$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa File: 5253ae96-6f67-3e85-86be-36c4a5535f8d.roa (raw, json) Hash identifier: 8VJdcfToMiSFK2Tx5OmA7L5n1Uc6Q9IUIg/mMtfPzYI= Subject key identifier: DF:2C:5F:3C:4B:2E:C6:8F:29:88:F6:AC:17:80:49:B4:4F:05:2C:57 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584F51D2AE16B57C01E270F38100 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 170.114.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:ae:16:b5:7c:01:e2:70:f3:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=98b417e1-542a-4933-988e-feeddecf9e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5d:9a:57:22:d9:f3:ad:69:4d:01:20:32:1a: 85:c9:f7:08:8d:74:44:ac:e4:11:94:9c:78:79:43: 0f:b6:44:7c:69:2d:21:5a:cf:e0:1a:2b:1f:c8:c4: 14:bb:b6:99:bc:60:89:07:1c:6d:ab:2d:ba:6a:a5: fc:02:12:29:f9:4d:31:e9:54:aa:60:fc:e1:2a:a0: 26:9b:8c:e0:c8:f9:2c:5e:b5:9f:31:81:3b:ee:b1: 12:e9:b1:be:e9:a7:ec:7e:74:cc:12:f9:d2:78:02: a2:f7:68:de:b0:be:69:0d:fb:78:86:ec:f1:3b:d1: 91:90:81:de:84:c5:07:c8:15:17:3f:3a:db:6a:09: c4:f1:42:e5:9e:9e:4c:98:e1:45:8e:18:64:62:f4: ed:37:32:c8:cc:0d:2a:da:36:63:76:a1:fb:01:ce: 9b:8d:11:da:a1:ea:3b:a1:3c:8a:8e:85:14:da:ae: 0f:ed:69:ee:09:eb:f5:7f:ed:8f:0c:75:4a:aa:8c: fe:2d:19:60:68:a2:a5:42:e5:14:ea:af:27:03:54: fa:c4:18:be:ba:c9:2b:d4:f1:6f:91:06:92:db:fc: 90:3b:d4:ab:86:10:f3:09:38:f4:41:d2:7d:62:25: d1:fd:6d:e1:f6:b3:95:33:62:45:2c:b9:f7:1f:fc: 4a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2C:5F:3C:4B:2E:C6:8F:29:88:F6:AC:17:80:49:B4:4F:05:2C:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:da:62:a2:c2:79:97:bb:f6:44:9b:8d:0a:3f:2d:20:d2:5c: b3:c8:1b:ff:9e:04:d0:40:a4:75:1d:72:e8:88:c6:64:76:0b: c1:03:c4:ce:98:c8:fe:47:01:36:f8:37:0a:78:62:21:22:a6: 6b:76:c0:26:79:7c:d5:7e:14:68:d7:e4:f5:b9:75:a2:3c:fc: 22:0e:b0:38:a7:d1:88:1f:d2:d5:05:9d:e0:13:b1:ec:b6:e6: 96:f2:64:d3:b0:e5:b0:61:c1:fe:1a:53:a0:20:87:ba:62:4c: e0:80:92:2d:33:49:f1:5f:14:68:d7:b7:b0:e1:b0:6d:bd:b0: 3a:76:21:0b:60:f7:b2:4c:43:c1:41:f0:1d:1e:93:7b:8e:4b: bd:30:d4:98:14:c8:dc:25:5e:f7:ad:48:5c:8a:17:ec:9d:0a: 3b:2d:a1:7e:e2:31:cb:99:2b:70:40:8f:38:5d:9c:93:7c:68: 7d:e7:78:7e:21:bc:56:67:87:11:d0:db:da:d4:b2:cf:c1:12: 24:dc:4c:83:af:17:79:41:ee:07:02:47:fb:23:d1:77:3d:fb: 44:cd:cd:81:06:3e:e1:10:ad:0a:83:62:51:e6:47:af:5d:94: 4a:a8:70:b4:f3:96:35:01:d3:ff:44:c6:16:8a:09:e9:88:e2: ce:b3:d1:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0q4WtXwB4nDzgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk OThiNDE3ZTEtNTQyYS00OTMzLTk4OGUtZmVlZGRlY2Y5ZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV2aVyLZ861pTQEgMhqFyfcIjXRErOQRlJx4 eUMPtkR8aS0hWs/gGisfyMQUu7aZvGCJBxxtqy26aqX8AhIp+U0x6VSqYPzhKqAm m4zgyPksXrWfMYE77rES6bG+6afsfnTMEvnSeAKi92jesL5pDft4huzxO9GRkIHe hMUHyBUXPzrbagnE8ULlnp5MmOFFjhhkYvTtNzLIzA0q2jZjdqH7Ac6bjRHaoeo7 oTyKjoUU2q4P7WnuCev1f+2PDHVKqoz+LRlgaKKlQuUU6q8nA1T6xBi+uskr1PFv kQaS2/yQO9SrhhDzCTj0QdJ9YiXR/W3h9rOVM2JFLLn3H/xKPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8sXzxLLsaPKYj2rBeASbRPBSxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNTI1M2FlOTYtNmY2Ny0z ZTg1LTg2YmUtMzZjNGE1NTM1ZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDaYqLCeZe79kSbjQo/LSDSXLPIG/+eBNBApHUdcuiIxmR2C8EDxM6Y yP5HATb4Nwp4YiEipmt2wCZ5fNV+FGjX5PW5daI8/CIOsDin0Ygf0tUFneATsey2 5pbyZNOw5bBhwf4aU6Agh7piTOCAki0zSfFfFGjXt7DhsG29sDp2IQtg97JMQ8FB 8B0ek3uOS70w1JgUyNwlXvetSFyKF+ydCjstoX7iMcuZK3BAjzhdnJN8aH3neH4h vFZnhxHQ29rUss/BEiTcTIOvF3lB7gcCR/sj0Xc9+0TNzYEGPuEQrQqDYlHmR69d lEqocLTzljUB0/9ExhaKCemI4s6z0RU= -----END CERTIFICATE-----Generated at Tue Oct 6 20:22:09 2026 by rpki-client