$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa File: f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa (raw, json) Hash identifier: meQBHVICXE/8wLdxLYr/KJs8GaUUbDJ5cqEj8aMpGOk= Subject key identifier: 40:1F:59:84:76:9E:5C:88:52:94:3A:B3:BB:02:26:D4:14:71:35:B8 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584D7CCFD4BB3096613A56E66080 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 14618 IP address blocks: 170.225.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:d4:bb:30:96:61:3a:56:e6:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=2972708a-6cda-4231-b518-14f2210b9149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f9:87:73:6d:ea:c0:94:90:3d:f3:39:c6:14: 81:9e:26:00:ed:df:16:04:d7:de:7c:6b:08:c0:fe: 9f:1c:6b:0d:48:2d:31:b7:e9:4b:7a:a1:ce:da:89: 9e:9e:aa:6b:b8:ff:14:b4:fc:d0:48:1e:45:fa:44: dd:d6:78:0d:4f:54:da:52:ec:f9:35:0e:ff:78:91: fd:97:00:54:2f:1b:ea:04:eb:e3:55:63:be:6c:a5: fc:69:b8:b9:2b:62:ac:0a:4b:48:20:a6:af:0c:e6: a2:4d:6c:62:32:22:a4:e0:ab:db:fc:d3:1c:2f:86: c8:9e:bf:d1:d8:ad:ad:6f:9d:99:1d:ca:53:c9:c8: c9:a2:83:e9:40:5e:f8:c2:0a:6f:74:04:8b:c5:48: fd:4d:8c:5e:10:45:5d:61:5a:d5:5c:16:8f:fc:1f: 5a:55:b7:ef:63:17:6d:1f:9c:9b:6a:d8:8f:e3:70: ca:49:51:fd:10:59:48:df:ad:82:1e:ad:d4:1f:c7: c3:a5:8c:79:49:f4:9c:e3:8f:ec:05:28:b6:8e:b2: e0:08:dc:63:b3:88:02:53:11:7c:ae:91:f8:51:91: 26:e8:fd:91:16:a7:15:4c:d0:d6:b7:5a:7f:26:a7: 3c:f6:5e:1c:99:71:b7:a7:38:c3:84:9d:de:e1:1c: c4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1F:59:84:76:9E:5C:88:52:94:3A:B3:BB:02:26:D4:14:71:35:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:04:44:76:f4:40:29:ad:aa:f1:09:4f:c6:27:77:6d:4e:b8: c5:64:4d:f6:b7:ab:7c:15:25:0a:38:8b:c0:78:03:a1:78:95: 03:49:52:94:f5:4a:34:e2:ec:6f:6e:d9:e2:73:5f:a0:9c:7b: 5a:48:d6:6d:04:1a:bf:ff:ec:1f:2f:e4:37:82:36:83:d0:e2: 6e:e1:bb:a9:81:21:93:8d:f6:a0:51:40:d2:d4:d8:98:e4:f1: 14:8c:0d:e1:1b:52:b7:98:32:ec:91:04:cb:17:5d:b3:70:39: 83:ff:6f:85:61:e9:0b:84:74:49:f5:aa:bf:fd:e3:e4:da:b4: a1:14:5d:31:6b:45:e4:bc:c5:01:ba:a5:41:78:0b:5d:25:61: a3:db:fe:41:b6:32:e0:cd:67:f3:b2:ba:b3:5f:59:45:86:21: d5:7e:b7:43:9f:ff:84:98:1c:c7:6f:c0:e9:00:92:86:1d:cd: 51:82:e7:8d:04:92:6c:02:69:4c:37:a9:cc:7c:6e:1e:80:92: 1a:9b:b0:05:c1:fc:17:bc:75:e9:a3:2d:af:4d:00:67:b1:50: 7d:4c:aa:11:f9:16:ae:3a:ff:99:48:84:fb:56:cb:11:16:c7: b3:33:61:66:d6:e3:e1:8c:fd:9c:06:0a:dc:92:7b:3f:86:21: 79:e4:00:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z9S7MJZhOlbmYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk Mjk3MjcwOGEtNmNkYS00MjMxLWI1MTgtMTRmMjIxMGI5MTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPmHc23qwJSQPfM5xhSBniYA7d8WBNfefGsI wP6fHGsNSC0xt+lLeqHO2omenqpruP8UtPzQSB5F+kTd1ngNT1TaUuz5NQ7/eJH9 lwBULxvqBOvjVWO+bKX8abi5K2KsCktIIKavDOaiTWxiMiKk4Kvb/NMcL4bInr/R 2K2tb52ZHcpTycjJooPpQF74wgpvdASLxUj9TYxeEEVdYVrVXBaP/B9aVbfvYxdt H5ybatiP43DKSVH9EFlI362CHq3UH8fDpYx5SfSc44/sBSi2jrLgCNxjs4gCUxF8 rpH4UZEm6P2RFqcVTNDWt1p/Jqc89l4cmXG3pzjDhJ3e4RzETQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAfWYR2nlyIUpQ6s7sCJtQUcTW4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvZjU5MWMzZjgtZmU2Mi0z Y2VhLThiNGUtNDZlMmVjYTMyMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIERHb0QCmtqvEJT8Ynd21OuMVkTfa3q3wVJQo4i8B4A6F4lQNJUpT1 SjTi7G9u2eJzX6Cce1pI1m0EGr//7B8v5DeCNoPQ4m7hu6mBIZON9qBRQNLU2Jjk 8RSMDeEbUreYMuyRBMsXXbNwOYP/b4Vh6QuEdEn1qr/94+TatKEUXTFrReS8xQG6 pUF4C10lYaPb/kG2MuDNZ/OyurNfWUWGIdV+t0Of/4SYHMdvwOkAkoYdzVGC540E kmwCaUw3qcx8bh6AkhqbsAXB/Be8demjLa9NAGexUH1MqhH5Fq46/5lIhPtWyxEW x7MzYWbW4+GM/ZwGCtySez+GIXnkAIY= -----END CERTIFICATE-----Generated at Sun Apr 19 08:55:28 2026 by rpki-client