$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0ff32278-5321-3166-a4d6-1002760b74a9.roa File: 0ff32278-5321-3166-a4d6-1002760b74a9.roa (raw, json) Hash identifier: 2zFQIN1vuWn695n5WeNgN9qKNMy9rsxhDkk8XkKxGOM= Subject key identifier: C6:44:15:08:D0:71:8B:54:22:C6:0C:BE:5A:65:70:7B:44:12:A5:07 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584F51D2AE5E44CEA6207655C100 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0ff32278-5321-3166-a4d6-1002760b74a9.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 170.114.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:ae:5e:44:ce:a6:20:76:55:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=78e209de-6df8-4bb3-9682-2b051e88ed0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ba:8a:28:35:db:7f:96:ab:e4:da:fe:3e:36: ae:0e:74:6b:d6:bc:4a:12:67:7b:7f:6f:27:1c:89: 38:5b:03:c1:49:3c:d2:34:91:a2:12:e3:6d:2a:6b: 99:e1:7c:94:d2:e2:af:f9:45:2a:f5:70:99:1c:bd: d2:80:7b:7b:81:6a:6d:16:15:36:00:f6:52:5f:85: 89:dd:19:7f:3f:19:34:7a:48:cb:77:23:ef:a2:ea: f0:31:f7:69:fd:49:0b:5b:9b:80:2f:5e:35:1e:0d: e9:34:52:af:a7:08:f8:d9:6c:e1:30:4e:6e:86:b0: d0:10:7d:d3:f1:12:f2:b9:f1:f3:97:b3:08:ac:06: aa:a7:0f:e5:78:4a:9c:0c:48:f1:83:34:91:b5:ae: 44:96:71:cf:97:28:0b:a9:35:e8:ee:44:f9:bc:37: bd:26:c9:f0:30:82:51:26:df:cc:1b:94:8d:0b:46: e4:2c:3f:60:b6:50:9c:dc:f1:77:29:51:05:69:a0: 57:86:53:cf:32:dd:43:59:38:fd:9e:f5:a0:d2:d7: 04:06:f4:0c:92:9e:77:17:bf:82:0f:8a:68:ce:e5: 8e:f7:ad:24:26:db:4f:fc:52:b4:5d:08:c5:3d:a2: 28:3f:5f:db:b1:d3:f5:36:e0:be:18:63:7e:aa:57: 15:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:44:15:08:D0:71:8B:54:22:C6:0C:BE:5A:65:70:7B:44:12:A5:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0ff32278-5321-3166-a4d6-1002760b74a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:f9:36:b5:d4:1f:e4:c5:a6:7a:49:69:8b:ad:28:69:3e:b8: 69:66:3f:0b:03:6c:a2:6c:d3:68:b8:91:4c:ed:7a:d8:2a:ce: b7:00:0c:af:3a:4f:b4:68:ea:af:5e:b9:03:bd:9f:31:40:4f: e5:61:48:cb:53:f6:e8:ba:24:d6:1c:1f:ab:31:d0:dc:e0:32: 8e:d1:c7:a9:05:12:8d:d7:c5:a0:75:36:40:61:17:d8:c0:b3: 60:34:5a:6d:4f:7f:8f:5f:c6:2d:0c:cf:05:c9:46:c8:5f:4a: d2:e5:b1:9e:2b:dd:fd:be:43:50:42:6e:34:1f:fe:5c:5e:03: 8b:f1:b9:67:41:c9:ed:ad:b6:65:2b:c9:6f:ee:b3:9f:9f:0b: c2:3c:e4:d2:81:ca:a7:8b:56:17:01:68:de:6d:7b:40:0c:f8: 2e:2e:84:b6:41:9d:bb:6c:1c:34:29:7b:be:09:63:57:c8:3b: 53:7c:2d:4d:2e:9e:b1:99:16:4b:01:73:04:46:24:13:5f:26: ac:f6:a8:e2:62:b1:53:15:75:c9:7f:c2:92:b2:0c:99:7e:72: 42:c8:92:ca:5b:0c:ff:1a:13:3c:61:9b:6b:48:05:4c:46:0c: 00:7b:e8:d0:41:ab:89:61:b6:69:88:56:6b:99:ab:40:06:ac: 7a:45:5b:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0q5eRM6mIHZVwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk NzhlMjA5ZGUtNmRmOC00YmIzLTk2ODItMmIwNTFlODhlZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrqKKDXbf5ar5Nr+PjauDnRr1rxKEmd7f28n HIk4WwPBSTzSNJGiEuNtKmuZ4XyU0uKv+UUq9XCZHL3SgHt7gWptFhU2APZSX4WJ 3Rl/Pxk0ekjLdyPvourwMfdp/UkLW5uAL141Hg3pNFKvpwj42WzhME5uhrDQEH3T 8RLyufHzl7MIrAaqpw/leEqcDEjxgzSRta5ElnHPlygLqTXo7kT5vDe9JsnwMIJR Jt/MG5SNC0bkLD9gtlCc3PF3KVEFaaBXhlPPMt1DWTj9nvWg0tcEBvQMkp53F7+C D4pozuWO960kJttP/FK0XQjFPaIoP1/bsdP1NuC+GGN+qlcVeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZEFQjQcYtUIsYMvlplcHtEEqUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMGZmMzIyNzgtNTMyMS0z MTY2LWE0ZDYtMTAwMjc2MGI3NGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqnIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn5NrXUH+TFpnpJaYutKGk+uGlmPwsDbKJs02i4kUztetgqzrcADK86 T7Ro6q9euQO9nzFAT+VhSMtT9ui6JNYcH6sx0NzgMo7Rx6kFEo3XxaB1NkBhF9jA s2A0Wm1Pf49fxi0MzwXJRshfStLlsZ4r3f2+Q1BCbjQf/lxeA4vxuWdBye2ttmUr yW/us5+fC8I85NKByqeLVhcBaN5te0AM+C4uhLZBnbtsHDQpe74JY1fIO1N8LU0u nrGZFksBcwRGJBNfJqz2qOJisVMVdcl/wpKyDJl+ckLIkspbDP8aEzxhm2tIBUxG DAB76NBBq4lhtmmIVmuZq0AGrHpFWxo= -----END CERTIFICATE-----Generated at Mon Sep 28 20:43:54 2026 by rpki-client