$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/420156b9-fed8-3148-a9b6-7f55eba66994.roa File: 420156b9-fed8-3148-a9b6-7f55eba66994.roa (raw, json) Hash identifier: RwrmAu0VrT2CdJr7/aEpXTgIopnQmFwBZArIN8geE+4= Subject key identifier: 8F:C4:98:D7:69:19:5B:40:F8:36:8F:59:A3:84:68:40:76:26:B5:EC Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584D2D3F7BF33EF0071AB159C6C0 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/420156b9-fed8-3148-a9b6-7f55eba66994.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 31898 IP address blocks: 170.114.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:7b:f3:3e:f0:07:1a:b1:59:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=cfc8b56a-c017-43cf-91bb-d0c12b6893d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e4:5d:d2:a7:a6:97:17:a7:42:1a:ef:1e:8e: d2:7d:a3:6b:a9:96:c9:8d:b9:2f:35:d6:eb:b5:9d: 9a:45:07:52:58:41:74:5e:65:59:ef:92:f7:34:1d: 9d:97:44:e0:d8:d6:88:3f:64:63:06:30:3d:8c:41: a9:ec:0b:0c:b8:70:80:30:89:a7:2b:df:22:60:60: 3d:f4:c7:32:a9:ae:91:77:98:4e:47:44:7b:54:02: 4c:63:78:d4:a2:4c:d6:d6:45:d2:e1:d5:b7:81:e8: db:6e:8b:51:44:92:ae:3d:c2:c7:a8:f3:74:57:7f: 86:6a:27:33:6b:ec:e6:4d:c4:52:40:18:5a:dc:1b: b6:f9:1d:88:d9:78:6b:3f:a6:93:16:1c:5c:d0:81: 81:06:33:59:79:48:3e:8f:8b:37:55:be:a1:83:99: 8f:7d:a8:7e:db:d0:d2:79:7e:c1:4c:4a:76:4c:df: b0:54:f7:06:df:4f:b0:0c:cb:5d:3e:50:18:e6:07: f9:ed:fc:68:c3:73:d6:ae:36:f1:0c:d2:be:a2:54: 84:e4:de:1b:22:b5:c0:82:6b:c2:db:15:16:1f:3f: c0:3e:85:ba:55:8f:7f:97:60:86:4b:01:44:d1:e8: e2:46:21:be:d8:85:b1:34:17:96:65:45:55:9e:fe: 54:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C4:98:D7:69:19:5B:40:F8:36:8F:59:A3:84:68:40:76:26:B5:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/420156b9-fed8-3148-a9b6-7f55eba66994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:6a:4e:0f:69:ec:6f:45:8d:72:2e:ca:b9:41:67:dc:99:c1: d4:5a:54:a2:25:7c:1f:ca:95:19:5b:53:72:18:fa:98:6e:f9: b6:fb:2e:37:8a:82:2d:9f:88:37:2d:98:23:e7:0e:11:42:65: 55:be:0e:5a:da:14:fc:7e:c3:cb:f9:7b:75:b7:f8:9f:89:d3: c0:03:c8:5d:a5:dd:b4:15:85:2c:a9:8c:88:62:95:b3:87:25: 74:e5:ac:02:39:1e:15:f8:fc:ae:7a:a6:7a:92:e6:e1:10:b7: 88:72:60:70:c1:13:19:29:3f:9f:1b:e1:e0:bd:55:00:69:ed: 2c:2e:71:bc:bf:9f:75:ab:33:09:07:ef:ec:16:aa:ad:61:26: e9:e8:45:f4:f4:9e:90:7e:3c:bd:09:d9:99:54:67:cf:62:57: 02:59:75:4a:28:f9:c7:85:40:09:23:be:34:f6:b9:b6:bf:30: 0f:2b:bf:5a:99:cc:95:5a:5e:03:1e:43:61:11:16:8f:4a:5f: 47:fe:4a:b2:df:29:8c:67:8c:f8:cb:24:ee:c7:5f:c2:11:30: 1b:21:0b:b1:e0:c8:32:e3:4d:bf:78:b7:89:13:e2:5c:46:6d: 7c:f2:29:53:f3:37:5a:f1:cc:8a:1c:37:58:ab:24:27:be:a4: 8b:82:03:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP3vzPvAHGrFZxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk Y2ZjOGI1NmEtYzAxNy00M2NmLTkxYmItZDBjMTJiNjg5M2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeRd0qemlxenQhrvHo7SfaNrqZbJjbkvNdbr tZ2aRQdSWEF0XmVZ75L3NB2dl0Tg2NaIP2RjBjA9jEGp7AsMuHCAMImnK98iYGA9 9Mcyqa6Rd5hOR0R7VAJMY3jUokzW1kXS4dW3gejbbotRRJKuPcLHqPN0V3+Gaicz a+zmTcRSQBha3Bu2+R2I2XhrP6aTFhxc0IGBBjNZeUg+j4s3Vb6hg5mPfah+29DS eX7BTEp2TN+wVPcG30+wDMtdPlAY5gf57fxow3PWrjbxDNK+olSE5N4bIrXAgmvC 2xUWHz/APoW6VY9/l2CGSwFE0ejiRiG+2IWxNBeWZUVVnv5UXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/EmNdpGVtA+DaPWaOEaEB2JrXsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNDIwMTU2YjktZmVkOC0z MTQ4LWE5YjYtN2Y1NWViYTY2OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqnJGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpqTg9p7G9FjXIuyrlBZ9yZwdRaVKIlfB/KlRlbU3IY+phu+bb7LjeK gi2fiDctmCPnDhFCZVW+DlraFPx+w8v5e3W3+J+J08ADyF2l3bQVhSypjIhilbOH JXTlrAI5HhX4/K56pnqS5uEQt4hyYHDBExkpP58b4eC9VQBp7Swucby/n3WrMwkH 7+wWqq1hJunoRfT0npB+PL0J2ZlUZ89iVwJZdUoo+ceFQAkjvjT2uba/MA8rv1qZ zJVaXgMeQ2ERFo9KX0f+SrLfKYxnjPjLJO7HX8IRMBshC7HgyDLjTb94t4kT4lxG bXzyKVPzN1rxzIocN1irJCe+pIuCA58= -----END CERTIFICATE-----Generated at Thu Mar 26 17:56:19 2026 by rpki-client