$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/137278aa-f1ae-3acb-b058-9033b56e7bc1.roa File: 137278aa-f1ae-3acb-b058-9033b56e7bc1.roa (raw, json) Hash identifier: FJvM5PBz/gDCg6V4WrsAbzvmwUBhSSm4MlFTPVULPDc= Subject key identifier: A8:A2:7F:D3:63:63:04:7A:97:19:F1:F4:C8:23:F2:31:E7:7E:82:E0 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584ADA9BC240EA88516B4BB12D00 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/137278aa-f1ae-3acb-b058-9033b56e7bc1.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 170.225.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c2:40:ea:88:51:6b:4b:b1:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=05b05baa-1be7-4cc2-bfa2-050991cf8082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e0:42:1f:29:42:d1:a5:98:21:06:02:22:7e: ff:a7:44:15:e8:fe:80:be:b0:3d:3b:1b:0c:64:24: 57:d3:d6:8e:41:a4:02:18:bf:07:67:3f:70:4c:6a: 81:ec:a6:9c:e9:8d:c4:8f:0f:bb:2b:ba:41:16:b7: bb:c0:35:c4:13:24:41:84:c2:71:34:f1:ce:4d:ec: 2a:5a:cc:64:d9:93:f5:38:c6:5c:9a:90:d2:5b:18: df:5b:ef:66:a3:f8:7d:89:b8:92:63:38:dd:f0:a1: 8a:c9:c2:fd:3c:d2:80:62:92:9c:e2:e5:d0:91:f5: fe:65:02:d9:7a:6d:84:0a:5f:63:8c:50:ce:69:ec: 81:ad:c9:f2:ce:37:ea:76:f8:36:6a:c2:72:4b:1a: d6:ca:f9:c2:22:18:01:e1:78:94:31:81:9b:3f:37: 23:04:b3:89:4f:27:47:6b:d1:d3:41:13:ce:ca:98: 97:81:e8:ea:41:1c:23:2a:c7:dc:0a:fe:da:07:38: ee:5c:8a:94:49:40:22:08:96:61:d7:e7:23:ef:72: ce:47:c4:cd:31:56:4d:61:2b:de:45:f4:c9:47:4e: a8:6a:27:fe:04:99:45:95:8b:55:7d:e6:b7:df:74: 72:55:3d:9c:1e:d1:e2:cb:20:93:91:09:b7:1a:c8: c7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A2:7F:D3:63:63:04:7A:97:19:F1:F4:C8:23:F2:31:E7:7E:82:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/137278aa-f1ae-3acb-b058-9033b56e7bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c0:6a:35:1d:8f:7f:f7:f3:5c:b7:7f:d1:b4:93:9d:d8:cf: c2:37:c2:e3:7e:d9:91:75:1e:88:57:7a:c2:db:14:bf:3b:fc: 10:c8:6c:9b:ea:e3:ca:b8:10:c1:33:0c:03:3e:2a:58:52:5f: cd:cc:4c:b2:49:47:b2:6d:cc:11:1a:73:36:4b:0e:cb:21:fc: e7:88:c2:27:28:9f:b9:5e:21:f9:29:33:63:51:86:e4:48:de: 5b:3b:46:41:31:aa:d0:8c:8a:0d:1b:d4:22:fe:89:6c:95:72: 09:37:f8:3e:e3:c4:74:4c:11:02:1c:e6:9b:b9:6f:e2:df:ed: ed:0a:5a:e3:19:3c:33:93:b6:56:bd:74:22:8d:a7:eb:53:f2: ed:84:63:6a:e8:11:df:48:03:0b:35:65:98:ab:a6:8f:8d:f0: 4a:76:6f:85:ed:02:c8:3a:ad:50:81:90:2f:87:92:0f:66:8c: 46:18:c7:65:5b:dc:08:de:d3:04:03:b7:42:29:e6:50:87:12: ea:93:7c:1a:fa:48:8d:6b:d5:31:99:c9:32:cf:61:2e:ce:46: d4:73:b7:e6:fe:bc:30:af:b4:95:b4:89:d9:c9:9e:f7:ec:d3: ea:a2:6d:02:a5:bf:7c:a3:1f:0a:18:4f:e8:6d:04:74:bc:46: 06:3d:14:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8JA6ohRa0uxLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk MDViMDViYWEtMWJlNy00Y2MyLWJmYTItMDUwOTkxY2Y4MDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+BCHylC0aWYIQYCIn7/p0QV6P6AvrA9OxsM ZCRX09aOQaQCGL8HZz9wTGqB7Kac6Y3Ejw+7K7pBFre7wDXEEyRBhMJxNPHOTewq Wsxk2ZP1OMZcmpDSWxjfW+9mo/h9ibiSYzjd8KGKycL9PNKAYpKc4uXQkfX+ZQLZ em2ECl9jjFDOaeyBrcnyzjfqdvg2asJySxrWyvnCIhgB4XiUMYGbPzcjBLOJTydH a9HTQRPOypiXgejqQRwjKsfcCv7aBzjuXIqUSUAiCJZh1+cj73LOR8TNMVZNYSve RfTJR06oaif+BJlFlYtVfea333RyVT2cHtHiyyCTkQm3GsjHqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiif9NjYwR6lxnx9Mgj8jHnfoLgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvMTM3Mjc4YWEtZjFhZS0z YWNiLWIwNTgtOTAzM2I1NmU3YmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbAajUdj3/381y3f9G0k53Yz8I3wuN+2ZF1HohXesLbFL87/BDIbJvq 48q4EMEzDAM+KlhSX83MTLJJR7JtzBEaczZLDssh/OeIwicon7leIfkpM2NRhuRI 3ls7RkExqtCMig0b1CL+iWyVcgk3+D7jxHRMEQIc5pu5b+Lf7e0KWuMZPDOTtla9 dCKNp+tT8u2EY2roEd9IAws1ZZirpo+N8Ep2b4XtAsg6rVCBkC+Hkg9mjEYYx2Vb 3Aje0wQDt0Ip5lCHEuqTfBr6SI1r1TGZyTLPYS7ORtRzt+b+vDCvtJW0idnJnvfs 0+qibQKlv3yjHwoYT+htBHS8RgY9FAA= -----END CERTIFICATE-----Generated at Sat Aug 23 09:09:28 2025 by rpki-client