$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baef8468-3f58-3bbe-b21b-0654fc798773.roa File: baef8468-3f58-3bbe-b21b-0654fc798773.roa (raw, json) Hash identifier: SFSnoklmXCP3B2iwjtQoGPXepThWP1geqg2wZjh0Cpg= Subject key identifier: 4F:A6:A6:FB:D8:F7:59:8A:35:4B:55:98:41:38:F3:29:58:23:A7:3E Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584D9A202FC8646AC59CBBCEFB20 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baef8468-3f58-3bbe-b21b-0654fc798773.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 14618 IP address blocks: 170.114.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:2f:c8:64:6a:c5:9c:bb:ce:fb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=33618d5b-84ad-4cd9-8e20-c5f38f1f238a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:99:a3:9b:23:d2:c8:c7:a0:ec:de:4a:fd:ee: 38:35:c2:40:39:cf:6f:1e:84:da:95:b6:5e:55:97: 1b:c3:93:95:4a:ff:b6:6d:09:7d:3f:e4:89:db:72: 82:92:c0:dd:75:d6:69:26:14:3e:18:fa:4d:97:3a: a4:9b:6d:be:4f:cd:e9:03:e5:13:b9:e6:e9:ec:ff: 6a:11:b2:be:36:1c:b9:a8:d5:50:c6:1e:ac:d6:94: 82:bf:d8:09:bc:15:b2:84:9c:2b:32:bb:39:e4:ea: 63:2f:b1:28:fb:87:97:44:87:b0:56:3d:d2:8c:67: 44:b6:3f:76:e1:36:9d:07:e5:e5:f0:cc:2c:d0:95: 30:00:ed:3f:2b:1a:86:44:fa:3b:f4:30:83:99:ca: c2:fe:b7:0d:91:39:29:7d:eb:c1:20:9a:7c:84:14: 8b:ea:29:a2:1c:8f:89:56:4d:0a:c9:69:b1:3a:23: 1a:27:4e:4c:0f:62:d4:cd:bc:bf:6c:dd:dc:2f:0b: 39:bd:47:61:86:fb:aa:fc:9b:4e:32:9c:d8:25:bc: 59:bc:99:c4:d6:0a:31:1f:6c:ab:99:ac:a2:f8:17: 6c:48:41:b6:56:a0:76:d0:7b:49:6e:2a:aa:bf:a2: c9:03:0f:f7:3d:50:cd:45:7b:94:d9:03:ca:b1:5d: c9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A6:A6:FB:D8:F7:59:8A:35:4B:55:98:41:38:F3:29:58:23:A7:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baef8468-3f58-3bbe-b21b-0654fc798773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:01:37:2c:6c:6c:75:96:c3:63:df:c4:0d:bf:29:5b:f0:83: c5:f3:ae:a9:2b:9a:2b:6e:02:05:e5:67:83:53:89:4d:c9:7f: b3:72:89:ab:a0:af:8f:43:a9:13:c8:6d:da:79:8f:5e:75:bb: f0:12:05:2c:d3:19:6d:ab:36:72:2d:98:92:2d:dd:93:ad:01: db:1b:9c:b4:65:ec:fb:c3:19:7a:fa:44:7e:5a:25:b9:11:2f: 69:07:ac:7c:2e:b4:81:24:6d:09:be:bd:2f:83:5e:6d:eb:eb: d0:1d:e9:1c:7a:83:c2:cd:d2:71:04:85:b2:0e:82:d7:7b:38: 97:88:05:77:54:64:a0:05:69:4f:f2:ee:b4:6a:6b:09:e7:61: b2:fc:a3:93:c9:72:c4:ff:cb:40:8d:c7:71:10:f3:c9:76:aa: c5:9d:d6:a2:8a:c8:0b:77:a2:f4:64:19:16:48:82:ed:94:ba: 25:65:57:bb:70:0d:d1:24:80:47:88:6f:ad:de:bf:7d:14:6b: 17:bc:4c:3a:3e:ae:04:10:43:14:1f:88:83:8f:00:c9:d3:da: 8a:74:e0:f2:b0:fe:e8:4e:02:cd:f4:80:54:2c:dc:5b:e9:6b: 68:e1:15:bf:37:30:25:0e:cc:c0:39:6f:5f:ea:35:7f:e3:0e: 35:fc:6a:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIC/IZGrFnLvO+yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk MzM2MThkNWItODRhZC00Y2Q5LThlMjAtYzVmMzhmMWYyMzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pmjmyPSyMeg7N5K/e44NcJAOc9vHoTalbZe VZcbw5OVSv+2bQl9P+SJ23KCksDdddZpJhQ+GPpNlzqkm22+T83pA+UTuebp7P9q EbK+Nhy5qNVQxh6s1pSCv9gJvBWyhJwrMrs55OpjL7Eo+4eXRIewVj3SjGdEtj92 4TadB+Xl8Mws0JUwAO0/KxqGRPo79DCDmcrC/rcNkTkpfevBIJp8hBSL6imiHI+J Vk0KyWmxOiMaJ05MD2LUzby/bN3cLws5vUdhhvuq/JtOMpzYJbxZvJnE1goxH2yr mayi+BdsSEG2VqB20HtJbiqqv6LJAw/3PVDNRXuU2QPKsV3JXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+mpvvY91mKNUtVmEE48ylYI6c+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYmFlZjg0NjgtM2Y1OC0z YmJlLWIyMWItMDY1NGZjNzk4NzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqnJ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsBNyxsbHWWw2PfxA2/KVvwg8XzrqkrmituAgXlZ4NTiU3Jf7Nyiaug r49DqRPIbdp5j151u/ASBSzTGW2rNnItmJIt3ZOtAdsbnLRl7PvDGXr6RH5aJbkR L2kHrHwutIEkbQm+vS+DXm3r69Ad6Rx6g8LN0nEEhbIOgtd7OJeIBXdUZKAFaU/y 7rRqawnnYbL8o5PJcsT/y0CNx3EQ88l2qsWd1qKKyAt3ovRkGRZIgu2UuiVlV7tw DdEkgEeIb63ev30Uaxe8TDo+rgQQQxQfiIOPAMnT2op04PKw/uhOAs30gFQs3Fvp a2jhFb83MCUOzMA5b1/qNX/jDjX8aqM= -----END CERTIFICATE-----Generated at Wed May 13 16:09:47 2026 by rpki-client