
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0ff32278-5321-3166-a4d6-1002760b74a9.roa
File: 0ff32278-5321-3166-a4d6-1002760b74a9.roa (raw, json)
Hash identifier: IULx/8H/PbP9+2awA3inMDNH9SymILQlgyqJ84zFKG8=
Subject key identifier: 25:1C:21:2E:AB:3F:24:89:EE:D5:B5:43:E1:88:88:F1:11:3A:5D:76
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F4328584EAFE6F5522BEBCB29881BC780
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0ff32278-5321-3166-a4d6-1002760b74a9.roa
Signing time: Sat 01 Aug 2026 01:00:12 +0000
ROA not before: Sat 01 Aug 2026 01:00:12 +0000
ROA not after: Fri 30 Oct 2026 01:00:12 +0000
asID: 31898
IP address blocks: 170.114.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:af:e6:f5:52:2b:eb:cb:29:88:1b:c7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Aug 1 01:00:12 2026 GMT
Not After : Oct 30 01:00:12 2026 GMT
Subject: CN=e158d9b1-be44-4a3b-a852-87cd2f406491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:70:7d:19:ac:1d:75:53:07:78:56:9b:6c:
21:85:84:81:33:cc:03:67:96:5d:f7:ea:f3:ae:55:
6d:30:c6:5a:9c:1d:bb:87:87:dc:2e:e6:c0:51:2a:
75:d7:d0:af:79:5b:c7:3d:f7:ed:9a:29:12:1b:34:
4a:d5:0d:db:85:3a:52:69:d9:d1:fe:8f:d9:36:ae:
67:58:82:5a:57:df:b3:f6:c9:6b:c9:b2:26:02:81:
30:96:59:8e:b7:77:76:19:4a:8b:12:29:f2:7c:11:
19:db:ad:a4:00:bf:e6:35:a8:0b:58:98:f9:f6:ad:
95:dc:88:b6:68:7c:9a:09:c2:08:84:27:7a:12:e0:
23:a4:49:9f:9d:0c:c1:83:cf:05:68:ae:50:15:32:
b1:15:2f:e4:03:3e:2c:75:dc:74:f9:98:9f:af:86:
5d:af:98:7b:d2:1b:b7:9b:63:51:7f:45:77:56:f1:
df:d9:0e:f5:a9:73:3f:6f:74:cf:01:6f:52:25:a1:
c0:93:6e:cd:bb:40:68:e1:31:e6:29:2f:ea:17:1c:
52:6c:c0:02:ac:78:d5:0f:54:cd:f2:b3:4e:22:25:
24:93:c1:a8:7b:44:ec:25:a3:92:0d:f2:b0:d1:fe:
e4:dd:ef:4f:df:7c:48:fc:ad:a3:51:33:a6:6e:b5:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1C:21:2E:AB:3F:24:89:EE:D5:B5:43:E1:88:88:F1:11:3A:5D:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0ff32278-5321-3166-a4d6-1002760b74a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
170.114.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:ae:ca:f5:27:0f:b2:3f:31:40:5b:cd:44:0d:05:80:52:ca:
3e:14:e6:f7:c5:cf:34:c5:94:c2:7f:4d:cf:d6:bc:94:a8:c7:
f3:8a:99:dd:77:16:dc:06:bd:03:f4:54:d3:fc:07:90:84:fa:
d6:3a:79:ec:7a:be:8d:3d:4f:cd:00:f4:aa:87:77:aa:bf:28:
7c:2b:f5:41:ec:0f:7e:21:25:79:43:10:15:1b:01:74:d2:1e:
49:9b:2c:0d:8f:81:10:7d:1c:a1:a5:21:26:4c:30:db:cd:13:
f0:66:df:7d:ba:e1:78:5b:a9:0a:58:39:24:25:c9:b2:9b:5d:
31:fd:d1:39:12:b7:68:73:54:cd:d8:ba:50:c8:6a:7c:37:35:
6a:bd:e4:fd:31:6f:67:88:3c:92:91:71:b0:8f:46:68:39:7b:
c0:ef:e6:95:0d:52:92:3c:7b:08:32:02:da:3d:6f:2c:98:eb:
56:3a:e1:60:15:58:8f:37:46:37:03:c1:3a:fe:53:44:7c:7d:
04:c3:9b:de:fb:f1:20:50:0a:06:70:b7:0e:ab:6b:c4:a3:8c:
2c:9e:74:1b:a6:ec:30:9e:66:cf:09:80:c6:48:67:22:1c:6d:
d6:fd:cd:bd:71:c0:85:89:db:18:85:2d:47:6d:d4:28:b2:fa:
60:07:ee:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vVSK+vLKYgbx4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk
ZTE1OGQ5YjEtYmU0NC00YTNiLWE4NTItODdjZDJmNDA2NDkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3lwfRmsHXVTB3hWm2whhYSBM8wDZ5Zd9+rz
rlVtMMZanB27h4fcLubAUSp119CveVvHPfftmikSGzRK1Q3bhTpSadnR/o/ZNq5n
WIJaV9+z9slrybImAoEwllmOt3d2GUqLEinyfBEZ262kAL/mNagLWJj59q2V3Ii2
aHyaCcIIhCd6EuAjpEmfnQzBg88FaK5QFTKxFS/kAz4sddx0+Zifr4Zdr5h70hu3
m2NRf0V3VvHf2Q71qXM/b3TPAW9SJaHAk27Nu0Bo4THmKS/qFxxSbMACrHjVD1TN
8rNOIiUkk8Goe0TsJaOSDfKw0f7k3e9P33xI/K2jUTOmbrUiGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCUcIS6rPySJ7tW1Q+GIiPEROl12MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMGZmMzIyNzgtNTMyMS0z
MTY2LWE0ZDYtMTAwMjc2MGI3NGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqnIgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESuyvUnD7I/MUBbzUQNBYBSyj4U5vfFzzTFlMJ/Tc/WvJSox/OKmd13
FtwGvQP0VNP8B5CE+tY6eex6vo09T80A9KqHd6q/KHwr9UHsD34hJXlDEBUbAXTS
HkmbLA2PgRB9HKGlISZMMNvNE/Bm33264XhbqQpYOSQlybKbXTH90TkSt2hzVM3Y
ulDIanw3NWq95P0xb2eIPJKRcbCPRmg5e8Dv5pUNUpI8ewgyAto9byyY61Y64WAV
WI83RjcDwTr+U0R8fQTDm9778SBQCgZwtw6ra8SjjCyedBum7DCeZs8JgMZIZyIc
bdb9zb1xwIWJ2xiFLUdt1Ciy+mAH7qc=
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:22:11 2026 by rpki-client