$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9faccfb4-cf9a-30e0-a406-825e6e5e98d5.roa File: 9faccfb4-cf9a-30e0-a406-825e6e5e98d5.roa (raw, json) Hash identifier: dhNzMikn9ANdK1/2uHtMCPQaxrE6qdg8++ggVUXztYc= Subject key identifier: FC:7F:FE:F9:71:E1:C5:03:8C:48:08:41:4B:13:4B:7B:32:DA:6E:DD Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B12716258492C73EA19A194D0 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9faccfb4-cf9a-30e0-a406-825e6e5e98d5.roa Signing time: Wed 03 Sep 2025 13:00:41 +0000 ROA not before: Wed 03 Sep 2025 13:00:41 +0000 ROA not after: Tue 02 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 170.114.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:71:62:58:49:2c:73:ea:19:a1:94:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 3 13:00:41 2025 GMT Not After : Dec 2 14:00:41 2025 GMT Subject: CN=8d3f43d0-9591-4d29-a5fa-c4edfbd390d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d0:c9:41:8f:53:c0:44:54:35:d5:4f:5c:6e: 2f:8c:0e:f8:2d:fa:68:c3:33:a0:f5:7f:48:8f:98: de:42:c4:1c:4f:48:5f:db:94:a6:1f:fe:a1:c9:cf: 45:f6:ca:63:3c:51:3a:e3:ee:16:0c:9d:61:66:de: 6e:1b:4a:ac:14:06:43:16:39:41:96:d1:af:01:6e: 3f:40:a6:8b:20:08:5e:e4:9c:cb:37:c0:de:4d:23: 7d:e9:b4:ff:1b:92:44:27:cb:cc:9a:26:66:51:39: 17:9c:fa:16:16:59:ea:10:c2:6e:77:ed:8c:40:63: 06:9a:24:d4:9f:2b:32:38:ca:7d:eb:29:83:8b:01: ac:08:f9:70:21:c4:15:5c:dc:c5:c6:41:81:15:a8: 4f:de:5b:1b:48:d7:2b:ff:e3:07:ef:18:93:bb:89: 06:b5:d0:b0:64:9f:e7:cb:aa:de:d2:fb:09:bb:22: e5:bf:d3:ed:1b:0d:e4:9b:b8:f1:dd:b5:4f:6d:81: 5f:c7:7f:e4:14:5b:21:ba:81:22:4f:1f:5b:9f:88: 27:9c:3b:9d:15:29:57:7c:db:c3:ea:d2:04:ca:bd: d9:58:53:e4:72:21:50:9b:87:6d:91:b6:d2:3d:04: fe:f4:e8:0d:9e:93:11:48:84:6c:0d:e5:bb:1c:51: 0b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7F:FE:F9:71:E1:C5:03:8C:48:08:41:4B:13:4B:7B:32:DA:6E:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9faccfb4-cf9a-30e0-a406-825e6e5e98d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b6:d6:e4:3f:16:23:20:8c:87:a8:cf:8b:6f:a8:ec:eb:78: 16:6d:d4:b2:46:ff:56:26:eb:7c:a3:a8:d5:9a:e3:e8:06:02: 5e:49:d4:2c:cf:27:37:69:1c:00:62:ab:19:7d:26:7e:16:59: 79:d6:8e:17:83:61:ad:18:3c:91:d7:56:3d:01:d7:f0:f2:f1: 1a:fa:a3:4b:26:b3:42:85:47:52:e3:f3:aa:9f:89:a9:ca:a1: cf:f0:dd:b9:28:1e:a3:79:32:6b:f8:08:9a:86:92:dc:5d:b9: 56:c9:db:69:cc:ef:b5:04:6a:bd:16:cf:39:64:f4:3e:bd:53: 0e:86:6b:fd:bd:d1:1c:34:e8:aa:14:57:8e:dd:9a:49:7b:06: e7:5c:8b:01:ce:75:26:0e:1c:e2:05:f4:70:04:f6:25:aa:3a: 6c:a4:24:fa:d9:99:ff:36:41:8e:ec:5b:0b:e7:46:76:cb:ff: 5a:1a:a6:49:9e:fb:4a:80:9a:30:9b:53:3b:8a:4f:1c:8e:8c: 24:4e:b9:75:cf:ec:42:35:86:58:57:49:ac:20:7f:cd:8f:d0: 2a:fc:ac:9b:52:0b:f7:20:cf:1f:74:71:71:63:82:fe:59:18: 89:94:58:db:73:e3:e6:c4:78:9e:31:d6:f8:a4:d2:9a:39:91: 3b:fd:6f:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsScWJYSSxz6hmhlNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDkwMzEzMDA0MVoXDTI1MTIwMjE0MDA0MVowLzEtMCsGA1UEAxMk OGQzZjQzZDAtOTU5MS00ZDI5LWE1ZmEtYzRlZGZiZDM5MGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9DJQY9TwERUNdVPXG4vjA74LfpowzOg9X9I j5jeQsQcT0hf25SmH/6hyc9F9spjPFE64+4WDJ1hZt5uG0qsFAZDFjlBltGvAW4/ QKaLIAhe5JzLN8DeTSN96bT/G5JEJ8vMmiZmUTkXnPoWFlnqEMJud+2MQGMGmiTU nysyOMp96ymDiwGsCPlwIcQVXNzFxkGBFahP3lsbSNcr/+MH7xiTu4kGtdCwZJ/n y6re0vsJuyLlv9PtGw3km7jx3bVPbYFfx3/kFFshuoEiTx9bn4gnnDudFSlXfNvD 6tIEyr3ZWFPkciFQm4dtkbbSPQT+9OgNnpMRSIRsDeW7HFELXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPx//vlx4cUDjEgIQUsTS3sy2m7dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvOWZhY2NmYjQtY2Y5YS0z MGUwLWE0MDYtODI1ZTZlNWU5OGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqnJiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFK21uQ/FiMgjIeoz4tvqOzreBZt1LJG/1Ym63yjqNWa4+gGAl5J1CzP JzdpHABiqxl9Jn4WWXnWjheDYa0YPJHXVj0B1/Dy8Rr6o0sms0KFR1Lj86qfianK oc/w3bkoHqN5Mmv4CJqGktxduVbJ22nM77UEar0Wzzlk9D69Uw6Ga/290Rw06KoU V47dmkl7BudciwHOdSYOHOIF9HAE9iWqOmykJPrZmf82QY7sWwvnRnbL/1oapkme +0qAmjCbUzuKTxyOjCROuXXP7EI1hlhXSawgf82P0Cr8rJtSC/cgzx90cXFjgv5Z GImUWNtz4+bEeJ4x1vik0po5kTv9byc= -----END CERTIFICATE-----Generated at Fri Sep 5 13:19:01 2025 by rpki-client