$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa File: 5253ae96-6f67-3e85-86be-36c4a5535f8d.roa (raw, json) Hash identifier: dIEIfgAmkMzFCHlz92kQQ1TTUsy9gNvJPzcKJ+7C7T0= Subject key identifier: B1:80:65:57:FF:4F:39:9C:63:F3:11:FE:F8:8E:33:A2:39:B2:B1:FD Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584EAFE6F507DC1A4412F5FA0B1C Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 31898 IP address blocks: 170.114.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:f5:07:dc:1a:44:12:f5:fa:0b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=3a51aa9c-98b2-4d87-8aac-7fceef396721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b6:a2:cf:b5:1c:11:1b:06:a3:b2:17:d1:e1: f6:71:28:2e:83:22:de:78:32:1d:15:88:c5:ee:87: 27:d4:44:ca:e6:0d:04:9f:ed:99:6a:f4:a0:59:33: 8e:bc:0e:8f:df:fa:2a:90:cf:97:54:35:04:6f:d3: 7c:ea:c5:45:d3:1a:79:6c:83:81:84:22:93:8a:a0: 26:91:60:57:e1:8f:ba:48:81:3b:b7:d1:bd:79:ab: 5a:b8:fa:59:9e:a6:fb:a5:90:f1:08:dc:c6:89:73: b0:d7:28:ce:d3:41:6a:67:e2:51:90:ff:45:58:a9: 02:30:24:43:9f:e8:a7:30:3d:17:52:4e:85:9a:e8: 6c:d7:8b:9f:e3:21:f0:f4:b3:98:a5:34:02:46:ed: 18:71:39:ff:7e:3b:73:93:9e:cd:5f:f7:15:ed:3a: 59:e9:a6:31:5b:b9:aa:ed:7b:bb:0f:c7:27:3c:27: ec:94:67:93:f4:92:75:0e:56:02:fa:08:ed:f6:08: 1c:a0:ef:ce:82:63:a4:15:8e:48:3d:1f:f4:bc:21: 04:a1:00:dc:e3:7a:28:01:5f:d6:ed:29:bb:2e:2a: 79:5b:b4:dd:15:24:2f:13:8b:86:1e:0e:62:90:66: 40:b7:28:cc:96:95:5d:86:d8:c2:c8:3a:7a:85:b7: 70:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:80:65:57:FF:4F:39:9C:63:F3:11:FE:F8:8E:33:A2:39:B2:B1:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:fc:4f:ec:92:51:41:71:26:3b:8c:c5:49:a7:2c:f9:4f:e8: 2c:64:0f:80:01:e9:4f:6c:fd:6f:de:d4:7d:bc:7b:ee:ec:0f: f8:ec:9f:a8:f4:94:0b:d4:bb:e2:af:1b:33:9e:e1:3a:a6:53: c1:b5:42:b5:51:46:87:6e:ab:44:5a:5f:14:05:0b:c7:7e:b4: 76:ab:99:65:3c:0c:27:71:4b:98:bf:57:3f:37:f2:ae:9d:0b: bd:c2:de:65:94:cb:08:02:84:f6:01:31:05:7d:9f:87:f5:b5: 7b:ee:60:2f:7a:4c:88:77:a7:d7:da:fb:3e:58:e8:d2:ae:c2: 45:f4:4a:19:d3:fa:72:7f:26:9f:33:f2:e3:19:30:48:49:ee: 4e:87:25:cc:0f:c2:0a:0e:bf:0a:81:6f:94:ef:7f:5b:14:f0: 9a:8f:4e:0d:28:52:dd:a2:89:17:cf:ea:bd:d4:1c:b9:d1:d4: e6:20:87:27:61:3a:83:e1:92:4d:56:45:53:48:53:ad:c3:9f: b9:a2:24:a4:40:a8:40:53:71:4d:aa:20:ec:7f:aa:eb:7b:c2: 18:ae:55:79:34:cd:d1:df:15:bd:dc:88:f2:34:58:2c:a9:80: eb:75:49:f2:df:13:3a:ff:e3:7d:66:cc:04:6e:8a:3b:83:80: 4d:41:11:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vUH3BpEEvX6CxwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk M2E1MWFhOWMtOThiMi00ZDg3LThhYWMtN2ZjZWVmMzk2NzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLaiz7UcERsGo7IX0eH2cSgugyLeeDIdFYjF 7ocn1ETK5g0En+2ZavSgWTOOvA6P3/oqkM+XVDUEb9N86sVF0xp5bIOBhCKTiqAm kWBX4Y+6SIE7t9G9eatauPpZnqb7pZDxCNzGiXOw1yjO00FqZ+JRkP9FWKkCMCRD n+inMD0XUk6Fmuhs14uf4yHw9LOYpTQCRu0YcTn/fjtzk57NX/cV7TpZ6aYxW7mq 7Xu7D8cnPCfslGeT9JJ1DlYC+gjt9ggcoO/OgmOkFY5IPR/0vCEEoQDc43ooAV/W 7Sm7Lip5W7TdFSQvE4uGHg5ikGZAtyjMlpVdhtjCyDp6hbdwCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGAZVf/TzmcY/MR/viOM6I5srH9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNTI1M2FlOTYtNmY2Ny0z ZTg1LTg2YmUtMzZjNGE1NTM1ZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAT8T+ySUUFxJjuMxUmnLPlP6CxkD4AB6U9s/W/e1H28e+7sD/jsn6j0 lAvUu+KvGzOe4TqmU8G1QrVRRoduq0RaXxQFC8d+tHarmWU8DCdxS5i/Vz838q6d C73C3mWUywgChPYBMQV9n4f1tXvuYC96TIh3p9fa+z5Y6NKuwkX0ShnT+nJ/Jp8z 8uMZMEhJ7k6HJcwPwgoOvwqBb5Tvf1sU8JqPTg0oUt2iiRfP6r3UHLnR1OYghydh OoPhkk1WRVNIU63Dn7miJKRAqEBTcU2qIOx/qut7whiuVXk0zdHfFb3ciPI0WCyp gOt1SfLfEzr/431mzARuijuDgE1BEZ8= -----END CERTIFICATE-----Generated at Sat Sep 5 06:55:14 2026 by rpki-client