$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa File: 1d07058c-91e1-3e8c-b855-66b4e81e6476.roa (raw, json) Hash identifier: l1+tfH6/kph5iOb1V0ZcYbNi+Tq1ZrNhNpKXzGBgBmE= Subject key identifier: 07:28:24:B3:1C:15:BF:7A:10:91:71:34:B1:1C:E9:0F:4A:EB:20:B9 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584E94EA56FD59EE709E4E8F55C0 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 14618 IP address blocks: 170.225.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:56:fd:59:ee:70:9e:4e:8f:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=6e840666-c515-41a3-a66a-6a3d3d5f3ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:03:ed:83:62:fb:09:e7:86:74:c5:66:ee:e8: e8:75:a1:4d:45:06:90:4f:c4:b8:11:80:f0:4c:44: 00:25:40:66:e3:1f:0e:3e:4a:bd:6e:2f:77:39:a9: 3e:5a:74:ba:c8:70:c9:4d:d7:2f:3e:94:9a:5f:3f: 0d:f9:0d:f7:2a:d6:cc:ae:55:f1:23:32:57:d9:cf: 2b:e1:a1:61:60:f8:df:1d:a4:4d:1b:e8:a1:0d:9a: db:55:7a:88:10:10:fb:53:5f:c8:7c:48:20:a6:39: 85:0a:aa:e8:87:7f:ec:ff:35:c2:74:09:de:34:60: f3:b9:22:ae:12:91:53:53:b5:90:6b:9e:0e:b1:68: 30:00:bd:1f:8d:e1:8e:ca:39:c8:17:f0:9a:0d:d2: f7:bf:35:c4:a3:c4:05:f2:06:3f:38:09:b2:41:af: d2:bc:4b:08:e6:fa:2c:5c:ee:e0:9b:ba:1e:a5:62: c7:de:38:a3:4c:04:9a:da:17:3a:48:3c:3b:88:03: 52:d2:3c:38:86:bf:c9:22:a9:b9:69:23:83:10:39: c0:68:bf:64:08:63:af:24:4b:05:3d:29:d6:13:1b: de:86:ca:22:5c:39:79:63:7f:50:cb:34:49:bd:3e: 90:9f:4a:7a:6b:4e:32:92:7c:92:65:7c:82:55:38: 39:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:28:24:B3:1C:15:BF:7A:10:91:71:34:B1:1C:E9:0F:4A:EB:20:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/1d07058c-91e1-3e8c-b855-66b4e81e6476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:61:c9:b4:a6:e8:be:4e:a0:b5:d7:1d:26:e9:a4:aa:2b:fa: fb:4b:4e:22:5e:bf:be:cd:8b:15:55:b6:be:b2:b1:b7:94:22: be:3b:55:10:76:80:38:37:c5:1b:92:6a:57:e1:e1:85:6b:ea: c2:49:34:a2:76:ca:7d:43:02:e0:4a:a0:56:ce:85:98:b0:fc: 59:98:30:e2:bc:ae:4c:a2:fb:9c:0d:66:6f:04:ba:89:4d:e6: d2:49:86:5a:f4:b2:b9:2d:dc:65:12:46:e2:89:13:7a:ee:2f: b7:05:da:ce:bb:e4:67:b2:ac:fd:32:9c:18:df:76:a7:d2:2a: 24:fd:48:b0:b2:cf:41:0d:8d:5b:26:f2:db:70:24:6d:21:eb: 49:1c:26:78:d4:09:15:8a:97:f5:fd:e9:66:ef:3b:ae:26:5d: ae:9f:0c:67:de:9c:20:10:c7:5e:bc:7f:cc:cf:3f:bd:a6:25: 2f:e1:25:71:c0:b7:01:4b:dc:8a:b5:9f:c0:48:9d:d2:e3:0c: f7:99:3a:9c:5a:49:f1:3f:f7:db:68:be:83:a7:80:73:52:ad: 87:d3:3a:34:c0:5d:07:a7:82:be:b5:3c:6b:0f:e6:e9:e9:c4: b0:f8:92:09:eb:0c:da:d9:ee:71:25:aa:19:57:fe:e2:99:c2: 3e:c3:b4:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6lb9We5wnk6PVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk NmU4NDA2NjYtYzUxNS00MWEzLWE2NmEtNmEzZDNkNWYzYWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigPtg2L7CeeGdMVm7ujodaFNRQaQT8S4EYDw TEQAJUBm4x8OPkq9bi93Oak+WnS6yHDJTdcvPpSaXz8N+Q33KtbMrlXxIzJX2c8r 4aFhYPjfHaRNG+ihDZrbVXqIEBD7U1/IfEggpjmFCqroh3/s/zXCdAneNGDzuSKu EpFTU7WQa54OsWgwAL0fjeGOyjnIF/CaDdL3vzXEo8QF8gY/OAmyQa/SvEsI5vos XO7gm7oepWLH3jijTASa2hc6SDw7iANS0jw4hr/JIqm5aSODEDnAaL9kCGOvJEsF PSnWExvehsoiXDl5Y39QyzRJvT6Qn0p6a04yknySZXyCVTg5DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcoJLMcFb96EJFxNLEc6Q9K6yC5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvMWQwNzA1OGMtOTFlMS0z ZThjLWI4NTUtNjZiNGU4MWU2NDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlhybSm6L5OoLXXHSbppKor+vtLTiJev77NixVVtr6ysbeUIr47VRB2 gDg3xRuSalfh4YVr6sJJNKJ2yn1DAuBKoFbOhZiw/FmYMOK8rkyi+5wNZm8EuolN 5tJJhlr0srkt3GUSRuKJE3ruL7cF2s675GeyrP0ynBjfdqfSKiT9SLCyz0ENjVsm 8ttwJG0h60kcJnjUCRWKl/X96WbvO64mXa6fDGfenCAQx168f8zPP72mJS/hJXHA twFL3Iq1n8BIndLjDPeZOpxaSfE/99tovoOngHNSrYfTOjTAXQengr61PGsP5unp xLD4kgnrDNrZ7nElqhlX/uKZwj7DtOE= -----END CERTIFICATE-----Generated at Thu Jul 23 22:36:18 2026 by rpki-client