$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c1723af3-a5bc-375f-9b91-229973f8f24b.roa File: c1723af3-a5bc-375f-9b91-229973f8f24b.roa (raw, json) Hash identifier: pBYO8rmR8csPTUHQYRccNFSWaA0H6FSVd5jPSpQUwUk= Subject key identifier: D1:56:29:59:89:58:C3:95:21:9E:A8:30:58:EA:16:2E:EB:BD:DA:CD Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584F4973F893360FD7FC9687C700 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c1723af3-a5bc-375f-9b91-229973f8f24b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 170.114.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f8:93:36:0f:d7:fc:96:87:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8ca5a545-890a-4d97-ac34-d3c37f6af388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:49:4a:b1:eb:09:de:0e:ef:34:15:f7:f3:e3: 48:13:d8:96:45:8a:60:b9:8b:b3:91:f1:72:52:44: d6:79:e9:a7:bf:90:e4:2e:df:04:bf:42:e7:33:4e: 0b:a0:af:26:fa:1f:c7:bc:c0:0e:76:2f:f5:ca:de: 94:c6:c6:4a:d2:b9:0b:4c:b0:0d:67:82:22:bd:6e: be:c9:e5:a3:cc:74:8a:52:10:35:da:47:82:d2:ff: bc:b7:a8:3b:ad:fd:7e:2e:c7:9a:ec:ff:43:e5:ba: 48:11:63:e2:e3:37:15:52:a7:4f:14:e8:5d:f2:cd: 5b:89:a4:02:4d:da:f5:20:5c:1c:64:32:0f:3f:c9: 13:fd:c7:bc:a9:9b:70:a2:6c:85:ff:a5:e9:9c:2b: 91:bf:d8:8f:e3:2e:72:b7:47:50:46:b0:ea:ab:1d: 3b:36:25:ea:f4:03:fd:6e:fc:b4:d2:e1:e6:bd:d8: c3:13:75:a0:2c:1f:05:17:30:96:9e:40:8f:b8:8f: 0a:19:02:48:b5:1e:48:99:06:98:01:8b:c0:10:0d: eb:eb:1f:f8:16:88:78:e0:c5:45:fb:30:05:c3:53: 8d:6b:51:07:3b:72:fc:7b:7b:99:88:a0:28:1a:e6: 5c:c3:55:01:8f:17:d2:9e:6c:bb:9f:7b:b7:7d:f1: 33:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:56:29:59:89:58:C3:95:21:9E:A8:30:58:EA:16:2E:EB:BD:DA:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c1723af3-a5bc-375f-9b91-229973f8f24b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:d0:89:dc:f1:50:88:52:e5:9f:51:73:a4:29:80:29:52:48: 87:37:a0:2e:e5:7f:61:ed:fd:63:52:1d:aa:0e:6e:fb:b0:27: 42:0f:67:c4:36:20:83:c2:11:b0:5e:3f:50:5c:73:0c:ba:2e: b6:d2:53:99:b0:b8:b7:54:ff:c0:ea:a1:46:e8:e3:2a:4c:49: db:09:2b:ca:32:22:1f:32:84:b2:92:de:72:22:dd:95:7a:40: a2:7b:a4:6d:6f:e4:6b:54:75:52:6b:bb:db:02:b5:f9:76:bd: b9:32:c9:84:f6:bf:06:25:22:46:63:96:2c:f6:64:e0:55:29: 38:64:3e:ed:bc:1f:bd:b6:57:7f:61:96:cb:c8:8e:83:3a:a1: 29:1e:69:7c:ba:8c:c6:c9:7a:6b:88:4e:3c:52:14:8c:06:98: d7:84:2b:43:0c:3a:07:93:11:fe:fd:1f:42:db:bf:7f:63:30: 44:3d:fd:97:e0:f5:7d:0a:6b:78:53:5e:b1:ad:3c:0e:fa:0f: 90:2b:1f:cb:20:fa:a6:9d:43:06:0f:66:bb:a3:c3:b9:8d:dd: 1f:fc:9d:41:5c:f4:57:cf:a4:75:f5:55:5f:90:ed:cc:c6:64: f3:2d:35:89:b0:4b:39:8a:38:54:b5:75:27:52:08:33:62:54: 29:e1:94:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/iTNg/X/JaHxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGNhNWE1NDUtODkwYS00ZDk3LWFjMzQtZDNjMzdmNmFmMzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0lKsesJ3g7vNBX38+NIE9iWRYpguYuzkfFy UkTWeemnv5DkLt8Ev0LnM04LoK8m+h/HvMAOdi/1yt6UxsZK0rkLTLANZ4IivW6+ yeWjzHSKUhA12keC0v+8t6g7rf1+Lsea7P9D5bpIEWPi4zcVUqdPFOhd8s1biaQC Tdr1IFwcZDIPP8kT/ce8qZtwomyF/6XpnCuRv9iP4y5yt0dQRrDqqx07NiXq9AP9 bvy00uHmvdjDE3WgLB8FFzCWnkCPuI8KGQJItR5ImQaYAYvAEA3r6x/4Foh44MVF +zAFw1ONa1EHO3L8e3uZiKAoGuZcw1UBjxfSnmy7n3u3ffEz4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFWKVmJWMOVIZ6oMFjqFi7rvdrNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYzE3MjNhZjMtYTViYy0z NzVmLTliOTEtMjI5OTczZjhmMjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnI1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHQidzxUIhS5Z9Rc6QpgClSSIc3oC7lf2Ht/WNSHaoObvuwJ0IPZ8Q2 IIPCEbBeP1Bccwy6LrbSU5mwuLdU/8DqoUbo4ypMSdsJK8oyIh8yhLKS3nIi3ZV6 QKJ7pG1v5GtUdVJru9sCtfl2vbkyyYT2vwYlIkZjliz2ZOBVKThkPu28H722V39h lsvIjoM6oSkeaXy6jMbJemuITjxSFIwGmNeEK0MMOgeTEf79H0Lbv39jMEQ9/Zfg 9X0Ka3hTXrGtPA76D5ArH8sg+qadQwYPZrujw7mN3R/8nUFc9FfPpHX1VV+Q7czG ZPMtNYmwSzmKOFS1dSdSCDNiVCnhlNI= -----END CERTIFICATE-----Generated at Fri Oct 9 22:44:06 2026 by rpki-client