$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/137278aa-f1ae-3acb-b058-9033b56e7bc1.roa File: 137278aa-f1ae-3acb-b058-9033b56e7bc1.roa (raw, json) Hash identifier: TjR73aOmxI4ZETEZOWeBFPMwdTVCazRvjf9SMDaw45U= Subject key identifier: A8:AF:33:68:72:F0:C5:D3:10:4A:2A:59:0B:51:FD:9F:69:15:EB:17 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584E5D14AB98C3A99E3932A5E440 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/137278aa-f1ae-3acb-b058-9033b56e7bc1.roa Signing time: Thu 02 Jul 2026 09:00:12 +0000 ROA not before: Thu 02 Jul 2026 09:00:12 +0000 ROA not after: Wed 30 Sep 2026 09:00:12 +0000 asID: 16509 IP address blocks: 170.225.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5d:14:ab:98:c3:a9:9e:39:32:a5:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Jul 2 09:00:12 2026 GMT Not After : Sep 30 09:00:12 2026 GMT Subject: CN=aa76e657-4831-411a-8919-3c5ff0599b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:db:81:42:fb:0c:05:73:ec:1e:62:ae:b3:88: d8:36:cc:05:c6:ba:57:9c:7e:6b:be:39:a4:63:40: 59:80:30:3a:03:b7:0b:4f:40:a8:3b:6e:79:ce:dc: cb:8a:20:bc:29:0f:8a:c6:86:83:31:66:36:28:a6: c5:4b:31:67:f7:9f:46:e8:8f:3c:1a:91:13:88:da: a3:d6:fe:9e:46:2e:2e:b4:db:f1:ed:ce:9d:db:ec: e9:ce:5a:fb:88:27:3c:e7:41:fb:83:ee:38:cb:06: a5:e3:3f:ab:14:1b:56:01:49:15:89:8c:ff:52:85: 42:56:2c:13:8c:e6:bf:dc:c5:36:c1:e9:ce:b7:58: 7a:c9:8a:f1:39:e3:fe:d7:67:40:b0:c8:6d:f4:68: 15:ee:6b:5a:fd:20:33:cc:b7:f2:e6:1d:1b:73:8a: f4:f9:2b:dd:2d:c5:4c:0a:87:62:4f:20:72:26:99: 94:55:7f:aa:ae:48:23:f5:82:44:8e:a0:1e:4d:34: e4:58:5e:03:fc:47:22:68:ab:64:de:8d:3b:7a:98: d0:b1:cd:71:ae:d7:79:89:0d:b1:57:0b:60:b7:de: 38:16:b9:a0:03:26:5d:8e:35:6e:61:1d:73:69:46: dd:72:44:8f:88:e0:db:7b:fe:ab:65:3d:1b:ec:08: fa:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AF:33:68:72:F0:C5:D3:10:4A:2A:59:0B:51:FD:9F:69:15:EB:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/137278aa-f1ae-3acb-b058-9033b56e7bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:3a:56:9d:1d:ba:a7:39:87:bd:9d:04:44:59:50:99:8d:9b: e6:3f:35:6f:1a:62:cf:f1:fe:34:d5:98:72:8b:f5:c0:05:65: 72:21:37:e0:23:76:12:66:bd:4d:0b:62:5a:c6:06:e1:27:0a: 81:65:d4:66:dd:ac:cd:9a:fc:ca:29:78:86:e6:91:0e:18:a1: b5:d7:5c:2f:b2:0a:57:03:b2:ad:01:a3:7b:f4:3f:1f:26:22: e7:6d:02:8c:d8:cf:a9:2e:60:73:aa:35:df:44:72:e5:51:8e: 48:79:07:6b:6c:f8:e9:50:d4:29:34:28:80:aa:b8:f0:29:65: 0a:6a:8d:90:a4:34:97:71:f6:8b:ab:09:49:e2:8a:d1:0e:20: c3:67:29:bd:af:78:d3:fa:30:d1:42:8c:a0:91:22:ee:18:45: 05:02:f9:f3:1e:41:cb:70:d5:12:a8:7a:bb:0b:1b:ea:98:ce: b1:c4:21:78:61:55:da:36:9e:dd:57:68:16:ee:e6:bf:3f:55: 72:90:91:33:5e:5b:4b:fa:e0:f1:1c:97:84:e3:f7:bd:2a:21: 7a:c9:61:6d:47:c4:6d:3c:d6:4c:4a:a7:ad:bc:3b:84:82:3f: e5:79:a3:a3:8b:38:84:b1:4d:cb:4c:15:a2:8d:4d:3f:51:35: 8d:6d:86:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5dFKuYw6meOTKl5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk YWE3NmU2NTctNDgzMS00MTFhLTg5MTktM2M1ZmYwNTk5YjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtuBQvsMBXPsHmKus4jYNswFxrpXnH5rvjmk Y0BZgDA6A7cLT0CoO255ztzLiiC8KQ+KxoaDMWY2KKbFSzFn959G6I88GpETiNqj 1v6eRi4utNvx7c6d2+zpzlr7iCc850H7g+44ywal4z+rFBtWAUkViYz/UoVCViwT jOa/3MU2wenOt1h6yYrxOeP+12dAsMht9GgV7mta/SAzzLfy5h0bc4r0+SvdLcVM CodiTyByJpmUVX+qrkgj9YJEjqAeTTTkWF4D/EciaKtk3o07epjQsc1xrtd5iQ2x Vwtgt944FrmgAyZdjjVuYR1zaUbdckSPiODbe/6rZT0b7Aj6uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKivM2hy8MXTEEoqWQtR/Z9pFesXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvMTM3Mjc4YWEtZjFhZS0z YWNiLWIwNTgtOTAzM2I1NmU3YmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADc6Vp0duqc5h72dBERZUJmNm+Y/NW8aYs/x/jTVmHKL9cAFZXIhN+Aj dhJmvU0LYlrGBuEnCoFl1GbdrM2a/MopeIbmkQ4YobXXXC+yClcDsq0Bo3v0Px8m IudtAozYz6kuYHOqNd9EcuVRjkh5B2ts+OlQ1Ck0KICquPApZQpqjZCkNJdx9our CUniitEOIMNnKb2veNP6MNFCjKCRIu4YRQUC+fMeQctw1RKoersLG+qYzrHEIXhh Vdo2nt1XaBbu5r8/VXKQkTNeW0v64PEcl4Tj970qIXrJYW1HxG081kxKp628O4SC P+V5o6OLOISxTctMFaKNTT9RNY1thiY= -----END CERTIFICATE-----Generated at Fri Jul 24 13:40:07 2026 by rpki-client