$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa File: 572d45e6-6a32-30de-a6e6-c4214389980b.roa (raw, json) Hash identifier: 58sJZWRk3IHYAF4rR5h8Y/hsvSfOXkEz4L91VU5o3CY= Subject key identifier: 6E:CD:53:FF:6B:9B:4D:3E:5C:5F:A6:C1:FC:3B:C6:DE:B0:35:F0:2B Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584DBA3AF8B5EB0ADB687A862D00 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 14618 IP address blocks: 170.225.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3a:f8:b5:eb:0a:db:68:7a:86:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=b9bb30d1-512f-489d-9237-d4f504da78e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:77:85:a1:53:24:b9:dc:de:99:17:8a:88:a5: 1b:be:c7:ec:d6:90:4a:05:0c:bd:be:67:cf:8c:07: c9:8f:bc:b4:49:3b:1b:58:8e:90:28:a8:c9:1b:0f: eb:4a:a7:af:f9:19:34:cb:75:21:86:74:73:1e:9c: 28:6b:cb:33:2e:9f:ac:d8:bc:ee:94:6c:56:3c:60: fb:ea:6f:22:ce:5d:db:77:7c:eb:ad:3b:74:a2:fd: ad:95:c9:aa:c3:d5:4d:18:0d:f4:23:c6:b2:49:c2: 53:47:ec:78:1a:2f:3d:69:25:72:a3:73:11:f8:02: 9c:a5:c1:e1:b1:7a:ca:94:34:72:cd:7a:86:17:ca: 31:1d:ea:00:34:e1:c6:6b:0a:d8:bd:10:e2:c5:1c: 1c:70:a3:79:90:ba:65:cf:57:be:2e:a6:3d:51:cf: 06:fa:3e:fa:df:b7:c6:97:fb:35:fd:16:83:51:b8: 20:f3:3b:08:9d:0c:d9:4f:61:bc:a4:b5:36:a5:ab: b0:b1:e2:6f:94:85:3d:57:e4:ee:16:19:d1:75:5b: 96:08:dd:e7:b3:32:93:3e:c7:04:9f:0e:d7:2c:dd: 28:2c:bc:8d:94:01:1f:2c:90:e8:34:d9:31:55:64: 12:dd:ee:80:07:66:66:2f:72:0b:e6:67:92:45:a0: e0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CD:53:FF:6B:9B:4D:3E:5C:5F:A6:C1:FC:3B:C6:DE:B0:35:F0:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/572d45e6-6a32-30de-a6e6-c4214389980b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:53:85:bb:46:cd:65:bc:7c:12:b7:a4:c9:cc:45:96:9f:2d: 07:3a:e8:8d:e9:9f:f6:7b:c4:48:dc:d6:c4:2c:7a:3f:21:ef: c0:05:2b:68:9b:4e:7b:34:88:85:68:e8:4d:a9:1b:69:62:6c: c8:e9:78:8c:8c:36:46:20:75:5e:44:18:71:a8:2a:25:55:d7: 66:08:50:fb:c5:ae:41:7b:08:9b:8f:01:dd:4c:b8:3a:fb:b4: 3e:45:0f:1f:d7:87:2c:db:03:fc:e4:fa:14:19:be:dd:17:55: cc:16:0c:ff:ab:b6:49:3b:a3:57:17:c1:96:7b:e5:18:32:68: 93:ef:94:67:4a:6f:45:d4:53:c1:08:a4:d4:2c:ee:41:7a:68: 8b:8a:d5:24:e5:7f:56:6a:c5:e5:66:de:9d:04:d1:5c:90:08: 59:89:a9:79:35:e4:a5:6b:cb:ce:ff:8d:3a:3a:c5:57:bd:3b: 71:fd:f5:c4:1a:5d:b9:03:fc:d4:d3:c9:bb:36:c1:df:a9:1b: 0f:bf:1c:b7:9b:bf:6f:4f:11:06:5d:f5:f5:50:92:10:6d:4d: 4c:1a:db:1e:1b:46:4a:cd:8d:a1:df:23:16:cb:1b:31:28:31: 66:ff:32:a6:df:57:f4:c5:c7:ee:ed:8c:28:10:5a:e5:1e:77: d4:3f:1a:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26Ovi16wrbaHqGLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk YjliYjMwZDEtNTEyZi00ODlkLTkyMzctZDRmNTA0ZGE3OGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3eFoVMkudzemReKiKUbvsfs1pBKBQy9vmfP jAfJj7y0STsbWI6QKKjJGw/rSqev+Rk0y3UhhnRzHpwoa8szLp+s2LzulGxWPGD7 6m8izl3bd3zrrTt0ov2tlcmqw9VNGA30I8ayScJTR+x4Gi89aSVyo3MR+AKcpcHh sXrKlDRyzXqGF8oxHeoANOHGawrYvRDixRwccKN5kLplz1e+LqY9Uc8G+j7637fG l/s1/RaDUbgg8zsInQzZT2G8pLU2pauwseJvlIU9V+TuFhnRdVuWCN3nszKTPscE nw7XLN0oLLyNlAEfLJDoNNkxVWQS3e6AB2ZmL3IL5meSRaDgywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7NU/9rm00+XF+mwfw7xt6wNfArMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvNTcyZDQ1ZTYtNmEzMi0z MGRlLWE2ZTYtYzQyMTQzODk5ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1ThbtGzWW8fBK3pMnMRZafLQc66I3pn/Z7xEjc1sQsej8h78AFK2ib Tns0iIVo6E2pG2libMjpeIyMNkYgdV5EGHGoKiVV12YIUPvFrkF7CJuPAd1MuDr7 tD5FDx/XhyzbA/zk+hQZvt0XVcwWDP+rtkk7o1cXwZZ75RgyaJPvlGdKb0XUU8EI pNQs7kF6aIuK1STlf1ZqxeVm3p0E0VyQCFmJqXk15KVry87/jTo6xVe9O3H99cQa XbkD/NTTybs2wd+pGw+/HLebv29PEQZd9fVQkhBtTUwa2x4bRkrNjaHfIxbLGzEo MWb/MqbfV/TFx+7tjCgQWuUed9Q/Gqg= -----END CERTIFICATE-----Generated at Wed May 13 15:38:20 2026 by rpki-client