$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa File: 5253ae96-6f67-3e85-86be-36c4a5535f8d.roa (raw, json) Hash identifier: XdwV9a+SQIaeh2an6ue6xfJ0Snb+b/J1eJwNvg6iH1U= Subject key identifier: EC:5D:8F:77:21:79:BF:FD:A0:3B:D9:DE:43:F7:67:61:B8:1C:9C:99 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B6D2C948315F8B02FC8D4B760 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 31898 IP address blocks: 170.114.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:94:83:15:f8:b0:2f:c8:d4:b7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=4cd501ca-b70e-41ea-987d-00dbade0e348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:88:33:1a:83:5c:77:cf:8c:89:dd:07:e5:6b: c4:94:35:9a:8f:bd:f0:7b:13:8e:f9:70:cd:03:67: 55:d1:af:82:2a:3d:c1:f0:81:2c:47:57:8d:ba:c0: 09:90:5e:66:e8:0c:6a:81:d2:b8:fe:dd:5e:6d:58: 6e:90:ee:96:a6:bb:78:ba:c7:82:aa:d2:fb:97:d7: 5d:b2:b3:31:98:08:54:81:51:c9:2b:56:46:46:1d: a1:e0:3b:dd:64:fc:f6:21:b7:b0:50:9a:e9:8c:d7: a7:48:98:36:7b:7d:7a:01:59:6a:71:9c:28:88:50: e9:c9:0a:cd:b0:48:04:7d:ff:c0:da:8b:3f:6c:1e: 5e:5a:ae:5b:7c:33:9e:a4:38:bb:8d:6d:d4:43:66: 87:c0:0b:3c:1d:8f:d6:af:8f:0c:dc:1d:2f:c9:42: 00:af:8c:a5:61:5a:1c:31:2e:5c:0d:0d:e4:61:90: 9e:a6:2c:3f:cc:23:16:85:72:65:52:2c:e4:b1:82: 8d:27:ab:63:4d:c7:2b:8b:5d:85:dd:a0:7a:2d:61: dd:35:9f:3b:db:53:b8:7f:ed:01:e7:1e:95:c2:fd: 34:d7:b1:d2:0b:bc:28:20:75:0e:48:54:d7:c4:07: aa:07:71:89:2b:43:bc:3a:dd:fc:8d:73:bd:76:cf: 7f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5D:8F:77:21:79:BF:FD:A0:3B:D9:DE:43:F7:67:61:B8:1C:9C:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:18:08:a8:1c:2e:ee:5a:33:81:c3:7c:e0:9c:e9:df:e2:d2: 6c:8c:3b:ea:e5:a2:f0:de:a9:d0:f3:61:5e:e5:c0:85:70:1a: 64:07:ec:0f:ef:07:ff:b6:e1:e7:2d:55:1f:87:1e:1c:ed:11: 8f:29:84:5a:81:15:8c:98:85:6b:6f:60:68:22:05:ed:ab:de: fc:e5:29:68:0f:cb:80:0f:d9:92:63:ba:96:14:39:b2:16:c0: 12:39:53:46:56:6c:2f:9e:73:6d:02:6d:0e:ac:7d:77:92:bc: c1:70:93:41:59:80:83:4a:32:88:bc:50:d9:dc:90:8e:0d:08: 45:3c:a8:02:2e:99:8b:88:46:a0:ce:51:e8:d4:34:f1:89:f0: 14:80:13:26:1a:a8:4c:88:a9:36:3c:50:0c:72:7f:4a:00:8e: fb:26:b6:7e:2e:d0:94:35:bb:e2:da:c6:95:02:f9:ea:aa:13: b9:3a:a8:84:12:9f:15:d3:cf:e5:9d:28:c5:fc:74:88:7f:d4: a6:07:5d:a7:01:b7:20:68:07:70:1b:69:c6:14:83:ed:d3:7f: 75:92:c1:9c:4a:e3:a8:03:73:ba:5c:22:90:e3:35:87:b6:1a: a6:5a:19:f2:25:ad:04:7e:57:64:4b:5c:a5:34:bc:a7:21:15: 22:70:03:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJSDFfiwL8jUt2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NGNkNTAxY2EtYjcwZS00MWVhLTk4N2QtMDBkYmFkZTBlMzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4gzGoNcd8+Mid0H5WvElDWaj73wexOO+XDN A2dV0a+CKj3B8IEsR1eNusAJkF5m6AxqgdK4/t1ebVhukO6Wprt4useCqtL7l9dd srMxmAhUgVHJK1ZGRh2h4DvdZPz2IbewUJrpjNenSJg2e316AVlqcZwoiFDpyQrN sEgEff/A2os/bB5eWq5bfDOepDi7jW3UQ2aHwAs8HY/Wr48M3B0vyUIAr4ylYVoc MS5cDQ3kYZCepiw/zCMWhXJlUizksYKNJ6tjTccri12F3aB6LWHdNZ8721O4f+0B 5x6Vwv0017HSC7woIHUOSFTXxAeqB3GJK0O8Ot38jXO9ds9/AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxdj3cheb/9oDvZ3kP3Z2G4HJyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNTI1M2FlOTYtNmY2Ny0z ZTg1LTg2YmUtMzZjNGE1NTM1ZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcYCKgcLu5aM4HDfOCc6d/i0myMO+rlovDeqdDzYV7lwIVwGmQH7A/v B/+24ectVR+HHhztEY8phFqBFYyYhWtvYGgiBe2r3vzlKWgPy4AP2ZJjupYUObIW wBI5U0ZWbC+ec20CbQ6sfXeSvMFwk0FZgINKMoi8UNnckI4NCEU8qAIumYuIRqDO UejUNPGJ8BSAEyYaqEyIqTY8UAxyf0oAjvsmtn4u0JQ1u+LaxpUC+eqqE7k6qIQS nxXTz+WdKMX8dIh/1KYHXacBtyBoB3AbacYUg+3Tf3WSwZxK46gDc7pcIpDjNYe2 GqZaGfIlrQR+V2RLXKU0vKchFSJwA+8= -----END CERTIFICATE-----Generated at Mon Oct 20 16:31:35 2025 by rpki-client