$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa File: 5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa (raw, json) Hash identifier: wZ2PpghvZmxLH2EyrhElxWXLwW5D09XfvUoHd0HL4CU= Subject key identifier: 90:A7:C8:C5:2D:83:06:60:07:25:CA:40:69:2E:37:4E:07:40:62:18 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584F3CE29A01114CA1312F4C8C80 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 170.225.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:9a:01:11:4c:a1:31:2f:4c:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=7c275d9a-397d-48ed-a717-12d23dcade02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:31:cd:b4:82:d3:3b:fa:f3:8b:ba:c9:8d:e1: ab:e5:88:7d:a1:f1:83:ed:24:fe:2f:9f:34:96:b6: 03:04:92:c1:e1:52:f9:38:e4:10:56:3c:32:ad:0f: 2f:43:1d:a8:01:32:db:05:85:37:c8:b1:4a:b6:c6: 4a:aa:f0:f4:43:ad:6b:4b:bc:9e:d3:8a:70:b4:8f: 84:66:8d:f9:29:4c:52:80:b7:16:d2:21:df:95:c1: 40:0f:83:e3:6f:06:32:c1:18:8a:2e:c1:89:21:64: 7d:51:53:ea:0d:b4:ac:a8:06:74:6d:d1:f1:ab:6d: 61:9c:46:52:04:3a:37:f2:4d:06:36:9d:b9:03:78: 10:93:b3:cc:97:1f:d7:8a:cf:63:d0:44:f9:1c:df: 69:12:d5:df:e3:35:42:a9:b6:11:ff:87:0b:58:6b: 1f:c5:66:3b:9d:cd:13:a6:20:bc:f9:d4:85:73:e1: 20:0c:8d:8e:2b:41:a4:c0:6e:bd:b5:c3:b6:92:84: db:8b:21:ae:5e:c8:c4:75:b7:22:d4:03:14:ca:4f: bb:bb:04:bc:79:09:3a:ff:21:1e:2e:cf:aa:1b:6d: 14:02:df:08:7b:c8:2b:98:ce:69:ba:1a:1e:69:81: f6:89:56:5a:8d:e9:bd:8a:bc:2f:67:36:80:2e:22: 25:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A7:C8:C5:2D:83:06:60:07:25:CA:40:69:2E:37:4E:07:40:62:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/5a7f92be-66b2-3204-8a8f-751f364e7c5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:ba:e5:df:2d:1d:15:3a:db:1f:60:d6:dd:2a:06:91:81:7b: e7:0b:60:0d:d7:0a:d8:ba:5b:02:c9:88:92:e9:59:0f:c1:d6: 85:a4:22:df:f0:1d:58:df:8c:9e:cb:86:b5:e9:6c:1f:9d:2d: b3:3e:80:3c:24:cd:fe:35:ae:a1:61:2e:81:07:63:74:a4:be: ab:6f:d3:6e:8f:bc:aa:b9:37:81:b0:01:40:8c:da:43:c9:da: 1c:3e:8b:2e:c9:8d:ef:76:f2:0c:60:48:6f:a8:73:33:cd:98: 85:1c:be:d9:2e:29:f2:f7:6e:95:5c:7f:6c:74:7d:36:c8:b8: 65:fb:f0:10:94:3f:3d:f6:cb:a7:a2:4d:23:89:c8:79:4b:16: 98:a9:d4:2b:bc:f0:91:10:e4:b9:d3:40:41:95:20:0d:9a:3a: 39:8b:69:bc:83:eb:95:b4:59:43:ee:05:24:b5:77:79:2b:d6: 7c:d6:4e:a5:73:91:d6:ad:bb:fc:f1:b9:89:ad:7d:3d:58:52: 0c:4c:8b:fe:ec:53:e5:65:d4:dc:03:4e:42:2b:54:8c:e1:20: 9c:28:34:f7:63:b9:f8:68:13:1d:07:30:e6:5e:8f:76:8c:3d: 91:b8:f2:a7:dc:34:89:5f:2b:02:88:13:8c:c0:51:93:28:40: 76:6f:01:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884poBEUyhMS9MjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk N2MyNzVkOWEtMzk3ZC00OGVkLWE3MTctMTJkMjNkY2FkZTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTHNtILTO/rzi7rJjeGr5Yh9ofGD7ST+L580 lrYDBJLB4VL5OOQQVjwyrQ8vQx2oATLbBYU3yLFKtsZKqvD0Q61rS7ye04pwtI+E Zo35KUxSgLcW0iHflcFAD4PjbwYywRiKLsGJIWR9UVPqDbSsqAZ0bdHxq21hnEZS BDo38k0GNp25A3gQk7PMlx/Xis9j0ET5HN9pEtXf4zVCqbYR/4cLWGsfxWY7nc0T piC8+dSFc+EgDI2OK0GkwG69tcO2koTbiyGuXsjEdbci1AMUyk+7uwS8eQk6/yEe Ls+qG20UAt8Ie8grmM5puhoeaYH2iVZajem9irwvZzaALiIl6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCnyMUtgwZgByXKQGkuN04HQGIYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvNWE3ZjkyYmUtNjZiMi0z MjA0LThhOGYtNzUxZjM2NGU3YzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJa65d8tHRU62x9g1t0qBpGBe+cLYA3XCti6WwLJiJLpWQ/B1oWkIt/w HVjfjJ7LhrXpbB+dLbM+gDwkzf41rqFhLoEHY3Skvqtv026PvKq5N4GwAUCM2kPJ 2hw+iy7Jje928gxgSG+oczPNmIUcvtkuKfL3bpVcf2x0fTbIuGX78BCUPz32y6ei TSOJyHlLFpip1Cu88JEQ5LnTQEGVIA2aOjmLabyD65W0WUPuBSS1d3kr1nzWTqVz kdatu/zxuYmtfT1YUgxMi/7sU+Vl1NwDTkIrVIzhIJwoNPdjufhoEx0HMOZej3aM PZG48qfcNIlfKwKIE4zAUZMoQHZvAVQ= -----END CERTIFICATE-----Generated at Mon Sep 21 12:40:45 2026 by rpki-client