$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/420156b9-fed8-3148-a9b6-7f55eba66994.roa File: 420156b9-fed8-3148-a9b6-7f55eba66994.roa (raw, json) Hash identifier: Ae7OyL1A+8mVB5lFEWJDaFaNkF7vY6KqnF8Qi7I/eTw= Subject key identifier: CB:44:93:A3:DE:D0:51:84:B4:7B:1B:95:00:9F:2A:03:CB:61:48:D9 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584F51D2AE6A29368A50FD0F113C Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/420156b9-fed8-3148-a9b6-7f55eba66994.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 170.114.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:ae:6a:29:36:8a:50:fd:0f:11:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=8c0022e5-097b-44d4-9c14-87a7a7baa983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:30:95:22:0d:3d:0b:08:1b:e8:43:52:a5:57: 71:11:ea:dc:c2:8a:6b:d7:b9:ac:56:1b:37:3a:1a: b6:a0:09:5c:91:e4:a6:91:cc:8d:3e:c8:42:dd:21: 52:a0:ee:1b:2f:f1:3b:cb:56:fc:74:07:27:77:7f: 1c:22:a8:62:29:b8:86:fb:09:6b:dd:66:9a:b9:f7: 22:67:aa:8f:19:70:e8:34:b7:7b:6b:f7:f7:1d:c3: fb:31:66:b2:2f:17:89:08:15:d3:46:09:24:70:fc: e4:72:3d:98:bc:cb:4e:b5:a7:56:39:db:a0:20:87: d5:1c:13:f6:fe:6f:ad:1b:16:1e:07:99:c1:26:86: 46:c3:66:a7:3b:95:f1:49:23:13:b0:2d:c5:b3:18: 44:0a:48:a6:ed:9b:04:66:61:5b:b5:05:df:5f:dc: 08:21:9c:07:ba:0d:15:1b:0b:26:0f:d2:54:22:4a: 1e:9a:bc:e2:fb:be:13:93:1f:71:f3:52:0d:ed:01: a9:74:c4:f5:67:77:02:0a:d1:ca:93:50:23:05:65: 5a:31:ad:05:04:3d:75:e2:60:f6:82:ee:b0:6b:a8: e6:f7:35:b0:01:3e:b3:33:95:2e:76:42:32:37:a0: 9d:4d:41:32:60:5e:47:ee:cb:b0:36:67:47:b6:5e: 71:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:44:93:A3:DE:D0:51:84:B4:7B:1B:95:00:9F:2A:03:CB:61:48:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/420156b9-fed8-3148-a9b6-7f55eba66994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e0:e1:cb:59:5e:50:fb:56:6c:5c:52:e6:d0:82:b8:1c:82: e9:ce:2b:48:61:bd:0c:d5:bb:e0:41:18:76:12:c7:d9:01:31: 80:8c:c3:95:39:e2:19:72:e1:89:cb:4a:d5:fd:3d:b7:39:ca: 60:c3:20:1d:47:90:35:48:e5:c2:3b:33:a0:d6:64:8c:11:ff: 94:7c:91:7e:71:f8:89:7d:d5:e0:25:ae:5f:6c:27:02:94:06: 29:65:02:25:95:33:ae:51:e8:9a:5f:a1:a7:1e:f8:8e:5b:ed: b4:0c:4e:90:b6:f6:c2:8f:ff:c6:a2:6e:34:e2:24:58:0e:f6: 47:4f:5d:db:c9:3e:92:80:8b:3c:94:12:f1:1a:64:44:9a:a6: b9:f0:c0:4b:e0:bd:b5:34:72:66:2a:4f:24:00:52:df:f2:8a: d7:58:3c:58:29:ee:07:36:19:e8:22:e7:3a:0a:9a:25:8f:04: ff:6e:da:54:4b:1a:4b:cb:f5:25:46:0e:1a:42:cb:1f:74:07: 9b:69:c8:41:eb:f3:92:c9:18:67:49:47:a1:e6:11:51:2f:1d: af:b0:85:93:e3:c1:21:cc:b9:a3:38:58:5b:4d:ad:2d:bc:a1: fb:0e:2c:73:e6:94:80:c6:18:aa:36:91:f3:be:0d:b1:ce:19: b5:1c:78:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0q5qKTaKUP0PETwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk OGMwMDIyZTUtMDk3Yi00NGQ0LTljMTQtODdhN2E3YmFhOTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zCVIg09Cwgb6ENSpVdxEercwopr17msVhs3 Ohq2oAlckeSmkcyNPshC3SFSoO4bL/E7y1b8dAcnd38cIqhiKbiG+wlr3Waaufci Z6qPGXDoNLd7a/f3HcP7MWayLxeJCBXTRgkkcPzkcj2YvMtOtadWOdugIIfVHBP2 /m+tGxYeB5nBJoZGw2anO5XxSSMTsC3FsxhECkim7ZsEZmFbtQXfX9wIIZwHug0V GwsmD9JUIkoemrzi+74Tkx9x81IN7QGpdMT1Z3cCCtHKk1AjBWVaMa0FBD114mD2 gu6wa6jm9zWwAT6zM5UudkIyN6CdTUEyYF5H7suwNmdHtl5x3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtEk6Pe0FGEtHsblQCfKgPLYUjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNDIwMTU2YjktZmVkOC0z MTQ4LWE5YjYtN2Y1NWViYTY2OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqnJGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjg4ctZXlD7VmxcUubQgrgcgunOK0hhvQzVu+BBGHYSx9kBMYCMw5U5 4hly4YnLStX9Pbc5ymDDIB1HkDVI5cI7M6DWZIwR/5R8kX5x+Il91eAlrl9sJwKU BillAiWVM65R6Jpfoace+I5b7bQMTpC29sKP/8aibjTiJFgO9kdPXdvJPpKAizyU EvEaZESaprnwwEvgvbU0cmYqTyQAUt/yitdYPFgp7gc2Gegi5zoKmiWPBP9u2lRL GkvL9SVGDhpCyx90B5tpyEHr85LJGGdJR6HmEVEvHa+whZPjwSHMuaM4WFtNrS28 ofsOLHPmlIDGGKo2kfO+DbHOGbUceCk= -----END CERTIFICATE-----Generated at Mon Sep 28 10:32:05 2026 by rpki-client