$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/12b496d5-5cb5-36f8-baf0-9e729b598d53.roa File: 12b496d5-5cb5-36f8-baf0-9e729b598d53.roa (raw, json) Hash identifier: /StZJme7as/Tb5kz6dw8ZKW9o07odwX+oUcJsT683wY= Subject key identifier: 41:34:58:E7:75:A4:5C:4C:A7:AC:5C:33:83:7F:9D:44:97:8B:42:1C Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B21CC16471C2786C24C746600 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/12b496d5-5cb5-36f8-baf0-9e729b598d53.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 31898 IP address blocks: 170.114.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:16:47:1c:27:86:c2:4c:74:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=44bbb7ec-9ed6-40cf-b4bb-4aa871897b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8b:5d:fc:90:3e:6b:85:a1:e4:cf:9c:cd:fc: f2:5f:7f:f5:35:01:f7:21:bf:a0:70:ef:69:97:45: 1b:85:db:6d:f8:32:f2:c5:d0:4d:a6:26:54:16:c7: 21:aa:cd:8c:8b:f4:9a:43:4a:22:13:54:55:b2:2e: 7c:2c:ae:a1:db:81:ce:98:a5:e8:ed:88:9b:76:91: c6:71:fd:4f:1f:03:22:8d:0b:af:2f:f5:48:ca:f9: 44:6c:a3:fe:f1:bc:f9:bb:35:43:03:de:19:c1:8b: a5:53:16:74:f6:99:0b:1b:a8:a9:0c:c8:a9:0f:ab: 59:ae:83:1b:6c:06:25:e0:c7:bb:bd:67:6b:30:93: a9:dc:78:9c:0d:a3:0b:54:a4:0b:a6:f9:18:a1:db: 44:dc:09:fd:b5:16:95:b6:8e:49:51:9a:7b:b1:72: 3c:61:cc:d0:b5:ae:c2:61:c9:e9:3a:9c:68:5f:67: d9:9c:f2:d6:76:3f:1f:aa:6c:69:12:64:e4:58:15: 65:30:22:fb:bf:68:8a:31:80:72:06:95:f2:c0:e9: 24:24:f1:a4:71:47:62:d8:8a:c8:62:14:1e:73:33: 9d:5a:61:b8:ce:3b:0f:b9:4c:50:ae:4b:67:08:85: 1a:b9:28:4b:3d:8b:0b:b7:d5:a5:fc:ba:a2:8e:b1: c5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:34:58:E7:75:A4:5C:4C:A7:AC:5C:33:83:7F:9D:44:97:8B:42:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/12b496d5-5cb5-36f8-baf0-9e729b598d53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:7a:77:ac:70:26:c0:60:13:44:81:71:fd:1a:aa:53:16:a6: c2:1d:f7:cb:c5:d2:d6:c2:59:28:5a:5e:05:76:1d:35:f0:1c: 65:a3:aa:76:37:66:f6:f2:49:67:0f:3f:c3:bb:4d:36:f6:99: 61:b2:87:46:25:d6:db:c9:e6:3d:56:8e:ab:91:f2:38:0d:0f: 67:e1:53:c5:b5:c0:b3:28:75:c4:19:16:e1:61:f0:29:d9:db: be:b5:c8:7d:3b:ca:35:b9:12:9e:fa:f7:af:ec:32:c4:31:37: 18:b7:49:0b:4c:b8:f3:6a:79:5d:e7:44:82:99:e6:c8:7e:f5: ce:ed:41:0f:f6:15:ba:8f:ca:c7:74:3b:a1:ca:d8:37:4a:c5: de:57:a5:8c:d6:e9:b3:f7:09:73:a2:f8:f7:b1:54:5d:13:24: d3:05:1f:ed:6a:d0:df:01:c6:ba:97:e7:50:93:77:53:7e:dc: 42:01:33:9f:77:f6:64:6f:dc:fa:3c:55:24:ef:12:56:04:13: e6:1f:9c:d7:b3:9e:f6:a4:40:33:c7:6c:e4:02:ab:9e:b2:56: fc:47:a2:6f:fe:1d:1b:02:ac:c1:04:a2:8a:00:26:75:19:79: 50:f7:e9:06:5c:2d:23:7c:43:7f:cd:b2:f4:e3:5f:34:b7:08: 82:81:c5:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzBZHHCeGwkx0ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NDRiYmI3ZWMtOWVkNi00MGNmLWI0YmItNGFhODcxODk3YjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjotd/JA+a4Wh5M+czfzyX3/1NQH3Ib+gcO9p l0Ubhdtt+DLyxdBNpiZUFschqs2Mi/SaQ0oiE1RVsi58LK6h24HOmKXo7YibdpHG cf1PHwMijQuvL/VIyvlEbKP+8bz5uzVDA94ZwYulUxZ09pkLG6ipDMipD6tZroMb bAYl4Me7vWdrMJOp3HicDaMLVKQLpvkYodtE3An9tRaVto5JUZp7sXI8YczQta7C YcnpOpxoX2fZnPLWdj8fqmxpEmTkWBVlMCL7v2iKMYByBpXywOkkJPGkcUdi2IrI YhQeczOdWmG4zjsPuUxQrktnCIUauShLPYsLt9Wl/LqijrHFWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEE0WOd1pFxMp6xcM4N/nUSXi0IcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMTJiNDk2ZDUtNWNiNS0z NmY4LWJhZjAtOWU3MjliNTk4ZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqnJoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH16d6xwJsBgE0SBcf0aqlMWpsId98vF0tbCWShaXgV2HTXwHGWjqnY3 ZvbySWcPP8O7TTb2mWGyh0Yl1tvJ5j1WjquR8jgND2fhU8W1wLModcQZFuFh8CnZ 2761yH07yjW5Ep7696/sMsQxNxi3SQtMuPNqeV3nRIKZ5sh+9c7tQQ/2FbqPysd0 O6HK2DdKxd5XpYzW6bP3CXOi+PexVF0TJNMFH+1q0N8BxrqX51CTd1N+3EIBM593 9mRv3Po8VSTvElYEE+YfnNeznvakQDPHbOQCq56yVvxHom/+HRsCrMEEoooAJnUZ eVD36QZcLSN8Q3/NsvTjXzS3CIKBxVI= -----END CERTIFICATE-----Generated at Mon Oct 20 10:12:51 2025 by rpki-client