$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa File: d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa (raw, json) Hash identifier: ZxZzcGb48WMOcr9sFDigYQSG+/oHXqtTGkJfOc3pET8= Subject key identifier: 47:9F:0A:C6:AC:5F:10:B8:C6:62:94:8E:2D:99:7A:93:5E:A3:17:15 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584DB4A57F18D87F105E721E3D80 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 16509 IP address blocks: 170.225.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:7f:18:d8:7f:10:5e:72:1e:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=73ea7232-c97e-4a2f-8440-3ec9803e79c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:38:6a:4a:f8:a7:ee:9c:54:b9:b1:7c:8d:45: 79:42:48:72:ef:a1:90:2f:c8:6f:e9:1e:74:30:f6: 86:89:d6:8d:14:2c:2e:0e:c1:49:be:ea:e6:6b:f4: 7e:e3:7e:45:fb:0f:79:1b:cc:6b:29:8a:a0:5e:3b: ad:19:9e:93:39:39:c3:4c:6c:67:97:d9:9b:4a:9b: 87:0a:92:7b:4b:f5:04:ed:3d:ed:1f:95:61:42:1b: 4e:37:00:d9:5b:e7:42:a0:a6:26:61:69:42:b8:29: 79:11:f4:35:0e:3e:ef:b4:ca:88:9c:b8:6f:8b:82: f1:3c:2a:10:85:3b:5c:b9:ef:80:7d:58:59:ff:85: 3e:87:e8:52:89:93:4f:f7:94:e1:bb:5c:22:9b:19: 59:3c:29:de:87:a9:e8:40:cd:e4:8a:95:cb:7d:b0: 81:a7:2c:e1:9c:d7:1d:61:42:91:25:7a:4e:0a:05: dd:6a:9f:35:ab:ae:35:f8:ac:08:a1:71:ae:8b:e2: 09:80:68:dd:b3:00:44:f3:f3:fc:b5:10:6e:3d:8c: bb:e7:7f:a7:8a:71:8f:38:df:20:ae:3d:15:84:36: ad:a5:46:5a:1d:c7:14:ca:32:d3:b4:8a:36:da:c4: 83:48:59:6d:f2:2c:02:94:69:99:6b:03:9f:76:d8: 5d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9F:0A:C6:AC:5F:10:B8:C6:62:94:8E:2D:99:7A:93:5E:A3:17:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/d35fa800-6931-32b7-8fb1-22f6f8cb8456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f8:28:5a:b3:55:77:b1:b2:26:aa:48:36:58:84:8e:6d:da: 55:c8:a2:54:95:4b:01:35:fe:0c:a1:f1:4f:21:0e:30:2e:57: 62:f0:33:fc:7b:92:f3:7e:cb:45:77:79:c8:4e:fd:99:02:21: 6c:66:8b:41:cf:fe:30:1c:9a:9f:71:cd:ea:8a:71:2c:8a:da: da:3e:72:fa:a3:0f:df:c6:56:0e:89:2e:e0:2f:fa:60:46:8a: a2:35:5c:60:06:49:89:1f:16:cd:b7:a6:50:db:de:70:42:19: 1e:88:eb:c6:a6:9f:98:fd:2e:5c:8d:3d:1d:ea:8b:b7:88:0c: cb:1d:ec:3c:9e:17:98:bd:20:07:89:10:ff:d5:28:d4:75:38: 8c:7b:30:b1:a9:03:8f:58:b9:58:8d:31:4b:9c:30:11:7b:b1: f7:d8:23:3a:d2:fc:a5:40:99:9d:0a:f8:98:6f:98:fa:88:86: 96:f0:db:fc:01:dc:de:1d:e0:c3:ab:81:9c:31:33:67:67:79: 88:66:5b:f1:32:75:a6:b5:56:13:26:46:d0:68:02:fc:f9:e4: 03:24:73:2c:6b:c0:e9:5b:dd:2e:1e:88:b8:61:72:c0:1c:5c: 32:72:0f:9e:9d:68:a3:36:fa:94:ce:86:1b:88:42:a1:21:09: bd:9a:df:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pX8Y2H8QXnIePYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk NzNlYTcyMzItYzk3ZS00YTJmLTg0NDAtM2VjOTgwM2U3OWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhThqSvin7pxUubF8jUV5Qkhy76GQL8hv6R50 MPaGidaNFCwuDsFJvurma/R+435F+w95G8xrKYqgXjutGZ6TOTnDTGxnl9mbSpuH CpJ7S/UE7T3tH5VhQhtONwDZW+dCoKYmYWlCuCl5EfQ1Dj7vtMqInLhvi4LxPCoQ hTtcue+AfVhZ/4U+h+hSiZNP95Thu1wimxlZPCneh6noQM3kipXLfbCBpyzhnNcd YUKRJXpOCgXdap81q641+KwIoXGui+IJgGjdswBE8/P8tRBuPYy753+ninGPON8g rj0VhDatpUZaHccUyjLTtIo22sSDSFlt8iwClGmZawOfdthdxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEefCsasXxC4xmKUji2ZepNeoxcVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvZDM1ZmE4MDAtNjkzMS0z MmI3LThmYjEtMjJmNmY4Y2I4NDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP4KFqzVXexsiaqSDZYhI5t2lXIolSVSwE1/gyh8U8hDjAuV2LwM/x7 kvN+y0V3echO/ZkCIWxmi0HP/jAcmp9xzeqKcSyK2to+cvqjD9/GVg6JLuAv+mBG iqI1XGAGSYkfFs23plDb3nBCGR6I68amn5j9LlyNPR3qi7eIDMsd7DyeF5i9IAeJ EP/VKNR1OIx7MLGpA49YuViNMUucMBF7sffYIzrS/KVAmZ0K+JhvmPqIhpbw2/wB 3N4d4MOrgZwxM2dneYhmW/Eydaa1VhMmRtBoAvz55AMkcyxrwOlb3S4eiLhhcsAc XDJyD56daKM2+pTOhhuIQqEhCb2a31Y= -----END CERTIFICATE-----Generated at Wed May 13 10:04:38 2026 by rpki-client