$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/097952e5-3fea-3e53-aed7-9597238cda72.roa File: 097952e5-3fea-3e53-aed7-9597238cda72.roa (raw, json) Hash identifier: 4RQoWNwkTUs8g24Zeiho2/w/OOPin5WLmnRL9u/qXsM= Subject key identifier: AF:45:7A:22:1F:26:AA:49:9F:AE:A9:25:A6:FF:78:CB:7B:31:F6:9C Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584F8F3DB5FDB7FC9CD2F4388940 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/097952e5-3fea-3e53-aed7-9597238cda72.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 14618 IP address blocks: 170.114.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:b5:fd:b7:fc:9c:d2:f4:38:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=3e322472-1300-4e9c-ac19-097b37dff38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4e:25:db:36:71:1c:34:bd:7f:16:53:65:3c: c3:2d:70:cc:02:d4:21:12:59:82:95:a2:9c:b5:eb: 29:8d:d2:a6:b5:4e:db:23:64:73:ae:83:4b:f7:d3: bd:44:dc:e5:98:21:c4:38:38:a8:d3:ae:60:f3:55: 2b:5c:ca:79:d8:4f:59:1a:58:d7:e5:93:0a:e3:e4: 18:b4:60:e3:14:6e:88:f3:1d:e5:50:4a:57:04:9b: 98:56:70:dd:e6:19:32:7d:8a:0e:91:30:d2:24:8c: 83:cc:b9:2c:74:c2:29:43:28:e4:25:7a:24:bf:26: d4:21:e3:ad:38:3f:92:65:77:e6:5d:98:ab:ae:0c: 48:aa:d9:8b:a7:c9:a8:28:9c:58:58:72:de:c3:ad: 09:2f:95:9a:0b:61:bf:27:f3:4c:60:9b:6d:2c:9a: aa:6d:a9:e7:93:bd:f7:16:6f:54:5e:c6:19:91:ac: 97:d1:6b:62:d3:89:c1:6a:9f:62:58:dd:a1:31:e4: 61:33:1d:d4:65:69:1f:33:db:32:f1:a6:a3:e3:2d: 76:2f:f4:e6:f5:73:86:87:47:f4:9c:1c:b5:88:7c: a4:04:6a:08:b3:55:14:63:7f:ff:2a:6d:bd:4f:4b: 67:21:bc:c6:0f:9c:49:83:1e:d3:ec:9a:d3:ea:67: 67:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:45:7A:22:1F:26:AA:49:9F:AE:A9:25:A6:FF:78:CB:7B:31:F6:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/097952e5-3fea-3e53-aed7-9597238cda72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:81:65:21:81:f7:a3:40:68:5e:21:ac:c4:fc:74:d4:a6:f2: 1f:dd:73:01:5b:5a:cd:ec:9b:78:8c:32:c1:b1:63:62:cc:f6: 8e:fa:b8:44:89:83:86:9c:f5:8d:64:de:ed:1c:f2:e4:eb:27: 84:7e:d1:44:f7:6a:08:0e:e2:77:15:89:a7:df:c1:8d:44:2c: 4c:82:a1:45:23:a1:b3:0f:46:4e:7e:3c:c6:90:f3:1e:20:98: 8a:47:18:b5:69:26:4a:0d:2f:0a:01:6b:9f:6d:9b:29:45:9a: d8:17:69:d5:3a:b5:fa:6f:9d:28:25:dc:b0:95:75:49:12:96: e1:56:a3:78:87:a1:ff:b2:49:1c:9a:f2:15:16:e3:15:7f:d2: e2:dd:16:24:18:8e:9f:87:49:b6:21:6e:62:a1:f4:08:18:fb: e5:ee:6f:d9:91:79:0a:39:c5:06:77:62:5f:11:62:23:f0:64: 1d:8f:74:f9:37:7a:e3:8d:7e:1e:2a:77:d1:b2:0c:15:ff:b4: c3:2d:c9:f5:49:28:88:63:55:8e:9e:ca:aa:36:5e:0b:a8:c6: eb:45:0f:d4:a3:34:4f:16:46:65:a8:e2:fb:7f:d4:ad:20:b8: ea:70:fe:22:12:8d:6e:87:1b:19:ea:0c:d7:9a:71:c4:2d:bc: 62:ef:cd:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPbX9t/yc0vQ4iUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk M2UzMjI0NzItMTMwMC00ZTljLWFjMTktMDk3YjM3ZGZmMzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU4l2zZxHDS9fxZTZTzDLXDMAtQhElmClaKc tespjdKmtU7bI2RzroNL99O9RNzlmCHEODio065g81UrXMp52E9ZGljX5ZMK4+QY tGDjFG6I8x3lUEpXBJuYVnDd5hkyfYoOkTDSJIyDzLksdMIpQyjkJXokvybUIeOt OD+SZXfmXZirrgxIqtmLp8moKJxYWHLew60JL5WaC2G/J/NMYJttLJqqbannk733 Fm9UXsYZkayX0Wti04nBap9iWN2hMeRhMx3UZWkfM9sy8aaj4y12L/Tm9XOGh0f0 nBy1iHykBGoIs1UUY3//Km29T0tnIbzGD5xJgx7T7JrT6mdnZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9FeiIfJqpJn66pJab/eMt7MfacMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMDk3OTUyZTUtM2ZlYS0z ZTUzLWFlZDctOTU5NzIzOGNkYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqnIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKBZSGB96NAaF4hrMT8dNSm8h/dcwFbWs3sm3iMMsGxY2LM9o76uESJ g4ac9Y1k3u0c8uTrJ4R+0UT3aggO4ncViaffwY1ELEyCoUUjobMPRk5+PMaQ8x4g mIpHGLVpJkoNLwoBa59tmylFmtgXadU6tfpvnSgl3LCVdUkSluFWo3iHof+ySRya 8hUW4xV/0uLdFiQYjp+HSbYhbmKh9AgY++Xub9mReQo5xQZ3Yl8RYiPwZB2PdPk3 euONfh4qd9GyDBX/tMMtyfVJKIhjVY6eyqo2XguoxutFD9SjNE8WRmWo4vt/1K0g uOpw/iISjW6HGxnqDNeaccQtvGLvzec= -----END CERTIFICATE-----Generated at Tue Oct 27 17:35:31 2026 by rpki-client