$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa File: 572d45e6-6a32-30de-a6e6-c4214389980b.roa (raw, json) Hash identifier: z9g96oct4RUfz44H44vDJHSxZeH5qgX5eb7xXPppcUE= Subject key identifier: 61:92:1F:41:CF:F3:2B:62:C8:11:BB:A1:83:70:CB:E7:04:C8:8E:87 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584F3CE299F5A8E5CA279E064DC0 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 170.225.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:99:f5:a8:e5:ca:27:9e:06:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=d2fe82c8-5be8-4ae2-8c2d-c7fb3700f921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bb:d9:28:16:7d:43:04:bb:2b:9e:e9:61:4b: b7:f9:a9:a7:1d:e2:4f:a1:36:60:37:5e:65:ce:37: 7c:d5:10:9b:76:54:35:ee:06:ef:eb:12:e5:e6:2d: f2:36:35:34:64:a9:51:41:b6:39:c2:2d:3b:72:28: 7b:84:9f:fb:26:3f:71:27:dd:86:8c:b5:1c:e3:58: e1:ad:62:5a:96:14:56:45:1d:6c:61:23:16:4a:56: 22:4c:89:f0:d6:bd:d0:30:85:6b:89:c1:3d:6c:35: 29:1b:a1:48:d9:9f:f9:aa:a7:ec:7c:41:c2:15:18: 07:93:66:33:37:5b:00:0e:f9:de:f2:b6:0c:63:64: b7:53:65:b5:a0:3a:5f:ed:6d:35:1d:c5:c4:71:45: 0c:dc:75:17:74:3d:ca:df:18:87:fa:bc:6d:f1:b0: 4d:03:94:cd:16:f1:4b:ee:95:74:c0:56:58:bf:06: b6:d2:46:8e:f9:19:7f:76:1f:8d:23:83:cf:71:a3: 91:01:c2:7e:76:73:c8:da:1b:92:96:c9:04:5c:0b: 2d:f7:09:d2:58:dd:c3:ba:46:33:64:ba:fc:b7:8b: fb:49:10:f1:63:b6:0a:d5:7c:01:13:df:8c:94:f9: 7e:c0:44:c1:cd:44:48:5c:7b:fe:aa:d2:0a:f2:aa: 14:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:92:1F:41:CF:F3:2B:62:C8:11:BB:A1:83:70:CB:E7:04:C8:8E:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:a5:87:09:c8:e1:d2:71:8f:ea:1c:e2:4c:a3:1e:59:44:a8: ae:0a:c9:90:f0:b3:40:10:12:34:6d:14:84:8f:b8:58:55:00: 2f:af:d5:11:e0:8a:6f:ea:eb:9b:f3:d9:9c:c5:c6:1a:75:69: 7f:69:c6:de:45:8f:48:c1:fc:02:b4:c2:67:af:9b:37:3b:be: f9:33:c9:2e:d7:13:4d:70:bb:28:47:0c:6f:8d:83:82:c2:b5: 2e:93:5e:bc:15:4d:b1:04:da:35:6c:ec:f3:4c:94:0c:b8:ce: a5:d5:e9:24:fa:74:52:ba:ee:88:c8:3a:c3:b6:8f:f2:5b:ac: 9e:0f:e0:2a:55:84:7f:4a:f8:be:dc:a7:c0:4e:00:d5:d0:fa: fe:42:33:89:ec:e8:98:d1:83:3a:e7:c6:d2:ea:ef:2f:d5:4b: 48:75:a6:02:15:0d:48:e3:b0:17:ac:ea:43:5a:fe:2b:a2:06: ad:df:f9:d3:08:1c:37:53:cc:9f:35:76:0a:7e:7c:a2:de:00: cc:df:34:77:b9:e6:47:aa:45:ee:e0:eb:2e:7e:72:f1:53:8f: 29:9f:ff:b7:49:68:33:87:b5:a4:ba:c2:c6:54:15:a3:2d:c3: 55:81:31:ba:2d:f9:fd:72:3e:f2:b5:45:bc:ce:ab:17:e3:e0: 4d:bf:69:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884pn1qOXKJ54GTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk ZDJmZTgyYzgtNWJlOC00YWUyLThjMmQtYzdmYjM3MDBmOTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrvZKBZ9QwS7K57pYUu3+amnHeJPoTZgN15l zjd81RCbdlQ17gbv6xLl5i3yNjU0ZKlRQbY5wi07cih7hJ/7Jj9xJ92GjLUc41jh rWJalhRWRR1sYSMWSlYiTInw1r3QMIVricE9bDUpG6FI2Z/5qqfsfEHCFRgHk2Yz N1sADvne8rYMY2S3U2W1oDpf7W01HcXEcUUM3HUXdD3K3xiH+rxt8bBNA5TNFvFL 7pV0wFZYvwa20kaO+Rl/dh+NI4PPcaORAcJ+dnPI2huSlskEXAst9wnSWN3DukYz ZLr8t4v7SRDxY7YK1XwBE9+MlPl+wETBzURIXHv+qtIK8qoUPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGSH0HP8ytiyBG7oYNwy+cEyI6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvNTcyZDQ1ZTYtNmEzMi0z MGRlLWE2ZTYtYzQyMTQzODk5ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWlhwnI4dJxj+oc4kyjHllEqK4KyZDws0AQEjRtFISPuFhVAC+v1RHg im/q65vz2ZzFxhp1aX9pxt5Fj0jB/AK0wmevmzc7vvkzyS7XE01wuyhHDG+Ng4LC tS6TXrwVTbEE2jVs7PNMlAy4zqXV6ST6dFK67ojIOsO2j/JbrJ4P4CpVhH9K+L7c p8BOANXQ+v5CM4ns6JjRgzrnxtLq7y/VS0h1pgIVDUjjsBes6kNa/iuiBq3f+dMI HDdTzJ81dgp+fKLeAMzfNHe55keqRe7g6y5+cvFTjymf/7dJaDOHtaS6wsZUFaMt w1WBMbot+f1yPvK1RbzOqxfj4E2/aT0= -----END CERTIFICATE-----Generated at Tue Sep 22 18:53:42 2026 by rpki-client