$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ff857103-330d-35fa-a2de-54ebb219efb9.roa File: ff857103-330d-35fa-a2de-54ebb219efb9.roa (raw, json) Hash identifier: baU0y9eNudY0eAuRd0btb2sTUVIvmjjfqAUbI3G7rns= Subject key identifier: 54:DE:BB:7D:FC:11:D8:D6:36:5B:2B:D4:69:1B:9B:20:10:68:A7:AF Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584F8F3DB5F1C70FC21922DAE708 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ff857103-330d-35fa-a2de-54ebb219efb9.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 16509 IP address blocks: 170.114.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:b5:f1:c7:0f:c2:19:22:da:e7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=a3dba000-a82b-4076-9bbd-36c8586ecf65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:05:4e:fb:2e:52:5f:6a:07:4f:d6:33:0d: d4:06:ed:e5:9e:7e:ec:2e:e3:07:b1:86:c7:fa:9f: 89:51:3d:a6:7e:ff:17:1b:39:d3:18:ee:43:b6:a6: 61:61:92:17:29:e1:ab:b1:ba:1a:99:2d:1d:ec:5f: d4:06:52:60:b9:59:d8:a7:d2:a0:5a:5b:53:a9:29: 57:81:32:39:4a:ca:7e:55:cc:41:6d:ee:43:80:55: a7:37:7c:b2:5d:a2:a2:ed:8c:f3:70:89:69:40:5d: b8:ac:dc:3d:20:a5:4a:ac:3c:a1:db:9e:bc:b4:ec: 50:86:ea:7b:35:a4:08:87:59:e8:4b:e1:6b:64:ab: 32:53:ea:c2:51:a5:73:0b:34:c9:0a:f0:e7:b0:e4: ef:9e:07:fa:e4:0a:64:a2:1f:ae:29:ac:fd:77:85: de:d3:dd:8f:8d:75:7a:17:a9:5d:65:fa:b5:15:da: 97:31:2a:6b:87:30:79:71:6d:44:e4:3d:cc:5b:b0: f6:ef:28:7c:42:66:1a:c6:d4:5c:28:ab:a0:83:90: 25:c9:b9:7a:34:3b:89:c2:1e:68:9f:b7:b4:ae:9c: 1d:18:22:de:d3:5f:b2:bb:82:fe:69:dc:51:3e:55: b7:6e:33:d2:b3:fd:15:9c:b3:d4:87:11:bb:93:b0: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DE:BB:7D:FC:11:D8:D6:36:5B:2B:D4:69:1B:9B:20:10:68:A7:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ff857103-330d-35fa-a2de-54ebb219efb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:6c:e3:f7:4c:ee:d1:52:2e:cc:f6:0a:6b:35:57:43:cc:1f: ec:38:ee:49:43:db:14:f8:54:b1:dd:40:71:79:38:3b:47:2b: 11:bd:a1:51:d0:00:43:7b:01:75:b2:36:70:85:b2:ee:10:56: 36:02:41:a7:6a:78:96:4f:a0:bb:dd:40:27:50:84:39:bc:d0: 95:cf:2a:03:cc:ba:f3:81:67:27:21:23:6c:15:b6:9e:80:7f: bc:7b:2c:71:84:f8:58:e1:53:db:71:3a:cc:7f:0d:21:0d:e1: 94:0f:58:a7:49:a3:50:d7:e5:56:e4:5e:b6:c7:e6:52:83:22: 02:f9:8a:63:f3:cc:49:63:3c:c1:92:23:9e:dd:33:d4:bc:a5: c2:95:81:6a:dc:30:45:82:a6:b7:ca:53:e6:f0:4f:9d:a3:c2: e2:c3:62:a6:31:31:5a:6d:03:b1:05:ec:19:61:d2:2e:4b:3f: 71:d0:8f:1b:ea:b0:61:28:df:39:a1:36:10:92:55:dc:d8:f4: f4:da:84:f8:c5:1a:66:44:97:e1:b5:c3:15:72:b1:94:2f:76: 9a:34:d9:49:6f:70:6a:90:b5:a9:30:31:15:87:24:ea:a8:06: ae:db:33:9a:2a:8c:a3:97:2c:0a:5f:eb:1e:0d:aa:80:b6:fb: 0f:2b:12:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPbXxxw/CGSLa5wgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk YTNkYmEwMDAtYTgyYi00MDc2LTliYmQtMzZjODU4NmVjZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKEFTvsuUl9qB0/WMw3UBu3lnn7sLuMHsYbH +p+JUT2mfv8XGznTGO5DtqZhYZIXKeGrsboamS0d7F/UBlJguVnYp9KgWltTqSlX gTI5Ssp+VcxBbe5DgFWnN3yyXaKi7YzzcIlpQF24rNw9IKVKrDyh2568tOxQhup7 NaQIh1noS+FrZKsyU+rCUaVzCzTJCvDnsOTvngf65Apkoh+uKaz9d4Xe092PjXV6 F6ldZfq1FdqXMSprhzB5cW1E5D3MW7D27yh8QmYaxtRcKKugg5Alybl6NDuJwh5o n7e0rpwdGCLe01+yu4L+adxRPlW3bjPSs/0VnLPUhxG7k7AwswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTeu338EdjWNlsr1GkbmyAQaKevMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZmY4NTcxMDMtMzMwZC0z NWZhLWEyZGUtNTRlYmIyMTllZmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqnIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNs4/dM7tFSLsz2Cms1V0PMH+w47klD2xT4VLHdQHF5ODtHKxG9oVHQ AEN7AXWyNnCFsu4QVjYCQadqeJZPoLvdQCdQhDm80JXPKgPMuvOBZychI2wVtp6A f7x7LHGE+FjhU9txOsx/DSEN4ZQPWKdJo1DX5VbkXrbH5lKDIgL5imPzzEljPMGS I57dM9S8pcKVgWrcMEWCprfKU+bwT52jwuLDYqYxMVptA7EF7Blh0i5LP3HQjxvq sGEo3zmhNhCSVdzY9PTahPjFGmZEl+G1wxVysZQvdpo02UlvcGqQtakwMRWHJOqo Bq7bM5oqjKOXLApf6x4NqoC2+w8rEr8= -----END CERTIFICATE-----Generated at Tue Oct 27 16:49:54 2026 by rpki-client