$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a241197b-e65d-33eb-be13-27c2b4ede840.roa File: a241197b-e65d-33eb-be13-27c2b4ede840.roa (raw, json) Hash identifier: OuvNA98o5vUZFHHV9OwO/pIlHvHYzbEz8ZUn1iY5C1s= Subject key identifier: 26:D0:3D:ED:40:C6:56:2E:8B:5D:9D:D4:B9:3A:95:FA:BF:9F:86:74 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B7F520680D1D9A386974CB640 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a241197b-e65d-33eb-be13-27c2b4ede840.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 31898 IP address blocks: 170.114.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:06:80:d1:d9:a3:86:97:4c:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=9b5d244e-90c7-4ac9-a0d7-c74e008496a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:fc:f4:1b:e7:fc:68:d6:4d:b6:08:a1:c6: c9:f7:2d:65:e6:a8:e8:31:31:0e:30:13:b8:e9:9e: b1:30:8c:94:92:c2:5b:aa:73:ed:9f:e1:24:b0:73: 2d:cf:b8:e5:69:ab:b1:fa:79:01:39:68:a1:ce:30: ad:88:49:7c:db:7b:ab:6c:c2:8f:a5:dd:fa:08:13: d4:0e:06:89:d9:21:22:c5:cc:62:32:f6:d3:39:ff: 54:93:6d:e6:c1:de:44:4b:cf:12:d2:b0:17:e2:66: fc:1b:1e:5a:5a:b5:c7:62:55:0d:0f:16:84:e0:90: 3a:6f:44:48:a3:be:2b:d3:15:db:48:bd:e7:e8:94: f2:e9:99:d9:5f:fe:b0:ec:eb:9a:57:be:ca:d0:ef: 83:ab:8d:24:52:2f:bb:1c:16:f4:98:5f:87:46:3a: cc:31:12:34:6b:1e:b1:4f:eb:f3:3c:04:ad:aa:81: 6d:00:fc:26:b0:83:24:f1:74:89:26:c0:f3:03:da: 67:b8:56:15:5f:64:2e:39:43:49:12:3c:0d:26:a9: eb:f4:d2:b1:b2:5e:14:63:a9:96:2c:40:75:24:6e: 7c:43:f7:09:62:fe:ff:11:5a:42:cf:21:16:fc:aa: c7:39:71:a2:fd:4e:d5:d0:ec:fd:6d:55:94:25:24: c1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D0:3D:ED:40:C6:56:2E:8B:5D:9D:D4:B9:3A:95:FA:BF:9F:86:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a241197b-e65d-33eb-be13-27c2b4ede840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:70:c4:0b:a0:c3:77:b1:fe:2c:90:28:ec:cc:f3:29:41:77: 67:bd:74:cf:ec:42:92:d3:7f:e0:37:54:3b:32:d1:05:cf:3c: 92:2a:69:3b:cb:e8:87:e4:82:e7:c8:77:cb:0c:da:e6:63:b7: 08:82:5d:2c:12:4e:78:54:e1:fc:be:2f:20:06:5c:90:ca:2d: 36:df:bf:36:14:2c:ee:e1:4a:68:03:a7:97:8c:8e:36:83:9f: ab:d1:c0:09:13:82:81:a5:f8:fa:23:62:86:d8:d2:92:66:3b: 9b:40:83:fa:f6:81:d3:03:50:7f:e7:33:fe:a5:ea:e2:4f:33: 4a:4f:3d:59:be:ae:2c:df:23:1c:50:5f:67:f1:c7:e4:a5:28: 0a:dd:16:ef:3e:d2:0e:df:c4:98:c6:58:4f:86:1c:5d:f3:d4: 94:75:de:a6:62:b4:1a:bf:43:a6:8f:08:0e:12:51:5e:de:55: 4e:79:39:4f:db:e9:75:b6:34:d7:50:34:8b:c2:37:55:34:1c: 25:f2:eb:54:05:d2:2e:8f:96:93:b7:22:a5:e3:e2:56:59:45: 2d:3c:a6:90:07:c6:9a:44:f6:a3:45:55:26:cf:f9:a3:83:cd: 27:e7:c2:cf:89:d3:23:75:6c:a5:0e:56:b8:4b:5e:2a:3a:ed: 6e:90:7f:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UgaA0dmjhpdMtkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OWI1ZDI0NGUtOTBjNy00YWM5LWEwZDctYzc0ZTAwODQ5NmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAH89Bvn/GjWTbYIocbJ9y1l5qjoMTEOMBO4 6Z6xMIyUksJbqnPtn+EksHMtz7jlaaux+nkBOWihzjCtiEl823urbMKPpd36CBPU DgaJ2SEixcxiMvbTOf9Uk23mwd5ES88S0rAX4mb8Gx5aWrXHYlUNDxaE4JA6b0RI o74r0xXbSL3n6JTy6ZnZX/6w7OuaV77K0O+Dq40kUi+7HBb0mF+HRjrMMRI0ax6x T+vzPAStqoFtAPwmsIMk8XSJJsDzA9pnuFYVX2QuOUNJEjwNJqnr9NKxsl4UY6mW LEB1JG58Q/cJYv7/EVpCzyEW/KrHOXGi/U7V0Oz9bVWUJSTBIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbQPe1AxlYui12d1Lk6lfq/n4Z0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYTI0MTE5N2ItZTY1ZC0z M2ViLWJlMTMtMjdjMmI0ZWRlODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5wxAugw3ex/iyQKOzM8ylBd2e9dM/sQpLTf+A3VDsy0QXPPJIqaTvL 6IfkgufId8sM2uZjtwiCXSwSTnhU4fy+LyAGXJDKLTbfvzYULO7hSmgDp5eMjjaD n6vRwAkTgoGl+PojYobY0pJmO5tAg/r2gdMDUH/nM/6l6uJPM0pPPVm+rizfIxxQ X2fxx+SlKArdFu8+0g7fxJjGWE+GHF3z1JR13qZitBq/Q6aPCA4SUV7eVU55OU/b 6XW2NNdQNIvCN1U0HCXy61QF0i6PlpO3IqXj4lZZRS08ppAHxppE9qNFVSbP+aOD zSfnws+J0yN1bKUOVrhLXio67W6QfwA= -----END CERTIFICATE-----Generated at Mon Oct 20 02:24:42 2025 by rpki-client