$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/df7c5515-0486-333e-8c0d-4be1af31b67f.roa File: df7c5515-0486-333e-8c0d-4be1af31b67f.roa (raw, json) Hash identifier: OjfrPDp1qZEw67dU5I5Qv9n3toij7+Ts5Nejgfz8/04= Subject key identifier: 3E:CA:10:85:6B:09:78:32:DA:8E:AC:BD:38:41:14:73:35:AF:63:D3 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B6D2C949724D624C8B1FD7960 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/df7c5515-0486-333e-8c0d-4be1af31b67f.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 31898 IP address blocks: 170.114.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:94:97:24:d6:24:c8:b1:fd:79:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=583b5f39-5c1e-4ea7-a941-eb8f378ffc78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:40:48:ee:ca:0b:51:9c:81:88:54:32:c8: 8a:f7:ee:71:44:b2:cf:5c:39:35:94:ed:7c:75:33: fc:db:c5:3f:a7:d1:6d:ef:37:5e:30:3d:eb:b1:b1: 8a:1c:4c:29:91:5d:94:e0:ef:d9:c0:95:1b:48:bb: 02:5a:e7:68:54:22:71:0c:02:8e:2c:02:8e:b0:25: 1a:fd:9a:ea:49:8c:98:84:ca:ec:d9:5f:5f:ef:90: 14:94:8e:a9:2e:a0:85:86:f2:0c:90:32:eb:40:89: 32:f3:7e:17:dd:0f:22:76:6e:31:4c:1d:10:2b:0d: d3:ac:a2:c0:a0:58:4d:84:22:94:79:6c:48:e2:79: 4a:e8:4d:09:19:07:ba:e7:1b:e1:8f:7a:bf:3c:53: 92:c6:7f:27:cd:a2:65:cb:41:74:08:57:a0:7b:b0: 93:3b:e3:e0:ff:29:5f:93:2d:ac:3d:4f:bb:b7:7e: b7:f4:58:f5:69:c8:c0:4a:50:53:10:e6:15:27:e8: a1:d7:ab:1e:1c:43:9e:9b:0b:63:9e:72:ac:1b:40: 06:8b:b4:f3:9e:3c:17:96:b0:26:ae:2d:60:dd:f9: 1e:a2:61:83:45:ab:85:b9:e3:80:2d:e3:d0:9a:34: 81:9a:6f:99:75:31:f5:e8:83:84:96:34:68:fc:86: df:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CA:10:85:6B:09:78:32:DA:8E:AC:BD:38:41:14:73:35:AF:63:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/df7c5515-0486-333e-8c0d-4be1af31b67f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:38:94:ef:41:f1:b5:8e:d8:75:9f:fb:dc:3d:96:75:d6:30: 8b:7c:c0:e7:64:f1:87:d4:e3:22:79:49:a1:1e:a6:bf:8f:12: d3:dd:fb:97:57:90:10:e0:2d:02:d7:dd:db:0a:82:6e:04:aa: 52:dc:d5:89:cd:b2:26:6c:f7:cd:0a:74:d7:95:88:90:b0:8d: 8e:28:5f:ca:36:f5:2b:6e:11:64:93:b2:7d:78:f1:e0:09:51: e1:26:8b:eb:e4:3b:b2:48:d6:1e:05:c6:af:89:d4:6d:65:7a: 4a:bf:d1:c7:20:a5:6d:03:94:29:83:b9:75:83:1e:c9:3e:30: 76:c6:f1:91:52:77:34:61:13:04:64:5c:8f:9d:18:fd:e3:97: 68:05:e4:ef:6c:c3:6a:e4:c2:d1:a0:30:8f:7b:0f:8a:e4:1b: 4f:f3:7d:eb:27:03:ed:62:36:f1:0b:16:ff:8e:74:e8:0f:63: b2:c9:e1:b5:a6:0b:2b:41:29:97:e3:15:d7:e4:a0:bd:d4:8e: 6e:0b:27:e1:e0:9d:35:03:da:c3:cd:0b:54:62:77:94:55:af: e1:99:89:78:aa:24:12:22:8f:d4:37:34:fc:06:ec:55:4a:3d: 53:01:01:86:34:30:d3:29:02:49:51:20:fd:71:fd:26:ee:1a: cf:58:93:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJSXJNYkyLH9eWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NTgzYjVmMzktNWMxZS00ZWE3LWE5NDEtZWI4ZjM3OGZmYzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb5ASO7KC1GcgYhUMsiK9+5xRLLPXDk1lO18 dTP828U/p9Ft7zdeMD3rsbGKHEwpkV2U4O/ZwJUbSLsCWudoVCJxDAKOLAKOsCUa /ZrqSYyYhMrs2V9f75AUlI6pLqCFhvIMkDLrQIky834X3Q8idm4xTB0QKw3TrKLA oFhNhCKUeWxI4nlK6E0JGQe65xvhj3q/PFOSxn8nzaJly0F0CFege7CTO+Pg/ylf ky2sPU+7t3639Fj1acjASlBTEOYVJ+ih16seHEOemwtjnnKsG0AGi7TznjwXlrAm ri1g3fkeomGDRauFueOALePQmjSBmm+ZdTH16IOEljRo/Ibf+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7KEIVrCXgy2o6svThBFHM1r2PTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZGY3YzU1MTUtMDQ4Ni0z MzNlLThjMGQtNGJlMWFmMzFiNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIs4lO9B8bWO2HWf+9w9lnXWMIt8wOdk8YfU4yJ5SaEepr+PEtPd+5dX kBDgLQLX3dsKgm4EqlLc1YnNsiZs980KdNeViJCwjY4oX8o29StuEWSTsn148eAJ UeEmi+vkO7JI1h4Fxq+J1G1lekq/0ccgpW0DlCmDuXWDHsk+MHbG8ZFSdzRhEwRk XI+dGP3jl2gF5O9sw2rkwtGgMI97D4rkG0/zfesnA+1iNvELFv+OdOgPY7LJ4bWm CytBKZfjFdfkoL3Ujm4LJ+HgnTUD2sPNC1Rid5RVr+GZiXiqJBIij9Q3NPwG7FVK PVMBAYY0MNMpAklRIP1x/SbuGs9Yk+0= -----END CERTIFICATE-----Generated at Mon Oct 20 16:31:35 2025 by rpki-client