$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3b4ada3f-1b54-3a25-ba4a-96aecea3ee3e.roa File: 3b4ada3f-1b54-3a25-ba4a-96aecea3ee3e.roa (raw, json) Hash identifier: kjdbKJGm5ydCcD+Dei4nK2izn7wYTFgLI0Gs8wlAWrk= Subject key identifier: 43:6A:C7:83:8E:A7:22:57:34:26:BD:81:FC:45:51:2C:B1:2B:73:D4 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B1C36BE2CC5D6A834C38053B0 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3b4ada3f-1b54-3a25-ba4a-96aecea3ee3e.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 170.114.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:be:2c:c5:d6:a8:34:c3:80:53:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=c51e815d-ce09-4e20-b042-c2fa2062b758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:77:7c:df:54:39:b1:ce:c6:77:4a:93:9c:dd: fa:75:52:bb:a1:43:f5:5f:79:40:f9:36:94:d3:22: c0:87:3a:c3:6a:36:97:90:18:92:26:53:c7:07:8e: a1:02:56:97:6c:31:18:25:46:28:7a:4a:92:4e:4e: ce:4c:81:26:e5:e8:9f:70:38:3e:39:a7:aa:6d:c5: e9:a9:0e:b6:c1:27:ea:35:29:94:78:0a:6b:67:05: 84:47:04:46:90:59:c4:63:6e:79:de:d9:ff:71:95: 35:15:c1:2d:6a:75:8f:14:a7:5b:05:e2:69:bb:20: 7f:74:8b:f1:8f:f9:49:bc:f7:d2:88:84:66:b0:37: ee:17:45:82:a3:05:69:8c:16:e0:e3:1e:b4:2f:cf: 30:aa:be:6b:36:6b:39:2a:1b:5b:6c:1b:19:88:8b: 01:01:7b:8c:94:c9:19:2e:66:a1:f4:9a:5b:d5:23: be:43:b9:30:58:94:35:68:a7:43:6d:a1:46:ce:38: f4:38:7b:79:d2:ba:06:3a:40:7e:92:a3:9f:91:4d: ff:dc:7e:3d:b3:0a:f0:5b:f7:e2:31:47:00:b8:c6: 4f:a3:5b:6f:cd:f2:c8:f4:fc:27:55:1e:6c:ed:cf: a7:67:b9:db:46:54:75:63:49:d6:49:10:43:5b:e2: d0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6A:C7:83:8E:A7:22:57:34:26:BD:81:FC:45:51:2C:B1:2B:73:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/3b4ada3f-1b54-3a25-ba4a-96aecea3ee3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ac:b4:90:75:83:c8:9f:1c:8b:29:00:13:b1:e8:f3:83:2d: bc:1a:dd:bf:6d:7e:13:14:19:bc:f3:b0:32:24:a2:c8:ed:2d: 2f:3e:7f:6b:c2:42:0b:2d:25:d5:3e:99:00:fc:db:67:e5:ac: bb:84:ca:c0:00:8b:6d:3a:12:dc:d3:9e:56:ab:be:5b:d9:05: 3e:6c:e8:35:46:e6:46:9d:9a:b2:df:98:40:b2:3a:ad:49:13: e9:9c:a7:db:77:de:a3:74:af:aa:ae:8c:e6:4e:d6:b6:34:3d: dd:85:47:a4:ac:76:e3:15:0a:68:2c:d0:c0:51:2f:c4:25:d6: 6a:f4:39:aa:0d:25:55:73:54:18:4e:e1:f4:28:b3:0c:c2:95: e7:6a:2a:30:35:0b:52:b9:86:48:b4:79:a3:98:1c:3f:8d:80: dc:ae:86:c7:8d:d3:42:4a:35:0a:4f:39:cd:c8:18:c2:f9:fa: b7:e8:93:df:f6:6e:5e:3e:ff:9c:17:d8:91:a4:cd:9d:46:6b: 01:c8:c9:38:31:89:2e:e1:b7:aa:10:b8:50:47:a0:45:05:26: b8:19:12:94:1f:dd:ee:4f:98:00:2a:5d:34:74:72:a0:d7:b8: 13:e2:d6:81:71:bc:30:35:65:10:8f:d5:0f:b8:f6:43:e0:a2: 4e:f0:c5:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNr4sxdaoNMOAU7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YzUxZTgxNWQtY2UwOS00ZTIwLWIwNDItYzJmYTIwNjJiNzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXd831Q5sc7Gd0qTnN36dVK7oUP1X3lA+TaU 0yLAhzrDajaXkBiSJlPHB46hAlaXbDEYJUYoekqSTk7OTIEm5eifcDg+OaeqbcXp qQ62wSfqNSmUeAprZwWERwRGkFnEY2553tn/cZU1FcEtanWPFKdbBeJpuyB/dIvx j/lJvPfSiIRmsDfuF0WCowVpjBbg4x60L88wqr5rNms5KhtbbBsZiIsBAXuMlMkZ Lmah9Jpb1SO+Q7kwWJQ1aKdDbaFGzjj0OHt50roGOkB+kqOfkU3/3H49swrwW/fi MUcAuMZPo1tvzfLI9PwnVR5s7c+nZ7nbRlR1Y0nWSRBDW+LQewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENqx4OOpyJXNCa9gfxFUSyxK3PUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvM2I0YWRhM2YtMWI1NC0z YTI1LWJhNGEtOTZhZWNlYTNlZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnIxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADestJB1g8ifHIspABOx6PODLbwa3b9tfhMUGbzzsDIkosjtLS8+f2vC QgstJdU+mQD822flrLuEysAAi206EtzTnlarvlvZBT5s6DVG5kadmrLfmECyOq1J E+mcp9t33qN0r6qujOZO1rY0Pd2FR6SsduMVCmgs0MBRL8Ql1mr0OaoNJVVzVBhO 4fQoswzCledqKjA1C1K5hki0eaOYHD+NgNyuhseN00JKNQpPOc3IGML5+rfok9/2 bl4+/5wX2JGkzZ1GawHIyTgxiS7ht6oQuFBHoEUFJrgZEpQf3e5PmAAqXTR0cqDX uBPi1oFxvDA1ZRCP1Q+49kPgok7wxUs= -----END CERTIFICATE-----Generated at Mon Oct 20 16:31:38 2025 by rpki-client