$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa File: 572d45e6-6a32-30de-a6e6-c4214389980b.roa (raw, json) Hash identifier: IzM/sW4ZMZCW3YP2djjdvEFFM4gDTmaWdd/qR5zdxAM= Subject key identifier: 3A:54:CE:41:17:75:57:6F:CA:44:5A:D1:81:2F:65:E0:22:A2:E8:3F Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584E9A7FCDD3BA3C86E1DC2F7F80 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 14618 IP address blocks: 170.225.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:cd:d3:ba:3c:86:e1:dc:2f:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=fc2797b1-3dcd-4d7b-ba36-5f1c68c313c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:18:c1:1a:94:f7:63:c6:d9:85:65:1d:c6:c4: 71:cb:97:57:c2:a3:29:26:8f:3c:d1:f7:30:72:ae: 03:03:98:8b:10:6c:47:cb:8e:47:73:39:28:e9:32: 7c:04:4b:d4:bb:2f:c8:0b:f0:0e:ca:78:6f:97:e1: e9:41:c6:0a:af:a5:d4:b5:91:e5:ad:67:94:ff:37: bd:e4:93:74:f5:75:3e:71:e0:e8:ea:e6:33:a0:dd: d4:97:6c:62:c2:45:bb:d0:3a:9b:7e:30:78:50:6c: ce:a6:3d:14:72:00:6c:33:72:c9:55:04:a6:3d:a1: de:cc:5e:9d:9a:d4:36:8a:5c:47:c8:da:a7:8c:05: 81:ca:70:f2:06:c9:2a:09:a9:8d:a0:89:c5:79:80: a8:74:a0:a4:82:84:6e:e1:6c:01:1d:5c:64:7a:62: ae:d5:5b:9d:f0:62:f6:a5:9a:99:b0:31:27:e9:9f: 0b:28:47:6b:92:c7:c4:1d:cf:05:89:48:41:72:4d: ad:5d:1a:1b:e7:e9:f3:c5:2b:00:e1:15:0e:b3:6e: 57:91:b6:aa:8c:3a:1b:96:f6:e4:73:7a:d5:86:c4: 6f:ec:6a:db:07:f5:ca:56:55:df:f7:1a:9b:92:06: be:c2:cb:37:16:5d:77:ab:80:d5:06:f8:77:46:55: c9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:54:CE:41:17:75:57:6F:CA:44:5A:D1:81:2F:65:E0:22:A2:E8:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:cf:9a:b2:c8:ca:51:7a:03:02:f2:e7:f8:06:29:f7:3c:f3: 0a:42:f8:33:ad:bb:5a:f7:2c:4d:91:3e:cb:b8:f2:be:10:e8: 11:24:6a:4b:49:4f:77:67:9e:3c:b6:b2:7b:1d:93:7f:d5:b8: ad:6d:db:59:32:bf:8a:aa:61:42:04:aa:a4:dd:28:cb:ca:82: bc:29:92:4f:16:e2:e5:ad:cb:45:e2:6a:1d:6c:08:0f:38:02: 77:4f:a3:bd:58:40:88:8f:59:5b:2e:50:0a:f2:40:ae:c7:94: cf:ff:ee:5a:9d:43:4d:d3:50:45:4a:a2:c2:f9:93:2f:66:89: 6c:90:a3:6b:65:1e:24:67:d5:25:35:07:f4:7f:fd:3b:6d:f6: fc:a8:87:41:ce:9d:a6:dd:2f:95:32:61:f8:21:39:84:71:1a: 4f:f3:f5:fa:1c:f0:74:0c:2f:e8:63:e1:11:e3:da:0f:ae:0c: 78:83:88:b2:fa:df:2a:1b:8e:88:41:66:a7:36:b2:6e:48:89: 66:c9:96:98:63:8a:8f:83:b9:ca:72:fd:ce:e6:54:6c:9d:b3: af:47:7d:ec:ac:a9:af:57:14:ee:c5:d9:1b:db:e4:10:1b:b3: 00:f2:8f:c8:c5:34:ae:0d:a9:92:fc:4b:e0:bd:2e:c9:63:a8: f3:d8:8c:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af83TujyG4dwvf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk ZmMyNzk3YjEtM2RjZC00ZDdiLWJhMzYtNWYxYzY4YzMxM2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RjBGpT3Y8bZhWUdxsRxy5dXwqMpJo880fcw cq4DA5iLEGxHy45Hczko6TJ8BEvUuy/IC/AOynhvl+HpQcYKr6XUtZHlrWeU/ze9 5JN09XU+ceDo6uYzoN3Ul2xiwkW70DqbfjB4UGzOpj0UcgBsM3LJVQSmPaHezF6d mtQ2ilxHyNqnjAWBynDyBskqCamNoInFeYCodKCkgoRu4WwBHVxkemKu1Vud8GL2 pZqZsDEn6Z8LKEdrksfEHc8FiUhBck2tXRob5+nzxSsA4RUOs25XkbaqjDoblvbk c3rVhsRv7GrbB/XKVlXf9xqbkga+wss3Fl13q4DVBvh3RlXJdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpUzkEXdVdvykRa0YEvZeAioug/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvNTcyZDQ1ZTYtNmEzMi0z MGRlLWE2ZTYtYzQyMTQzODk5ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHPmrLIylF6AwLy5/gGKfc88wpC+DOtu1r3LE2RPsu48r4Q6BEkaktJ T3dnnjy2snsdk3/VuK1t21kyv4qqYUIEqqTdKMvKgrwpkk8W4uWty0Xiah1sCA84 AndPo71YQIiPWVsuUAryQK7HlM//7lqdQ03TUEVKosL5ky9miWyQo2tlHiRn1SU1 B/R//Ttt9vyoh0HOnabdL5UyYfghOYRxGk/z9foc8HQML+hj4RHj2g+uDHiDiLL6 3yobjohBZqc2sm5IiWbJlphjio+Ducpy/c7mVGyds69Hfeysqa9XFO7F2Rvb5BAb swDyj8jFNK4NqZL8S+C9LsljqPPYjOw= -----END CERTIFICATE-----Generated at Fri Jul 24 14:47:08 2026 by rpki-client