$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa File: 572d45e6-6a32-30de-a6e6-c4214389980b.roa (raw, json) Hash identifier: iNHyUoeyhgUcjsk8anqzNv7WYegJZqz+F8xJlXEbd70= Subject key identifier: C8:CA:91:7F:3F:FD:32:7C:AD:89:EC:73:F1:92:F3:E9:FD:76:0A:1D Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584CD99CD7835534D058684F0D58 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa Signing time: Fri 13 Feb 2026 14:00:41 +0000 ROA not before: Fri 13 Feb 2026 14:00:41 +0000 ROA not after: Thu 14 May 2026 13:00:41 +0000 asID: 14618 IP address blocks: 170.225.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:9c:d7:83:55:34:d0:58:68:4f:0d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Feb 13 14:00:41 2026 GMT Not After : May 14 13:00:41 2026 GMT Subject: CN=9fad9421-0bb9-439c-9f60-cad1bb9bb523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0b:db:c6:34:02:a7:ca:ad:ad:05:de:99:da: d0:24:72:43:e6:2f:0d:bb:d2:2a:a9:ad:a8:08:7b: ca:38:42:2a:93:94:84:cf:ca:05:e9:06:f4:9c:bb: 0e:7a:f1:67:0f:fc:f3:31:d3:e8:4c:fc:e2:70:83: b9:61:3e:df:61:d8:69:d3:f7:b9:3c:f1:1c:bb:d8: 33:d5:69:32:33:56:5a:22:2b:f8:42:00:10:f5:21: 0b:2f:88:58:15:63:4d:6e:a9:4b:bf:c1:1e:b5:75: b3:95:39:d0:b9:f4:ec:23:c6:c7:c1:4d:07:8e:41: d2:4b:fc:79:6e:05:69:6a:34:4d:b2:ec:9d:58:00: 51:03:df:29:af:fd:3a:4c:ec:94:d0:a4:8b:5e:c3: ee:01:a2:7d:14:23:25:16:a8:0f:7c:d1:eb:14:77: ff:a2:3c:c2:dc:d4:a4:c7:3a:2a:be:c2:62:22:7d: 70:5f:ff:16:cf:bd:99:5a:49:59:06:9c:80:87:4a: 3b:96:97:e7:33:c8:e9:7a:c7:45:50:7c:71:57:77: 07:5b:bb:ca:0d:74:0d:62:69:91:fa:22:28:7c:a2: a1:a3:e7:31:b4:f7:e5:ef:db:85:73:d3:d1:46:68: 34:f1:ba:2e:d8:3e:93:49:60:9d:c6:86:dd:7e:5c: d1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CA:91:7F:3F:FD:32:7C:AD:89:EC:73:F1:92:F3:E9:FD:76:0A:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:27:9b:1d:18:58:66:2e:b1:cb:3d:6c:20:4e:99:98:d3:1d: 18:d5:22:70:07:e2:ce:83:6a:04:f8:f9:48:6a:8a:77:ac:61: 0e:0c:5b:7a:17:41:9a:dd:2a:b4:cb:d9:a8:ff:81:02:ab:bb: 6a:5a:fa:ed:aa:38:8a:8e:43:28:62:5e:40:43:5d:a1:3f:71: d4:64:b3:64:e4:71:6f:f2:81:cc:bf:e9:8a:97:46:35:76:19: 72:46:47:8f:e8:10:6a:ef:2d:fe:24:36:9b:85:37:a8:13:26: f9:ff:36:78:f2:88:47:23:8a:61:9a:6c:58:2e:88:96:f3:ab: d6:dc:d3:4b:d9:b8:2d:d2:4e:05:e5:3b:04:3a:f9:cd:1c:95: e7:30:2d:6a:13:1c:da:7d:87:b9:17:52:83:9b:e8:fe:38:b4: fc:88:24:d9:04:79:b3:0c:3d:75:b2:b1:64:04:2f:06:6a:c3: 0a:83:04:ca:ff:19:1d:8c:42:5e:15:2d:26:bf:50:14:48:e7: 88:d3:61:05:97:90:cf:80:ad:73:33:13:c2:30:68:5a:a3:2a: 92:81:48:f7:5c:19:e9:3b:8d:5e:da:10:00:2c:e3:7d:4d:ae: 09:94:8c:46:9a:b7:7d:4a:01:9b:3e:9b:99:6f:df:b5:d2:bb: 82:78:32:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzZnNeDVTTQWGhPDVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk OWZhZDk0MjEtMGJiOS00MzljLTlmNjAtY2FkMWJiOWJiNTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AvbxjQCp8qtrQXemdrQJHJD5i8Nu9Iqqa2o CHvKOEIqk5SEz8oF6Qb0nLsOevFnD/zzMdPoTPzicIO5YT7fYdhp0/e5PPEcu9gz 1WkyM1ZaIiv4QgAQ9SELL4hYFWNNbqlLv8EetXWzlTnQufTsI8bHwU0HjkHSS/x5 bgVpajRNsuydWABRA98pr/06TOyU0KSLXsPuAaJ9FCMlFqgPfNHrFHf/ojzC3NSk xzoqvsJiIn1wX/8Wz72ZWklZBpyAh0o7lpfnM8jpesdFUHxxV3cHW7vKDXQNYmmR +iIofKKho+cxtPfl79uFc9PRRmg08bou2D6TSWCdxobdflzRzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjKkX8//TJ8rYnsc/GS8+n9dgodMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvNTcyZDQ1ZTYtNmEzMi0z MGRlLWE2ZTYtYzQyMTQzODk5ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMnmx0YWGYuscs9bCBOmZjTHRjVInAH4s6DagT4+UhqinesYQ4MW3oX QZrdKrTL2aj/gQKru2pa+u2qOIqOQyhiXkBDXaE/cdRks2TkcW/ygcy/6YqXRjV2 GXJGR4/oEGrvLf4kNpuFN6gTJvn/NnjyiEcjimGabFguiJbzq9bc00vZuC3STgXl OwQ6+c0clecwLWoTHNp9h7kXUoOb6P44tPyIJNkEebMMPXWysWQELwZqwwqDBMr/ GR2MQl4VLSa/UBRI54jTYQWXkM+ArXMzE8IwaFqjKpKBSPdcGek7jV7aEAAs431N rgmUjEaat31KAZs+m5lv37XSu4J4MpU= -----END CERTIFICATE-----Generated at Mon Mar 2 07:33:35 2026 by rpki-client