$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa File: f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa (raw, json) Hash identifier: +s1617isiOP3WwRE923Xvz0tdBlUEmtrHJsd+zs/Pm0= Subject key identifier: 27:AE:D3:93:E9:6D:63:41:2D:C9:51:53:91:21:A2:63:E4:C8:CD:63 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584ADA9BC22E7A2C2EA697C9E600 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 14618 IP address blocks: 170.225.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c2:2e:7a:2c:2e:a6:97:c9:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=3670b0f7-8ff9-4128-835f-4e4da0079b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1c:fb:40:a2:40:6e:21:f8:dd:7a:f8:43:d8: 08:ce:61:f2:d6:95:2e:73:70:f4:fb:15:bf:27:4c: f3:ec:7c:c8:f3:67:65:2e:d3:bc:d9:b2:f5:cc:e8: 4c:f5:a6:1d:4c:bf:24:40:b5:f5:1e:9d:b2:46:03: a8:ed:93:c3:73:7b:32:aa:9d:83:a3:1a:93:6b:19: 5a:0f:db:f1:92:bf:cf:d5:9e:f7:a8:bb:7c:da:a1: 5a:95:46:36:93:09:d5:bf:9a:ed:e4:a6:2a:bb:59: 11:f0:7d:d9:a0:2c:f5:29:50:ef:99:93:51:c7:6b: 29:9b:42:53:fd:30:09:33:69:7d:3c:ed:b7:a1:2e: 8c:f0:30:11:01:e4:74:01:79:b6:b1:35:93:3b:62: 42:31:29:a3:b0:c8:75:fa:55:c7:fa:60:d5:b7:6b: e3:df:94:2a:14:ad:dc:93:c0:8e:15:cf:1d:80:69: 80:3a:ca:9e:79:d4:c9:a8:39:c9:8f:b4:fa:31:58: 15:2c:ac:c5:92:ea:1c:03:75:cb:81:0d:2a:a5:72: 98:5e:3a:b5:1f:57:1f:f3:07:47:f6:4b:42:62:7a: bc:1e:5f:6b:77:8b:5d:5a:42:08:e4:9d:f7:63:9c: eb:7d:03:a4:85:a4:ba:2c:bf:53:da:0e:a9:9b:70: 27:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AE:D3:93:E9:6D:63:41:2D:C9:51:53:91:21:A2:63:E4:C8:CD:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b4:40:99:b1:52:11:73:da:9a:50:b6:55:9b:e8:01:60:34: e6:9d:f0:13:dc:f9:0e:3e:f7:ae:b0:80:da:57:aa:e4:b8:57: 57:53:32:77:37:3d:a8:7b:30:a0:7d:90:a7:40:cc:be:3a:79: d4:5f:35:dc:2c:55:26:76:6d:a9:16:cc:a5:d8:28:bd:cf:93: 64:6e:32:c1:29:a7:47:37:60:6d:47:d4:e5:d3:e7:2b:04:d8: 03:4e:13:f3:e1:02:39:1b:14:d3:e2:d9:e2:7f:af:b9:76:59: 54:2e:c9:1a:9e:30:79:22:cd:e5:02:b9:c8:0a:57:59:06:dc: cb:22:9b:1d:67:cb:6f:20:bd:c7:a4:ef:30:e4:1d:62:65:14: e3:84:b9:74:08:59:f9:0d:d0:82:5a:7f:41:72:43:20:a0:9b: 08:42:c5:8a:e8:3d:5a:f2:2c:5b:fb:8a:0d:aa:79:3f:85:15: 91:5d:05:7f:25:21:e9:91:0f:5e:56:c3:3b:59:5d:58:cc:12: a8:3d:ed:be:67:7e:f7:62:34:88:e6:93:db:07:a2:18:7f:ff: 5d:d6:c6:3b:ba:8a:6d:5a:4f:7f:78:01:f2:dc:e3:22:ef:31: cd:a0:a0:b8:80:e9:ee:9b:3e:a9:0e:7b:42:6f:21:3e:7f:03: ec:06:50:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8IueiwuppfJ5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk MzY3MGIwZjctOGZmOS00MTI4LTgzNWYtNGU0ZGEwMDc5Yjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRz7QKJAbiH43Xr4Q9gIzmHy1pUuc3D0+xW/ J0zz7HzI82dlLtO82bL1zOhM9aYdTL8kQLX1Hp2yRgOo7ZPDc3syqp2DoxqTaxla D9vxkr/P1Z73qLt82qFalUY2kwnVv5rt5KYqu1kR8H3ZoCz1KVDvmZNRx2spm0JT /TAJM2l9PO23oS6M8DARAeR0AXm2sTWTO2JCMSmjsMh1+lXH+mDVt2vj35QqFK3c k8COFc8dgGmAOsqeedTJqDnJj7T6MVgVLKzFkuocA3XLgQ0qpXKYXjq1H1cf8wdH 9ktCYnq8Hl9rd4tdWkII5J33Y5zrfQOkhaS6LL9T2g6pm3AnDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeu05PpbWNBLclRU5EhomPkyM1jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvZjU5MWMzZjgtZmU2Mi0z Y2VhLThiNGUtNDZlMmVjYTMyMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC0QJmxUhFz2ppQtlWb6AFgNOad8BPc+Q4+966wgNpXquS4V1dTMnc3 Pah7MKB9kKdAzL46edRfNdwsVSZ2bakWzKXYKL3Pk2RuMsEpp0c3YG1H1OXT5ysE 2ANOE/PhAjkbFNPi2eJ/r7l2WVQuyRqeMHkizeUCucgKV1kG3Msimx1ny28gvcek 7zDkHWJlFOOEuXQIWfkN0IJaf0FyQyCgmwhCxYroPVryLFv7ig2qeT+FFZFdBX8l IemRD15WwztZXVjMEqg97b5nfvdiNIjmk9sHohh//13Wxju6im1aT394AfLc4yLv Mc2goLiA6e6bPqkOe0JvIT5/A+wGUMw= -----END CERTIFICATE-----Generated at Sat Aug 23 06:55:16 2025 by rpki-client