfrgo7dG11ENhcH8BPu0sX9BvlGWhRLkeSdD44SBNvCYO6IPq 6SDKamqLanYDh3On03B6BaWk2USgPtLXi+ndwj9HT3Pg+IM+cpPVPsTlxiGXNYTr 4tqaBHsujPKRGM+5jEQpydE3EOYJweVSYZHIKPa8cJ4xEmydTDi4DWB1hxwCafpv 1VML7FPT1ITdAGW8eQ6crRITjXDTnjgueQJoi7/Duc6pF2fCkKfhVBittgob3zKC QeV+AzLrF3xoIa+zWMlrJx/fzgaeldQ= -----END CERTIFICATE-----Generated at Sat Sep 19 12:40:36 2026 by rpki-client