$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dfae5420-d488-32e7-b34e-b98d0d26ba88.roa File: dfae5420-d488-32e7-b34e-b98d0d26ba88.roa (raw, json) Hash identifier: RUPsj5AVWb2+pIfRK9/qtkEJ/c3qCLKrT03t7j++Lxk= Subject key identifier: 9A:09:55:01:61:CB:4F:E4:A9:85:76:D4:AC:BB:67:2B:1B:EA:B1:02 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584F497635292781CE96B7687D80 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dfae5420-d488-32e7-b34e-b98d0d26ba88.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 170.114.65.0/24 maxlen: 24 170.114.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:35:29:27:81:ce:96:b7:68:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dde37f9c-d76c-4504-8f4c-f91eec429712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f6:ce:a1:a6:c9:17:72:2b:0f:aa:1a:f2:10: 51:b5:76:10:45:6d:22:89:31:3a:49:59:a6:2a:da: f8:82:25:28:00:94:6a:fe:72:a9:24:1f:58:1e:53: 42:b5:56:db:56:c8:11:3b:90:7a:06:11:94:b0:f9: d5:0a:55:fa:23:0a:b1:f9:f0:79:de:4f:4f:f7:65: 83:c1:1d:2d:3c:9e:32:29:a5:19:ef:56:25:2e:d2: 3e:09:eb:d3:f1:f1:92:2a:94:e3:6f:d0:7d:60:31: 7a:04:b8:46:24:3e:7c:60:ac:e7:0e:03:44:54:d4: e5:84:9e:8a:17:3b:32:96:c9:1b:56:38:d6:9a:47: 49:15:76:49:c6:6f:23:15:00:28:e4:05:57:a7:7a: 7a:99:b4:a1:f0:21:da:4a:95:5f:4e:17:65:f6:19: 54:22:20:89:cb:c4:0e:d0:4f:6f:f2:f8:81:c2:71: 16:51:63:d6:d2:23:d9:3a:d4:3d:a8:5b:1a:6e:ac: 62:db:42:7a:5a:06:20:41:fa:d3:9d:6b:dd:ae:31: d9:9b:22:59:c5:5b:69:5f:87:f1:d8:7f:5b:84:ec: 86:00:46:22:a8:8d:ab:8b:4b:37:3d:85:d5:80:6d: 63:61:78:2c:a9:57:c0:c6:ae:61:33:de:17:2f:77: e6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:09:55:01:61:CB:4F:E4:A9:85:76:D4:AC:BB:67:2B:1B:EA:B1:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dfae5420-d488-32e7-b34e-b98d0d26ba88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.65.0-170.114.66.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:68:2c:af:cc:70:e6:99:a3:33:b3:6e:c2:48:23:7f:0e:1a: e1:39:1e:f4:40:db:40:49:18:58:d4:0d:c5:2e:8f:f4:e2:26: c2:96:be:74:34:01:b7:df:a3:f0:fd:d3:4b:1b:1c:e4:2d:7c: cb:21:07:15:a9:d4:73:41:c8:d2:73:7d:2d:89:be:05:97:cc: eb:54:bf:00:1a:36:1d:1b:f3:1a:bf:ec:4a:fa:c7:5b:ad:12: 7f:37:5e:6a:01:e3:8d:9f:22:2f:04:88:9d:8f:ad:05:3f:18: 43:a3:be:80:dd:f6:27:ff:a6:a3:90:0a:60:22:d0:f3:3a:f9: ea:a4:bc:4c:2e:64:7e:bf:35:99:72:e4:f3:d4:76:97:fc:cb: 77:06:1e:b7:8e:30:cf:8c:1d:e1:80:b5:00:75:ad:d1:62:97: 03:db:31:63:c1:61:5c:d7:1e:df:41:1f:51:e6:5e:b0:24:30: 57:18:40:32:c1:de:92:56:26:d1:fb:d9:41:22:ef:58:f7:d4: 77:35:28:fe:ce:b3:7c:07:92:ae:c1:7e:4f:b5:63:e4:6b:06: 3e:c5:21:95:eb:25:9c:ce:15:5a:35:51:e2:68:e7:79:96:e1: c9:8e:8e:8f:57:7a:25:c2:31:c7:e8:96:b7:0b:3a:c2:cb:ed: 6a:db:5e:3e -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9JdjUpJ4HOlrdofYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGRlMzdmOWMtZDc2Yy00NTA0LThmNGMtZjkxZWVjNDI5NzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvbOoabJF3IrD6oa8hBRtXYQRW0iiTE6SVmm Ktr4giUoAJRq/nKpJB9YHlNCtVbbVsgRO5B6BhGUsPnVClX6Iwqx+fB53k9P92WD wR0tPJ4yKaUZ71YlLtI+CevT8fGSKpTjb9B9YDF6BLhGJD58YKznDgNEVNTlhJ6K FzsylskbVjjWmkdJFXZJxm8jFQAo5AVXp3p6mbSh8CHaSpVfThdl9hlUIiCJy8QO 0E9v8viBwnEWUWPW0iPZOtQ9qFsabqxi20J6WgYgQfrTnWvdrjHZmyJZxVtpX4fx 2H9bhOyGAEYiqI2ri0s3PYXVgG1jYXgsqVfAxq5hM94XL3fmeQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJoJVQFhy0/kqYV21Ky7Zysb6rECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZGZhZTU0MjAtZDQ4OC0z MmU3LWIzNGUtYjk4ZDBkMjZiYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACqckED BACqckIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEATGgsr8xw5pmjM7Nuwkgjfw4a4Tke9EDbQEkYWNQNxS6P 9OImwpa+dDQBt9+j8P3TSxsc5C18yyEHFanUc0HI0nN9LYm+BZfM61S/ABo2HRvz Gr/sSvrHW60SfzdeagHjjZ8iLwSInY+tBT8YQ6O+gN32J/+mo5AKYCLQ8zr56qS8 TC5kfr81mXLk89R2l/zLdwYet44wz4wd4YC1AHWt0WKXA9sxY8FhXNce30EfUeZe sCQwVxhAMsHeklYm0fvZQSLvWPfUdzUo/s6zfAeSrsF+T7Vj5GsGPsUhleslnM4V WjVR4mjneZbhyY6Oj1d6JcIxx+iWtws6wsvtattePg== -----END CERTIFICATE-----Generated at Tue Oct 6 03:00:14 2026 by rpki-client