$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c1723af3-a5bc-375f-9b91-229973f8f24b.roa File: c1723af3-a5bc-375f-9b91-229973f8f24b.roa (raw, json) Hash identifier: gpP8FecmdtnQCD6/oqbN70rFa++6psbRwFNHB3aPiDQ= Subject key identifier: 9B:1D:9F:DE:40:90:23:7A:E4:AC:3C:BB:55:B2:3A:EB:E6:4B:90:14 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B4D11CEC2BB82F64531A67FB8 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c1723af3-a5bc-375f-9b91-229973f8f24b.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 170.114.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:ce:c2:bb:82:f6:45:31:a6:7f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=5ecd9683-cb86-4b5a-9db6-1197c3e18f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:7c:01:1d:b5:c3:bc:0d:54:d4:0f:db:45: e8:67:ea:71:5c:5c:2b:6e:ce:2b:9f:bb:81:77:b9: f0:09:e5:ef:fd:fc:17:b7:61:88:1d:de:d8:a8:81: 3b:d6:8d:da:f5:29:f1:ac:f2:31:d8:a2:05:8a:ae: 13:31:1e:09:48:b7:2b:27:aa:26:c6:5c:f7:09:2d: e0:df:3b:37:b6:61:91:92:75:48:1c:6b:be:c9:72: 95:4a:b4:2e:80:0e:d5:91:01:58:0d:a1:ee:4c:32: f7:e8:fc:1c:10:8b:31:b4:aa:fe:d2:d2:17:b9:80: 48:73:ee:f4:69:da:1f:a3:d3:75:d5:57:10:fe:6c: e7:2e:d2:0b:c6:30:3e:18:1b:12:60:32:db:c0:87: b5:06:e2:41:22:c1:c5:c0:e4:94:22:7d:e1:ea:29: a6:5f:fd:59:9f:d7:23:69:b0:72:c9:36:e8:8d:46: 9e:b9:d8:0a:d9:df:82:e7:d4:c4:54:47:6d:a7:e4: d0:2a:00:4c:ac:2f:1f:63:6b:f8:1a:86:29:d4:02: d8:82:58:45:b6:f1:29:c2:62:4c:d3:fb:c1:de:fd: 65:6d:14:58:35:7b:c5:0b:b6:98:d6:e9:4e:3c:ca: 42:29:72:4e:14:44:35:fc:6f:c2:6f:66:a3:3d:ca: 5c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1D:9F:DE:40:90:23:7A:E4:AC:3C:BB:55:B2:3A:EB:E6:4B:90:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/c1723af3-a5bc-375f-9b91-229973f8f24b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:03:33:d8:e0:b8:39:9a:29:25:de:28:ba:5e:d2:b6:0c:ed: 3b:08:f9:91:18:e5:65:1e:4e:89:a9:53:1a:02:f8:b6:b2:d6: d0:4f:93:5f:cf:41:0e:a9:70:9b:ee:ee:2b:09:87:f0:c5:58: 91:e6:50:e0:ec:56:d4:5e:1a:af:38:3f:9f:c9:83:57:ba:63: 59:ab:77:df:ef:e0:c8:8c:91:68:a3:03:19:91:1b:71:de:84: db:27:f7:52:89:ab:7d:03:e5:08:3e:68:8b:e4:ee:10:7d:5a: 72:19:51:35:ca:9b:e5:d2:7e:9f:8d:bd:a3:eb:c4:c3:62:8e: 6c:43:93:4a:a6:b5:eb:e2:a1:29:46:21:02:5f:d2:36:58:2c: 06:40:34:8b:2e:0d:db:41:51:b0:c3:02:f5:88:4b:59:e7:c0: f6:e3:4f:ac:23:c3:03:24:30:ac:3f:a3:90:89:f4:b0:0f:6e: 0b:2e:e8:2c:43:63:9b:3e:52:8a:10:1b:24:2c:ad:20:64:98: 99:04:65:83:6a:b8:54:53:6d:78:ab:c6:ba:ec:22:7a:84:ce: 8a:0b:27:71:b1:d7:a2:36:31:5b:5d:78:41:5a:65:b1:ad:18: b1:65:de:6f:d6:58:79:66:ab:ce:ba:cc:2c:f8:c5:fc:ad:be: c4:75:a5:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEc7Cu4L2RTGmf7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk NWVjZDk2ODMtY2I4Ni00YjVhLTlkYjYtMTE5N2MzZTE4Zjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5x8AR21w7wNVNQP20XoZ+pxXFwrbs4rn7uB d7nwCeXv/fwXt2GIHd7YqIE71o3a9SnxrPIx2KIFiq4TMR4JSLcrJ6omxlz3CS3g 3zs3tmGRknVIHGu+yXKVSrQugA7VkQFYDaHuTDL36PwcEIsxtKr+0tIXuYBIc+70 adofo9N11VcQ/mznLtILxjA+GBsSYDLbwIe1BuJBIsHFwOSUIn3h6immX/1Zn9cj abByyTbojUaeudgK2d+C59TEVEdtp+TQKgBMrC8fY2v4GoYp1ALYglhFtvEpwmJM 0/vB3v1lbRRYNXvFC7aY1ulOPMpCKXJOFEQ1/G/Cb2ajPcpcWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsdn95AkCN65Kw8u1WyOuvmS5AUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYzE3MjNhZjMtYTViYy0z NzVmLTliOTEtMjI5OTczZjhmMjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnI1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoDM9jguDmaKSXeKLpe0rYM7TsI+ZEY5WUeTompUxoC+Lay1tBPk1/P QQ6pcJvu7isJh/DFWJHmUODsVtReGq84P5/Jg1e6Y1mrd9/v4MiMkWijAxmRG3He hNsn91KJq30D5Qg+aIvk7hB9WnIZUTXKm+XSfp+NvaPrxMNijmxDk0qmtevioSlG IQJf0jZYLAZANIsuDdtBUbDDAvWIS1nnwPbjT6wjwwMkMKw/o5CJ9LAPbgsu6CxD Y5s+UooQGyQsrSBkmJkEZYNquFRTbXirxrrsInqEzooLJ3Gx16I2MVtdeEFaZbGt GLFl3m/WWHlmq866zCz4xfytvsR1pew= -----END CERTIFICATE-----Generated at Mon Oct 20 13:10:06 2025 by rpki-client