$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa File: f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa (raw, json) Hash identifier: hrY/33ij6TVjjlNAKqj3eJIKsG+2ZcPLRrwU3kM67Ng= Subject key identifier: F1:00:97:5C:5A:B5:6A:D3:F0:D9:E1:A9:68:01:47:F7:25:1E:9B:4A Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584BBB758CBEA139661301BC8B80 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 14618 IP address blocks: 170.225.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:8c:be:a1:39:66:13:01:bc:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=e24dcca5-3052-4b0e-b27a-b6599045301c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:59:1e:76:6f:26:fb:b3:8e:33:f8:b0:c6:ec: 8e:7b:74:e0:db:9e:11:d2:14:bb:99:03:48:75:1c: b7:8c:b1:4e:8e:64:1f:c9:53:2c:e8:26:d9:1b:e2: 5c:a6:2e:26:f4:1e:5e:c9:ba:9e:c9:cd:9f:f7:fe: 28:b1:5d:9e:d4:50:75:a2:29:8e:b3:08:e6:7a:d9: 54:a2:47:7e:64:60:b4:4a:7b:b2:47:8d:44:6f:5c: f5:45:b4:15:28:33:00:2b:1d:0e:d0:33:b3:68:4a: 6c:09:23:20:a0:2d:99:b9:0e:1b:7e:39:ab:eb:06: 30:a2:f2:7d:c1:c3:1e:01:fc:57:96:95:7e:ca:75: 9f:ee:6c:8e:0a:5b:55:76:12:fc:94:f7:ff:78:d5: cb:1c:3f:05:bf:1a:b8:ed:45:ef:31:5e:a2:ab:12: b3:db:45:6a:44:cb:67:12:4b:db:2e:e3:f0:ae:a4: 46:99:09:fa:08:cc:63:48:e8:cc:e0:8c:af:eb:34: 72:dc:cc:80:fb:cb:62:56:c6:a1:b8:26:c2:41:d1: 04:a4:34:ef:13:81:2c:26:c7:59:74:b3:19:37:3b: df:f0:fe:be:6d:7c:9f:86:3b:2d:94:75:55:c1:cb: 23:d4:0b:05:da:93:7e:9d:35:ab:87:29:21:24:2f: 05:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:00:97:5C:5A:B5:6A:D3:F0:D9:E1:A9:68:01:47:F7:25:1E:9B:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:61:42:98:34:f9:13:e9:c0:08:22:a5:f1:f0:d1:d5:65:14: 5e:e4:64:6c:4b:3f:26:ce:75:4f:b2:b0:79:60:fc:da:29:8c: 04:ad:fc:f2:f5:2f:d8:84:c2:b6:27:a7:98:39:cd:14:b6:5c: 92:c6:6f:ac:1e:d2:8a:f7:e3:f1:61:8a:80:9a:42:6c:49:9b: 47:cc:5d:9f:9c:cf:96:ca:f7:a6:cd:c8:02:65:9b:74:1c:11: c3:61:60:44:76:50:44:a5:51:32:5f:2e:29:66:e9:6d:fa:a8: 1c:85:21:2e:35:8a:62:9f:f2:10:2b:f3:eb:9d:f5:b9:4b:78: 6a:9a:f4:ed:28:c8:55:78:a3:6c:d2:4d:9b:54:4d:15:e9:fa: 87:94:ee:63:3d:91:97:8b:80:91:5a:f5:c2:d9:37:73:9a:ae: f6:60:e8:c5:50:50:d4:0e:e7:60:1b:52:b8:9d:c2:4e:89:3b: 95:b3:45:4a:22:ad:8b:fa:d7:20:7e:7f:ba:f3:c1:19:81:a0: e4:47:f9:4b:08:f3:0d:db:33:3b:a5:5c:7d:ef:f1:58:75:c5: bd:8a:44:b1:8e:4f:c0:0e:df:03:b7:f7:05:d7:c8:0d:7a:8a: 24:19:e4:76:c2:cf:7c:69:94:ff:9c:63:29:c6:c1:e8:db:f8: 9c:d6:15:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYy+oTlmEwG8i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTI0ZGNjYTUtMzA1Mi00YjBlLWIyN2EtYjY1OTkwNDUzMDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulkedm8m+7OOM/iwxuyOe3Tg254R0hS7mQNI dRy3jLFOjmQfyVMs6CbZG+Jcpi4m9B5eybqeyc2f9/4osV2e1FB1oimOswjmetlU okd+ZGC0SnuyR41Eb1z1RbQVKDMAKx0O0DOzaEpsCSMgoC2ZuQ4bfjmr6wYwovJ9 wcMeAfxXlpV+ynWf7myOCltVdhL8lPf/eNXLHD8Fvxq47UXvMV6iqxKz20VqRMtn EkvbLuPwrqRGmQn6CMxjSOjM4Iyv6zRy3MyA+8tiVsahuCbCQdEEpDTvE4EsJsdZ dLMZNzvf8P6+bXyfhjstlHVVwcsj1AsF2pN+nTWrhykhJC8FFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEAl1xatWrT8NnhqWgBR/clHptKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvZjU5MWMzZjgtZmU2Mi0z Y2VhLThiNGUtNDZlMmVjYTMyMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdhQpg0+RPpwAgipfHw0dVlFF7kZGxLPybOdU+ysHlg/NopjASt/PL1 L9iEwrYnp5g5zRS2XJLGb6we0or34/FhioCaQmxJm0fMXZ+cz5bK96bNyAJlm3Qc EcNhYER2UESlUTJfLilm6W36qByFIS41imKf8hAr8+ud9blLeGqa9O0oyFV4o2zS TZtUTRXp+oeU7mM9kZeLgJFa9cLZN3OarvZg6MVQUNQO52AbUridwk6JO5WzRUoi rYv61yB+f7rzwRmBoORH+UsI8w3bMzulXH3v8Vh1xb2KRLGOT8AO3wO39wXXyA16 iiQZ5HbCz3xplP+cYynGwejb+JzWFRY= -----END CERTIFICATE-----Generated at Wed Nov 5 06:32:02 2025 by rpki-client