$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3539260d-5c7b-3ea4-bdf5-2f08e88b3415.roa File: 3539260d-5c7b-3ea4-bdf5-2f08e88b3415.roa (raw, json) Hash identifier: SRD9JfG3DC6Ag7/xgGiL36+yEN2XiqbfuRbfxMpfGxk= Subject key identifier: E4:59:1F:33:F6:FD:A6:79:EB:92:16:E1:9B:89:00:36:EA:0C:B6:70 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584F497630B152B2AAF2E589D840 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3539260d-5c7b-3ea4-bdf5-2f08e88b3415.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 170.114.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:30:b1:52:b2:aa:f2:e5:89:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0abbbd73-58c1-417f-85ce-5a0cd8b554d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0a:e0:ea:d5:fa:f8:16:75:1a:49:9d:aa:28: fa:66:38:45:c6:54:bb:b5:a6:49:0d:2f:d0:74:63: ec:ce:f7:53:7f:26:f6:19:d0:6e:0c:30:d4:54:33: 90:a0:e1:f1:74:f6:78:d6:a1:90:bd:b0:5f:32:99: a7:39:09:17:f8:02:20:b2:69:14:65:77:15:5a:88: 7b:f6:fc:9f:84:93:31:0f:7b:f5:4c:a2:94:11:bc: 22:46:1f:09:9e:65:34:47:72:26:3f:a2:b2:85:57: 75:e8:0b:07:8e:3c:c1:c3:59:23:00:c1:be:57:02: 3f:6b:02:c4:df:74:2d:3b:ee:eb:e4:13:3d:35:11: 18:a2:8b:ba:c4:6e:00:e7:52:8e:a6:98:ae:88:95: cc:a6:37:07:72:ea:00:a3:95:20:2f:47:ab:65:5e: f7:7a:34:cc:4b:45:82:f7:78:89:94:43:28:5a:73: e6:c8:96:6a:4b:df:52:f7:57:27:ec:a1:65:91:ac: 00:db:55:bc:bc:85:23:fe:85:4c:4a:57:15:22:6b: 82:ce:6d:be:dd:33:a8:f7:85:11:07:ee:38:68:4e: 2a:58:57:6f:34:f3:a7:3c:37:26:0a:0a:2e:34:68: 95:b0:47:e3:d8:ee:1c:35:3d:04:f2:8d:60:27:84: 0b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:59:1F:33:F6:FD:A6:79:EB:92:16:E1:9B:89:00:36:EA:0C:B6:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3539260d-5c7b-3ea4-bdf5-2f08e88b3415.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b4:9c:a9:2e:f7:55:28:92:d6:dd:bc:f5:ff:32:20:88:9c: 19:ce:a3:88:20:e4:53:bb:1e:a0:ec:2e:b7:32:80:5e:3c:94: 83:e8:8b:d7:bc:40:9a:a7:5a:ff:c5:07:9f:7f:dc:47:b1:45: e5:43:09:49:b5:c2:a0:04:57:61:ad:bd:c1:35:47:f3:5b:01: f2:72:c4:2e:de:7b:44:60:b4:63:90:ca:4a:c0:6d:0d:67:41: 8a:d2:b0:fb:6e:ef:7e:64:31:29:60:78:f8:b4:b5:06:53:71: f8:be:88:f5:c4:16:27:80:01:d9:90:c2:2b:a1:9b:b1:ba:0d: 19:4e:28:c6:d5:46:6e:81:fb:ba:1c:d6:34:19:30:0c:e2:a4: 08:2f:d5:f4:e2:d3:1e:b0:1a:d6:43:eb:f8:63:2f:6e:40:6d: c0:16:56:a4:1a:9a:08:eb:b7:05:d4:6c:94:5a:14:e2:e2:04: c6:25:a6:0c:9e:b5:76:84:a7:26:01:5c:e7:08:c8:63:3c:78: 23:c3:f7:2e:04:bc:99:be:79:e7:dd:b2:e1:43:96:3d:fd:92: 66:e7:7b:c8:17:8f:61:c8:cb:af:c0:29:a0:86:91:74:cf:4a: 3b:59:eb:ed:11:44:62:82:be:17:ce:83:59:9a:48:c0:79:a4: cf:0e:e7:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdjCxUrKq8uWJ2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGFiYmJkNzMtNThjMS00MTdmLTg1Y2UtNWEwY2Q4YjU1NGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQrg6tX6+BZ1Gkmdqij6ZjhFxlS7taZJDS/Q dGPszvdTfyb2GdBuDDDUVDOQoOHxdPZ41qGQvbBfMpmnOQkX+AIgsmkUZXcVWoh7 9vyfhJMxD3v1TKKUEbwiRh8JnmU0R3ImP6KyhVd16AsHjjzBw1kjAMG+VwI/awLE 33QtO+7r5BM9NREYoou6xG4A51KOppiuiJXMpjcHcuoAo5UgL0erZV73ejTMS0WC 93iJlEMoWnPmyJZqS99S91cn7KFlkawA21W8vIUj/oVMSlcVImuCzm2+3TOo94UR B+44aE4qWFdvNPOnPDcmCgouNGiVsEfj2O4cNT0E8o1gJ4QL+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORZHzP2/aZ565IW4ZuJADbqDLZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMzUzOTI2MGQtNWM3Yi0z ZWE0LWJkZjUtMmYwOGU4OGIzNDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFe0nKku91UoktbdvPX/MiCInBnOo4gg5FO7HqDsLrcygF48lIPoi9e8 QJqnWv/FB59/3EexReVDCUm1wqAEV2GtvcE1R/NbAfJyxC7ee0RgtGOQykrAbQ1n QYrSsPtu735kMSlgePi0tQZTcfi+iPXEFieAAdmQwiuhm7G6DRlOKMbVRm6B+7oc 1jQZMAzipAgv1fTi0x6wGtZD6/hjL25AbcAWVqQamgjrtwXUbJRaFOLiBMYlpgye tXaEpyYBXOcIyGM8eCPD9y4EvJm+eefdsuFDlj39kmbne8gXj2HIy6/AKaCGkXTP SjtZ6+0RRGKCvhfOg1maSMB5pM8O5y0= -----END CERTIFICATE-----Generated at Sun Oct 4 06:56:36 2026 by rpki-client