$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa File: 98d4dcd1-7048-351e-8685-4eb20dda3967.roa (raw, json) Hash identifier: LfsoW+bA+VKvi5/5iPx6eOOY6aHbYwTdrNCBnBuzN/E= Subject key identifier: BB:4F:D0:4F:73:1A:75:22:DE:BA:CE:47:34:74:97:68:45:38:B5:92 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584DAC457AE63D1CAC0F57EE0E40 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 16509 IP address blocks: 170.225.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:7a:e6:3d:1c:ac:0f:57:ee:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=2ce35ee5-99f7-44cd-afb5-182bd9a5c343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:d7:47:aa:d7:59:17:5b:3f:90:04:10:aa: dd:82:87:d5:f5:23:1a:dc:4c:47:7a:d1:f8:71:19: c1:9e:dc:5d:bc:4f:fc:7f:96:47:25:a9:bc:39:76: 90:a2:02:fe:3f:d6:d4:d5:8f:60:2e:c4:45:d6:ab: fa:69:b7:fe:77:d1:4b:fe:9a:d4:60:c7:e0:db:c1: f6:7f:54:4f:e7:2b:f4:29:84:7d:38:fa:7e:e0:67: e2:b8:59:95:99:fb:85:f1:36:e8:9a:c1:81:93:5a: 2d:8a:72:74:8c:fc:d0:a6:28:1b:bd:8c:3c:23:71: ac:50:43:1f:e9:84:74:d8:57:b5:5e:a7:e9:b6:6b: d3:5a:e1:ad:b3:ab:29:42:6b:9a:96:91:32:2e:ad: d0:07:d0:7d:96:4e:7f:cc:6d:0b:68:cb:c6:27:7d: 7a:99:6c:be:fe:d0:49:70:c5:8b:11:5f:04:99:74: 31:63:66:d9:97:1f:f2:00:e0:31:8e:d0:28:a0:7c: 7b:cd:d7:71:88:c6:40:a6:7b:0d:5d:23:c4:f2:19: c1:e6:1e:44:aa:6f:cf:89:cf:53:83:f1:45:cf:7c: f0:1a:a9:80:f6:b3:58:fb:cc:b6:25:07:27:2d:f6: 63:7f:2d:ca:ff:63:1d:ee:c1:a9:d9:03:a4:2e:d8: 96:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:4F:D0:4F:73:1A:75:22:DE:BA:CE:47:34:74:97:68:45:38:B5:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/98d4dcd1-7048-351e-8685-4eb20dda3967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:bb:0c:ad:88:03:86:67:fe:3c:dd:d3:bd:bb:7a:69:18:73: 2a:10:3d:3f:0e:6a:3f:3e:29:c3:8f:91:68:8e:82:b8:10:e6: 79:7c:15:6b:a2:33:59:12:ea:6e:4d:64:02:b6:4e:27:31:02: 28:b6:84:49:b7:07:d0:5c:02:50:97:d6:75:87:76:ac:d1:54: 8e:f7:ea:a4:ee:25:d1:6c:25:6d:06:93:96:67:95:aa:64:78: 35:1f:9e:68:90:8c:8c:ab:26:6c:cd:14:22:e4:95:45:f8:8e: dc:54:bb:52:a0:be:b1:0a:9a:97:f5:02:65:36:49:4c:73:52: 74:34:da:55:fa:8b:1f:80:8d:d8:80:23:c5:bf:cc:98:ae:13: 80:d5:75:22:15:e2:de:a1:1a:ab:9e:14:1a:fa:a7:4c:42:29: 90:44:2b:8e:43:e3:29:98:3f:f4:ac:58:05:08:8a:86:e9:ff: 66:32:cb:38:6a:97:5d:7a:88:76:6d:fb:cb:aa:bc:3c:44:31: 1e:5b:41:03:a0:27:62:ed:8e:a7:e8:0b:f4:22:e8:84:9a:4a: 78:1b:24:e1:40:ba:6b:0f:6b:e1:24:a5:a6:76:f0:d4:4a:ec: 9a:8b:52:f7:d0:93:92:2a:d7:42:96:d3:00:e1:2c:13:b3:5c: 16:e0:d1:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRXrmPRysD1fuDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MmNlMzVlZTUtOTlmNy00NGNkLWFmYjUtMTgyYmQ5YTVjMzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+zXR6rXWRdbP5AEEKrdgofV9SMa3ExHetH4 cRnBntxdvE/8f5ZHJam8OXaQogL+P9bU1Y9gLsRF1qv6abf+d9FL/prUYMfg28H2 f1RP5yv0KYR9OPp+4GfiuFmVmfuF8TbomsGBk1otinJ0jPzQpigbvYw8I3GsUEMf 6YR02Fe1XqfptmvTWuGts6spQmualpEyLq3QB9B9lk5/zG0LaMvGJ316mWy+/tBJ cMWLEV8EmXQxY2bZlx/yAOAxjtAooHx7zddxiMZApnsNXSPE8hnB5h5Eqm/Pic9T g/FFz3zwGqmA9rNY+8y2JQcnLfZjfy3K/2Md7sGp2QOkLtiWdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtP0E9zGnUi3rrORzR0l2hFOLWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvOThkNGRjZDEtNzA0OC0z NTFlLTg2ODUtNGViMjBkZGEzOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG7DK2IA4Zn/jzd0727emkYcyoQPT8Oaj8+KcOPkWiOgrgQ5nl8FWui M1kS6m5NZAK2TicxAii2hEm3B9BcAlCX1nWHdqzRVI736qTuJdFsJW0Gk5Znlapk eDUfnmiQjIyrJmzNFCLklUX4jtxUu1KgvrEKmpf1AmU2SUxzUnQ02lX6ix+AjdiA I8W/zJiuE4DVdSIV4t6hGqueFBr6p0xCKZBEK45D4ymYP/SsWAUIiobp/2Yyyzhq l116iHZt+8uqvDxEMR5bQQOgJ2LtjqfoC/Qi6ISaSngbJOFAumsPa+EkpaZ28NRK 7JqLUvfQk5Iq10KW0wDhLBOzXBbg0b8= -----END CERTIFICATE-----Generated at Wed May 13 09:44:59 2026 by rpki-client