$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a241197b-e65d-33eb-be13-27c2b4ede840.roa File: a241197b-e65d-33eb-be13-27c2b4ede840.roa (raw, json) Hash identifier: 3/0tWcl0UB4zQzc7jS+OnLStDzdgXaakhDNa0eir20Q= Subject key identifier: 0F:1F:73:66:22:A7:26:53:82:00:5A:D0:E1:A2:21:79:1F:3F:06:2D Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584A9E9612F8F2AC46F938B15E80 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a241197b-e65d-33eb-be13-27c2b4ede840.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 31898 IP address blocks: 170.114.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:12:f8:f2:ac:46:f9:38:b1:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=4c55f676-c352-4517-9379-3539d77e56d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:90:42:ab:65:c1:71:16:ac:39:14:f8:70:10: f0:7a:0a:08:c8:4d:45:c9:1c:cd:a6:23:f4:63:67: b9:87:9e:1b:83:82:27:dd:bc:72:19:f8:48:e5:9b: 1f:61:4a:d3:e2:20:1c:d8:30:ba:56:d7:4c:5f:98: 87:d2:3b:47:a7:b5:56:a5:7b:03:bb:3a:14:b4:13: 85:81:70:ec:c3:a2:6c:26:d9:71:54:db:ce:8d:79: fb:55:c3:b2:46:2e:24:9a:e0:13:e5:5b:77:f0:54: 5c:6e:42:5c:4d:c1:a8:75:e9:e4:5d:37:31:72:e2: 3f:6a:02:4e:e0:01:09:85:f8:db:22:b1:f6:5d:98: 1d:15:06:c2:0d:9b:73:a4:91:f1:98:6e:ba:85:1c: 2a:bd:a7:a7:3b:8d:73:d6:0f:1e:e9:57:6d:88:b5: 04:4f:37:34:04:e7:67:03:b3:eb:80:85:76:fc:30: 13:5a:ba:fd:ba:58:6a:f9:85:58:7c:68:2b:bf:ac: bf:36:26:05:ca:c3:b4:74:9c:e8:fe:23:6f:90:76: ee:aa:00:44:63:2f:7e:6c:ad:4a:ef:2d:b4:f7:de: 29:31:a2:d9:03:95:79:bc:58:a1:97:fa:82:48:54: 16:c2:f6:23:82:eb:18:c6:a7:fe:f5:88:5d:83:49: 64:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1F:73:66:22:A7:26:53:82:00:5A:D0:E1:A2:21:79:1F:3F:06:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/a241197b-e65d-33eb-be13-27c2b4ede840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:96:92:5c:8f:77:3e:97:98:f4:e3:f0:e0:b4:af:f8:07:94: 40:b2:d9:24:5d:9e:27:04:8a:97:74:69:3d:b2:77:12:e4:d2: f7:c9:f1:0d:8d:1c:45:1a:4a:a2:1a:eb:9c:64:2a:ea:70:0b: a8:d5:85:dc:9b:63:7a:bb:da:40:48:4f:62:bf:95:b5:4f:57: d1:eb:06:8f:06:eb:36:2f:5e:5c:d6:c6:36:f4:11:c1:97:06: c2:ab:87:88:f4:03:b4:a8:4f:11:d3:5c:7f:bc:d2:82:dc:5d: 71:ee:07:a3:1a:03:12:0d:87:e4:59:a6:16:71:92:5f:85:d7: 68:7f:ec:a1:c9:df:50:55:16:26:dd:06:f4:b0:b1:60:83:b7: 2f:ee:51:74:10:74:fc:05:8f:34:a9:1e:3d:93:80:a3:b5:38: 21:bd:41:d4:01:9e:c9:e1:99:36:12:49:2a:e2:76:ca:11:93: f5:36:53:fb:39:3d:17:b5:3d:69:21:ef:69:59:31:3e:ec:66: 00:4b:54:5a:21:9c:34:e2:f0:6f:1c:bc:85:9d:49:8a:b2:53: 1e:b2:d6:5c:5d:99:bf:2a:ef:18:1c:48:c2:a1:d5:0c:6f:88: 03:91:21:9e:1c:07:5d:95:45:dc:b1:a9:62:4c:20:94:34:08: 40:4f:06:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelhL48qxG+TixXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NGM1NWY2NzYtYzM1Mi00NTE3LTkzNzktMzUzOWQ3N2U1NmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpBCq2XBcRasORT4cBDwegoIyE1FyRzNpiP0 Y2e5h54bg4In3bxyGfhI5ZsfYUrT4iAc2DC6VtdMX5iH0jtHp7VWpXsDuzoUtBOF gXDsw6JsJtlxVNvOjXn7VcOyRi4kmuAT5Vt38FRcbkJcTcGodenkXTcxcuI/agJO 4AEJhfjbIrH2XZgdFQbCDZtzpJHxmG66hRwqvaenO41z1g8e6VdtiLUETzc0BOdn A7PrgIV2/DATWrr9ulhq+YVYfGgrv6y/NiYFysO0dJzo/iNvkHbuqgBEYy9+bK1K 7y20994pMaLZA5V5vFihl/qCSFQWwvYjgusYxqf+9Yhdg0lkkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8fc2YipyZTggBa0OGiIXkfPwYtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYTI0MTE5N2ItZTY1ZC0z M2ViLWJlMTMtMjdjMmI0ZWRlODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuWklyPdz6XmPTj8OC0r/gHlECy2SRdnicEipd0aT2ydxLk0vfJ8Q2N HEUaSqIa65xkKupwC6jVhdybY3q72kBIT2K/lbVPV9HrBo8G6zYvXlzWxjb0EcGX BsKrh4j0A7SoTxHTXH+80oLcXXHuB6MaAxINh+RZphZxkl+F12h/7KHJ31BVFibd BvSwsWCDty/uUXQQdPwFjzSpHj2TgKO1OCG9QdQBnsnhmTYSSSridsoRk/U2U/s5 PRe1PWkh72lZMT7sZgBLVFohnDTi8G8cvIWdSYqyUx6y1lxdmb8q7xgcSMKh1Qxv iAORIZ4cB12VRdyxqWJMIJQ0CEBPBhk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:50:42 2025 by rpki-client