$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/871d7823-1dd5-38da-b042-77cd7f60d3d9.roa File: 871d7823-1dd5-38da-b042-77cd7f60d3d9.roa (raw, json) Hash identifier: ILX7AmmIhu3r/KNK1FJ91P+bOGKXnLmMH1V4hR91Xmw= Subject key identifier: 45:21:0C:30:F8:BF:4F:E7:02:36:93:8E:30:FE:CD:74:FA:5E:57:0B Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B6BC74A0A60AFAE7908CF0D80 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/871d7823-1dd5-38da-b042-77cd7f60d3d9.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 14618 IP address blocks: 170.114.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:4a:0a:60:af:ae:79:08:cf:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=c2d2c4ca-bb0e-40fe-a851-a7ea4e01e2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4a:18:ef:ab:4a:d4:10:43:9d:4e:a5:33:da: 5b:b9:2b:a4:19:29:38:4e:07:44:89:be:d3:8d:d7: 78:51:6d:96:19:01:88:73:fa:a7:ec:62:7b:cf:8a: cc:f0:14:48:2a:14:1f:52:7a:0d:83:ef:69:4f:69: 49:4a:b5:6d:ae:c6:a8:ff:43:09:d3:af:dc:11:1f: 1c:c7:71:10:5f:0c:f4:b7:fe:04:2f:b6:9b:b3:61: 55:01:62:d8:db:6b:76:66:9a:5d:43:4b:c3:fd:46: 2c:e5:77:dd:65:4a:a4:bf:a5:df:92:13:1c:0e:ba: 94:e5:e3:29:65:83:4b:99:00:3b:90:b5:b4:e1:af: 54:6f:fe:6d:9c:fc:ef:41:10:02:1b:bd:5a:e3:79: 6a:c7:37:b0:cb:66:85:67:a4:21:cd:ef:f5:db:97: d2:d4:9f:89:d8:64:e7:31:7f:aa:f1:c1:66:89:08: 95:ed:2c:62:0b:93:10:7c:2a:5b:8f:d8:a5:b9:ff: 4b:35:cc:5f:13:3a:b5:29:fc:b8:93:eb:33:6e:a1: 7a:7a:5d:a1:a3:0e:3f:0b:01:6f:b6:2d:64:14:a2: 9c:ef:06:a7:fd:6a:49:3a:59:65:a7:fd:4f:67:03: be:d6:21:e6:97:da:85:57:e7:3c:ef:52:66:2a:5b: 8d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:21:0C:30:F8:BF:4F:E7:02:36:93:8E:30:FE:CD:74:FA:5E:57:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/871d7823-1dd5-38da-b042-77cd7f60d3d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:7e:b5:e3:da:52:61:d8:dd:ed:f7:ad:1a:24:7f:a3:60:39: 38:64:7f:98:b7:47:fb:95:c7:4a:b3:23:ca:1f:cb:1b:9b:d3: 0b:47:83:c1:3f:5d:cb:f1:de:98:63:51:f7:35:40:72:87:d9: 69:45:3c:26:71:2f:82:2a:4c:9b:e9:db:69:df:eb:17:28:51: 77:0b:c1:ca:b3:21:49:ca:1a:5e:bf:f5:92:b8:ac:3b:e9:13: 7e:30:8c:28:4a:98:b8:fd:3a:fd:02:99:69:80:64:9a:11:b2: 03:2d:ad:7e:cf:4a:58:9e:85:10:d8:c0:fd:6b:13:e4:08:0f: 40:a2:f5:db:a1:e8:94:f8:36:d1:64:65:14:30:48:4e:ab:4e: c2:2f:17:a0:57:81:0f:06:11:99:59:40:63:1a:18:c2:1a:bc: c1:73:dd:a2:7a:8c:89:4f:4d:7d:21:a8:9d:db:2a:ed:4c:1d: cc:a8:01:01:b0:d4:65:1d:34:87:ff:ad:27:62:25:65:e3:a7: 2d:53:19:8c:76:e3:28:2a:11:1e:4a:b6:79:d0:a6:84:4a:31: b5:7d:1e:da:95:e5:7e:24:1f:7b:d4:ec:47:9b:87:b4:af:c4: 68:f8:41:3a:87:8d:33:ba:b6:47:33:e9:c7:ca:15:dd:42:5d: 97:db:a8:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx0oKYK+ueQjPDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YzJkMmM0Y2EtYmIwZS00MGZlLWE4NTEtYTdlYTRlMDFlMmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0oY76tK1BBDnU6lM9pbuSukGSk4TgdEib7T jdd4UW2WGQGIc/qn7GJ7z4rM8BRIKhQfUnoNg+9pT2lJSrVtrsao/0MJ06/cER8c x3EQXwz0t/4EL7abs2FVAWLY22t2ZppdQ0vD/UYs5XfdZUqkv6XfkhMcDrqU5eMp ZYNLmQA7kLW04a9Ub/5tnPzvQRACG71a43lqxzewy2aFZ6Qhze/125fS1J+J2GTn MX+q8cFmiQiV7SxiC5MQfCpbj9iluf9LNcxfEzq1Kfy4k+szbqF6el2how4/CwFv ti1kFKKc7wan/WpJOlllp/1PZwO+1iHml9qFV+c871JmKluNuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUhDDD4v0/nAjaTjjD+zXT6XlcLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvODcxZDc4MjMtMWRkNS0z OGRhLWIwNDItNzdjZDdmNjBkM2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnI/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFd+tePaUmHY3e33rRokf6NgOThkf5i3R/uVx0qzI8ofyxub0wtHg8E/ Xcvx3phjUfc1QHKH2WlFPCZxL4IqTJvp22nf6xcoUXcLwcqzIUnKGl6/9ZK4rDvp E34wjChKmLj9Ov0CmWmAZJoRsgMtrX7PSliehRDYwP1rE+QID0Ci9duh6JT4NtFk ZRQwSE6rTsIvF6BXgQ8GEZlZQGMaGMIavMFz3aJ6jIlPTX0hqJ3bKu1MHcyoAQGw 1GUdNIf/rSdiJWXjpy1TGYx24ygqER5KtnnQpoRKMbV9HtqV5X4kH3vU7Eebh7Sv xGj4QTqHjTO6tkcz6cfKFd1CXZfbqLk= -----END CERTIFICATE-----Generated at Mon Oct 20 16:31:32 2025 by rpki-client