$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3b4ada3f-1b54-3a25-ba4a-96aecea3ee3e.roa File: 3b4ada3f-1b54-3a25-ba4a-96aecea3ee3e.roa (raw, json) Hash identifier: Nvniar+BtVMtTMnA2Op3WmWREkltEvLUW7mD4MWHoOQ= Subject key identifier: 8E:AF:00:49:D2:C6:29:D5:6F:3A:E9:31:70:05:8A:A9:C1:EA:3F:9E Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584F3FAD30D35CD8CCEC29E0E280 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3b4ada3f-1b54-3a25-ba4a-96aecea3ee3e.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 170.114.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:30:d3:5c:d8:cc:ec:29:e0:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=3d874dd1-3237-446f-b1c1-fe6464676e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c7:82:99:d7:02:66:13:a7:3b:8d:82:21:2a: 5a:08:35:4b:38:68:53:cc:68:c9:55:54:03:9c:72: d9:45:3d:38:ce:5d:c3:0d:d4:0b:67:9b:6a:8f:be: dd:26:59:1d:26:e3:6c:18:a7:12:37:c0:fb:39:83: 64:3b:3a:f1:59:9b:93:2c:a7:da:60:4c:02:4c:09: 17:58:fa:7c:46:8d:33:09:84:7a:cb:d2:0f:d6:53: 56:49:09:a2:3f:0d:3c:8c:48:06:4f:89:8e:17:b3: bb:64:0b:a2:69:a8:a7:2f:1e:09:97:84:94:1f:a4: 85:d3:80:3f:75:94:c1:05:f8:dd:d8:67:e2:9d:14: d7:3d:28:91:da:ef:40:ec:ff:c5:e1:cd:2c:fc:e7: 1c:4a:c6:ea:ad:6b:12:5a:b1:86:01:20:3d:81:f8: c7:71:e9:ba:bd:00:a7:c9:4e:66:f3:e0:2c:8a:1f: 00:70:59:b4:0a:9a:79:35:c2:2f:c8:e2:40:5c:a9: d2:ec:d5:eb:db:b6:75:ff:68:f2:46:ad:d3:0d:66: ce:02:c5:3f:6f:17:ba:a6:c2:7d:80:aa:c8:8e:cb: 34:68:0c:dd:28:ef:13:84:10:4e:ea:5b:89:83:8b: 6c:20:b0:cb:e7:e8:c5:bc:51:1c:fd:c3:f5:47:5f: 46:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AF:00:49:D2:C6:29:D5:6F:3A:E9:31:70:05:8A:A9:C1:EA:3F:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3b4ada3f-1b54-3a25-ba4a-96aecea3ee3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:f8:88:52:44:9d:3b:98:a8:04:16:1f:e6:bf:fb:a3:ea:6b: c5:84:70:7a:8c:27:c1:d5:bc:76:c9:5e:d0:fb:98:b4:3e:e4: d9:b2:d8:a8:d0:5b:93:5e:87:b8:29:f5:87:73:35:4d:08:7a: 6e:40:24:ec:25:be:dc:cc:14:00:49:f8:aa:56:e5:8a:fe:3e: 23:fe:6d:3c:e8:79:26:03:0b:03:06:6a:f7:e3:73:21:17:2a: d3:ec:b9:62:b2:72:74:35:01:21:6a:f9:10:05:af:4b:19:54: 21:14:33:77:47:84:4a:83:1b:43:ed:3c:3c:e3:77:ad:b9:06: b8:a2:20:29:6b:58:ba:b8:a1:d1:52:49:fa:62:af:17:e4:63: 5e:fc:c7:86:06:a1:de:fa:d5:30:73:fd:48:2f:82:c2:42:54: b2:a7:c0:b9:5e:b0:6b:3f:ac:40:68:07:ba:f6:00:2a:48:ff: 8b:01:98:d3:06:0e:f5:c5:85:5b:89:0e:0a:7f:2d:e9:8f:3c: da:bd:2c:58:cb:d0:66:fd:5d:fc:1a:83:a5:a6:7e:8b:74:a2: 5d:16:ae:6f:a6:3f:db:14:7f:c9:19:8c:49:a4:ba:73:65:1c: ed:36:8f:75:04:5d:98:29:ca:e3:06:0c:bc:fb:cf:73:b9:31: da:89:60:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTDTXNjM7Cng4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk M2Q4NzRkZDEtMzIzNy00NDZmLWIxYzEtZmU2NDY0Njc2ZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoceCmdcCZhOnO42CISpaCDVLOGhTzGjJVVQD nHLZRT04zl3DDdQLZ5tqj77dJlkdJuNsGKcSN8D7OYNkOzrxWZuTLKfaYEwCTAkX WPp8Ro0zCYR6y9IP1lNWSQmiPw08jEgGT4mOF7O7ZAuiaainLx4Jl4SUH6SF04A/ dZTBBfjd2GfinRTXPSiR2u9A7P/F4c0s/OccSsbqrWsSWrGGASA9gfjHcem6vQCn yU5m8+Asih8AcFm0Cpp5NcIvyOJAXKnS7NXr27Z1/2jyRq3TDWbOAsU/bxe6psJ9 gKrIjss0aAzdKO8ThBBO6luJg4tsILDL5+jFvFEc/cP1R19GcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6vAEnSxinVbzrpMXAFiqnB6j+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvM2I0YWRhM2YtMWI1NC0z YTI1LWJhNGEtOTZhZWNlYTNlZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnIxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJj4iFJEnTuYqAQWH+a/+6Pqa8WEcHqMJ8HVvHbJXtD7mLQ+5Nmy2KjQ W5Neh7gp9YdzNU0Iem5AJOwlvtzMFABJ+KpW5Yr+PiP+bTzoeSYDCwMGavfjcyEX KtPsuWKycnQ1ASFq+RAFr0sZVCEUM3dHhEqDG0PtPDzjd625BriiIClrWLq4odFS SfpirxfkY178x4YGod761TBz/UgvgsJCVLKnwLlesGs/rEBoB7r2ACpI/4sBmNMG DvXFhVuJDgp/LemPPNq9LFjL0Gb9Xfwag6Wmfot0ol0Wrm+mP9sUf8kZjEmkunNl HO02j3UEXZgpyuMGDLz7z3O5MdqJYCY= -----END CERTIFICATE-----Generated at Sat Oct 10 04:41:03 2026 by rpki-client