$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f7580811-5ea7-31f7-a991-c96a57af8a8c.roa File: f7580811-5ea7-31f7-a991-c96a57af8a8c.roa (raw, json) Hash identifier: yiXPLHz44OQYxWVd0P6K1Q3sOsArcyCV9ers0xFBKt0= Subject key identifier: 7B:4E:B6:12:6E:5F:E9:9C:26:72:B0:89:3E:7F:DC:55:45:00:2E:BF Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B2331849AB949CDE012FDB100 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f7580811-5ea7-31f7-a991-c96a57af8a8c.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 170.114.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:84:9a:b9:49:cd:e0:12:fd:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=2a94c537-ed7c-4350-b19d-21da1d82617c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e7:2a:96:04:a0:e5:f4:a7:a9:2c:22:f8:1e: 5f:b7:f3:b3:f3:23:e1:18:25:93:83:77:0d:6a:1f: ba:6e:39:90:e4:03:6e:44:14:b0:06:be:22:09:7b: 52:e4:13:71:4a:94:fa:28:04:0e:45:c4:c6:85:64: cd:52:ed:3d:3a:6e:19:37:05:eb:be:6f:ce:07:cd: 7d:58:f2:03:0a:0e:54:f6:8c:d5:c6:ec:85:c5:a4: d6:72:c7:49:b2:2a:cc:1b:be:ee:c3:8b:1a:90:93: e9:e8:fe:c4:50:c0:9f:54:0b:30:d9:bb:bf:c0:57: a1:f0:4f:1f:f6:bd:14:15:4a:b8:7f:c7:ed:46:a3: d5:61:88:2c:5c:b5:56:d5:ba:6c:64:24:e6:a0:20: 84:6c:3a:5c:90:6b:88:bd:86:77:09:4f:ab:3c:9e: 1a:c4:77:07:ec:19:0e:91:09:ce:b5:dc:51:13:48: 79:c9:cc:f4:bc:9f:e8:0b:f7:ce:df:8a:b7:13:b0: e1:25:26:39:72:61:3b:eb:71:2f:ee:e1:c8:b0:41: a5:57:06:ad:e6:05:a1:82:9f:b7:9e:86:6d:0f:3f: 61:c2:f7:d5:3a:90:4c:d5:60:e1:5c:4e:e4:64:36: 74:e8:36:92:45:3f:ba:27:12:b8:c5:a8:aa:c4:d9: 82:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4E:B6:12:6E:5F:E9:9C:26:72:B0:89:3E:7F:DC:55:45:00:2E:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/f7580811-5ea7-31f7-a991-c96a57af8a8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:46:5b:9b:ef:5b:6a:ae:b9:50:b5:88:38:fe:15:ad:df:d7: b1:7e:66:be:b7:50:fe:0e:60:ad:73:df:8c:67:9b:5e:9b:73: b9:c1:6d:f6:fd:6d:38:09:cc:4a:1c:a5:01:1c:cf:e2:6d:65: d3:f6:d7:cb:5d:0f:5f:3e:94:94:99:0c:b7:62:d0:1e:35:32: 10:a7:bf:b1:65:24:84:c0:30:49:ed:57:76:eb:d4:99:83:26: 83:c0:91:ff:74:08:f9:f7:1a:bf:cd:92:3a:82:cf:b9:b6:f9: 6d:ea:47:bf:1b:d7:ef:b3:52:61:6b:ba:f6:5a:b8:61:ae:10: 5d:bd:e6:95:0f:0e:09:3b:5f:d9:bf:6a:4a:d3:11:73:57:9f: bb:b2:9b:e4:41:02:a9:70:19:8b:01:2a:e8:b0:17:ec:7d:b2: b8:60:ac:2d:b7:56:9a:f6:4b:02:f4:5e:b8:0c:be:5c:e1:86: f8:2b:09:8b:68:16:35:1b:c3:b9:29:3d:88:27:b2:30:d2:58: f7:29:3d:24:2f:64:de:50:6b:8b:b3:14:f7:ef:92:fa:ac:43: 43:f7:01:8b:30:ee:a0:01:ce:7f:6e:0c:7d:3b:75:d9:8f:4f: 6c:9f:91:08:36:e7:88:b1:43:d2:ba:29:a3:6a:a3:55:61:0d: f0:e4:bd:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMYSauUnN4BL9sQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk MmE5NGM1MzctZWQ3Yy00MzUwLWIxOWQtMjFkYTFkODI2MTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+cqlgSg5fSnqSwi+B5ft/Oz8yPhGCWTg3cN ah+6bjmQ5ANuRBSwBr4iCXtS5BNxSpT6KAQORcTGhWTNUu09Om4ZNwXrvm/OB819 WPIDCg5U9ozVxuyFxaTWcsdJsirMG77uw4sakJPp6P7EUMCfVAsw2bu/wFeh8E8f 9r0UFUq4f8ftRqPVYYgsXLVW1bpsZCTmoCCEbDpckGuIvYZ3CU+rPJ4axHcH7BkO kQnOtdxRE0h5ycz0vJ/oC/fO34q3E7DhJSY5cmE763Ev7uHIsEGlVwat5gWhgp+3 noZtDz9hwvfVOpBM1WDhXE7kZDZ06DaSRT+6JxK4xaiqxNmCdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtOthJuX+mcJnKwiT5/3FVFAC6/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZjc1ODA4MTEtNWVhNy0z MWY3LWE5OTEtYzk2YTU3YWY4YThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxGW5vvW2quuVC1iDj+Fa3f17F+Zr63UP4OYK1z34xnm16bc7nBbfb9 bTgJzEocpQEcz+JtZdP218tdD18+lJSZDLdi0B41MhCnv7FlJITAMEntV3br1JmD JoPAkf90CPn3Gr/NkjqCz7m2+W3qR78b1++zUmFruvZauGGuEF295pUPDgk7X9m/ akrTEXNXn7uym+RBAqlwGYsBKuiwF+x9srhgrC23Vpr2SwL0XrgMvlzhhvgrCYto FjUbw7kpPYgnsjDSWPcpPSQvZN5Qa4uzFPfvkvqsQ0P3AYsw7qABzn9uDH07ddmP T2yfkQg254ixQ9K6KaNqo1VhDfDkvXg= -----END CERTIFICATE-----Generated at Wed Oct 8 21:29:52 2025 by rpki-client