$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/aced6c3c-599e-3d5e-8ad8-b92918504da2.roa File: aced6c3c-599e-3d5e-8ad8-b92918504da2.roa (raw, json) Hash identifier: D52Z6l6dnCTRwXX2tkx1/tUvStwdvv0EsSi8CiyOtBs= Subject key identifier: 6F:B2:4E:10:63:DC:35:60:69:CE:26:E5:D5:FC:ED:C3:A2:11:9F:9D Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B21CC16668FCD8AE2A387AAC0 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/aced6c3c-599e-3d5e-8ad8-b92918504da2.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 31898 IP address blocks: 170.114.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:16:66:8f:cd:8a:e2:a3:87:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=c6a2bfd7-8210-452d-b552-09dcef47cf11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:38:e2:c0:11:b1:de:07:bf:8a:3f:3e:4f:89: 73:30:d0:e3:b0:fc:dd:d1:cc:3e:c0:c0:01:01:63: 59:43:3d:a9:2b:55:70:c1:0c:36:7d:a3:57:e8:99: 45:50:1f:6e:95:b9:44:c3:a2:ba:68:53:16:56:1e: 6b:41:74:35:c1:6f:af:6c:03:7d:2a:b4:fa:0d:fa: af:f2:4b:c7:c1:d1:9d:21:bf:dc:4a:3a:8b:88:5a: 33:8d:7b:8f:bd:b6:74:c2:48:d6:40:a5:d1:06:e9: 7a:34:61:ac:f8:42:4f:f6:70:36:3f:39:07:fa:c5: a8:bc:6b:75:a4:b1:9b:40:0d:0b:d4:aa:fc:02:a0: 7d:3d:14:1e:d8:f6:50:58:88:83:71:3a:05:89:8f: fd:f2:28:6d:b1:fc:9c:f1:e5:d5:86:55:81:b2:38: 8f:26:fa:8b:62:bf:d0:0e:93:1b:61:8e:c5:94:59: ec:bb:dc:93:0c:af:5b:74:4c:0a:e5:2b:36:e7:87: 27:1e:6b:3f:1c:82:74:c7:0d:20:39:0a:9c:68:c6: fa:85:c5:01:ea:1b:22:ad:3d:9d:7e:ab:d7:d7:9c: 7b:ad:c9:70:36:35:c1:a8:10:fa:1b:bc:64:9f:76: a7:5e:13:d0:98:68:6f:f1:2c:e9:0d:5a:6d:dc:84: 3f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B2:4E:10:63:DC:35:60:69:CE:26:E5:D5:FC:ED:C3:A2:11:9F:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/aced6c3c-599e-3d5e-8ad8-b92918504da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:1f:a5:ec:65:8c:b7:7a:1c:a1:07:fe:16:84:47:72:ff:49: a2:97:0e:d7:45:af:3a:e3:c8:bf:5c:f1:69:41:de:84:00:61: eb:5b:6a:e0:a0:4f:4a:f8:7c:70:15:68:75:e2:62:52:e9:a4: c7:b2:c1:73:a0:56:e1:54:47:a6:8f:76:f4:66:8d:ec:aa:1e: 04:b0:9c:ae:d8:da:ad:04:bd:1a:eb:7a:aa:d1:de:a2:cf:34: 82:e6:f3:4a:9a:8e:f6:83:e0:9c:f9:04:e2:b8:d9:e9:ad:3f: a2:1b:09:58:a9:65:44:cb:ff:d0:60:75:3d:90:69:81:97:05: ca:65:34:18:f3:8e:76:ed:01:b6:60:4f:99:ed:75:c0:ab:4b: d5:88:45:af:3a:97:9b:68:27:e5:5f:e1:ae:d6:e5:61:3d:81: f8:0d:f4:60:e0:bd:45:96:6a:3f:dd:9c:a0:ac:82:2a:62:54: 75:29:e6:5a:75:2c:36:d7:ae:fa:49:e7:ce:ef:17:1b:86:c1: e9:7b:60:b6:2a:b4:ea:36:c2:4a:6d:0f:cc:e4:71:1a:2d:d5: 9d:c7:ab:a4:93:60:9a:52:10:49:f9:14:e5:9c:4b:1f:36:d6: 20:80:43:e9:75:99:46:9a:d1:0e:7e:aa:44:07:a9:a2:52:cc: 2e:d4:78:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzBZmj82K4qOHqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk YzZhMmJmZDctODIxMC00NTJkLWI1NTItMDlkY2VmNDdjZjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijjiwBGx3ge/ij8+T4lzMNDjsPzd0cw+wMAB AWNZQz2pK1VwwQw2faNX6JlFUB9ulblEw6K6aFMWVh5rQXQ1wW+vbAN9KrT6Dfqv 8kvHwdGdIb/cSjqLiFozjXuPvbZ0wkjWQKXRBul6NGGs+EJP9nA2PzkH+sWovGt1 pLGbQA0L1Kr8AqB9PRQe2PZQWIiDcToFiY/98ihtsfyc8eXVhlWBsjiPJvqLYr/Q DpMbYY7FlFnsu9yTDK9bdEwK5Ss254cnHms/HIJ0xw0gOQqcaMb6hcUB6hsirT2d fqvX15x7rclwNjXBqBD6G7xkn3anXhPQmGhv8SzpDVpt3IQ/IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+yThBj3DVgac4m5dX87cOiEZ+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYWNlZDZjM2MtNTk5ZS0z ZDVlLThhZDgtYjkyOTE4NTA0ZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqnJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgfpexljLd6HKEH/haER3L/SaKXDtdFrzrjyL9c8WlB3oQAYetbauCg T0r4fHAVaHXiYlLppMeywXOgVuFUR6aPdvRmjeyqHgSwnK7Y2q0EvRrreqrR3qLP NILm80qajvaD4Jz5BOK42emtP6IbCVipZUTL/9BgdT2QaYGXBcplNBjzjnbtAbZg T5ntdcCrS9WIRa86l5toJ+Vf4a7W5WE9gfgN9GDgvUWWaj/dnKCsgipiVHUp5lp1 LDbXrvpJ587vFxuGwel7YLYqtOo2wkptD8zkcRot1Z3Hq6STYJpSEEn5FOWcSx82 1iCAQ+l1mUaa0Q5+qkQHqaJSzC7UeBk= -----END CERTIFICATE-----Generated at Sun Oct 19 23:41:42 2025 by rpki-client