$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dfae5420-d488-32e7-b34e-b98d0d26ba88.roa File: dfae5420-d488-32e7-b34e-b98d0d26ba88.roa (raw, json) Hash identifier: 531+TfcrVyjU8VNuuM4FpcH4h0t3d+RMz01rmD2q/KU= Subject key identifier: 83:DF:96:7D:A6:A9:96:CC:98:8D:15:52:34:4B:D0:46:AC:CD:9E:68 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B48E1C35A62D22EA0A64FF7C0 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dfae5420-d488-32e7-b34e-b98d0d26ba88.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 170.114.65.0/24 maxlen: 24 170.114.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c3:5a:62:d2:2e:a0:a6:4f:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=3d4d9d93-b113-4a02-ae53-9f754024401e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bf:55:b2:06:21:3a:37:59:c8:b1:75:b1:16: 44:df:0a:d2:cf:e0:a3:d5:1b:78:10:e6:83:40:a0: d9:5e:47:53:bb:f9:12:41:78:18:ad:45:d5:c9:18: 34:ed:b9:2d:b7:7f:4c:7d:21:91:c2:3e:cc:76:fd: 04:7c:22:e7:fb:a7:da:16:84:7a:e0:20:9b:cc:74: bd:27:22:19:fb:7e:2d:eb:45:81:f2:f7:cc:e1:2f: f9:b9:7a:cb:5f:38:79:50:77:da:72:15:5a:d4:44: 04:8f:8c:5a:78:63:67:b4:01:40:e2:8d:55:54:ca: d2:3f:0b:94:7e:30:e3:7c:0d:0b:b8:e5:ef:98:b1: cc:9b:09:a8:7f:10:e9:89:36:8a:85:66:46:71:29: b5:81:6e:b9:71:d7:69:d6:55:f3:81:94:b5:1a:ec: 9c:23:e5:9a:82:f8:31:d8:07:c0:98:65:d3:90:3e: 85:46:7a:83:b1:c8:d0:5b:55:6f:78:22:0b:e2:f4: 44:0e:a7:94:7b:a0:12:3b:8b:80:de:e5:32:41:6f: 76:fc:b2:f8:82:ed:5a:86:29:48:0b:d1:30:d7:30: 80:f2:81:56:99:e2:e2:f5:2b:9f:a6:f2:06:ee:4b: ac:f0:03:5d:66:1b:bf:45:40:d3:a8:15:f7:39:8f: 8d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DF:96:7D:A6:A9:96:CC:98:8D:15:52:34:4B:D0:46:AC:CD:9E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dfae5420-d488-32e7-b34e-b98d0d26ba88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.65.0-170.114.66.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b3:3a:be:9a:f1:f0:53:65:da:a6:6a:77:bf:45:64:5b:4f: 35:80:71:c2:f7:5e:8f:21:d6:de:a5:28:da:81:09:56:43:be: 10:21:e6:7c:f2:4e:57:75:c9:d1:6d:40:bf:8c:ee:dc:89:a3: 47:99:8b:75:ac:fa:f7:60:b7:2e:28:1f:51:f9:d8:b2:e6:93: fc:c2:35:99:c9:0f:55:8b:8c:c5:4f:56:2a:ab:f4:82:40:e9: bf:7c:7c:14:4d:86:f0:6b:98:b6:3d:79:5b:48:a4:36:aa:9d: 08:5e:13:33:10:fb:02:76:ef:82:4a:02:b8:f0:cb:80:d2:7c: 03:c8:94:24:a5:e3:0b:c2:74:0e:bd:6b:c5:78:15:3e:0f:29: 92:3e:6d:f8:13:7b:59:de:b0:27:12:0a:8f:6d:0b:da:4e:1e: a6:55:db:94:c4:0d:af:e6:60:f0:4b:58:ba:7c:a0:ab:a8:83: 3a:75:42:fa:1a:7b:9a:71:48:6b:8f:ba:e8:52:01:62:b0:0e: 84:b5:1a:a2:c6:44:f5:b0:36:bd:75:31:4e:b5:3d:08:7d:4f: 16:4a:fd:cb:4d:95:12:08:1f:b1:0d:fa:77:4d:cd:1e:2a:06: 01:ee:ac:90:79:e8:7f:c7:f0:26:ae:fd:d1:3f:db:d3:2d:a6: d9:0f:3f:85 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEtI4cNaYtIuoKZP98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk M2Q0ZDlkOTMtYjExMy00YTAyLWFlNTMtOWY3NTQwMjQ0MDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr9VsgYhOjdZyLF1sRZE3wrSz+Cj1Rt4EOaD QKDZXkdTu/kSQXgYrUXVyRg07bktt39MfSGRwj7Mdv0EfCLn+6faFoR64CCbzHS9 JyIZ+34t60WB8vfM4S/5uXrLXzh5UHfachVa1EQEj4xaeGNntAFA4o1VVMrSPwuU fjDjfA0LuOXvmLHMmwmofxDpiTaKhWZGcSm1gW65cddp1lXzgZS1GuycI+Wagvgx 2AfAmGXTkD6FRnqDscjQW1VveCIL4vREDqeUe6ASO4uA3uUyQW92/LL4gu1ahilI C9Ew1zCA8oFWmeLi9SufpvIG7kus8ANdZhu/RUDTqBX3OY+NrQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFIPfln2mqZbMmI0VUjRL0EaszZ5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZGZhZTU0MjAtZDQ4OC0z MmU3LWIzNGUtYjk4ZDBkMjZiYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACqckED BACqckIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAZbM6vprx8FNl2qZqd79FZFtPNYBxwvdejyHW3qUo2oEJ VkO+ECHmfPJOV3XJ0W1Av4zu3ImjR5mLdaz692C3LigfUfnYsuaT/MI1mckPVYuM xU9WKqv0gkDpv3x8FE2G8GuYtj15W0ikNqqdCF4TMxD7AnbvgkoCuPDLgNJ8A8iU JKXjC8J0Dr1rxXgVPg8pkj5t+BN7Wd6wJxIKj20L2k4eplXblMQNr+Zg8EtYunyg q6iDOnVC+hp7mnFIa4+66FIBYrAOhLUaosZE9bA2vXUxTrU9CH1PFkr9y02VEggf sQ36d03NHioGAe6skHnof8fwJq790T/b0y2m2Q8/hQ== -----END CERTIFICATE-----Generated at Mon Oct 20 09:24:30 2025 by rpki-client