$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5402a110-1b9b-3bb4-9717-335e1f5e16ca.roa File: 5402a110-1b9b-3bb4-9717-335e1f5e16ca.roa (raw, json) Hash identifier: CyhhEM4uQqZk7dQnWGc8cbIIjPuo9g2gTv14xTxYNfY= Subject key identifier: F0:72:4D:8F:6C:6A:EE:1A:AE:08:37:DB:1C:E9:DA:BA:91:80:59:81 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584B196C144A795CBE97BA376F00 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5402a110-1b9b-3bb4-9717-335e1f5e16ca.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 170.114.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:14:4a:79:5c:be:97:ba:37:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=76725ba8-4c29-4b93-83ba-462c6a7d65d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:92:e9:39:33:35:c6:f3:ba:47:27:5d:35:c0: 38:b3:10:fc:39:e3:16:f1:f4:7a:17:56:60:8e:53: c4:2f:28:98:10:8d:68:7c:1c:f1:26:e4:92:8a:b7: 78:8e:2f:cd:af:10:bc:36:14:c8:67:b7:79:1a:f8: de:92:21:c6:de:69:79:4f:3e:1a:96:19:45:49:3a: 4e:c6:ce:1f:c0:8b:5c:bc:e1:da:d7:8a:2c:e1:63: dd:ee:85:0b:fa:2b:ab:76:16:14:d2:26:54:bd:63: f9:f6:08:e4:8d:40:9b:cb:5c:60:52:d8:a4:97:63: 3e:84:5f:b4:b6:16:c3:31:e5:de:53:32:23:3b:86: 9a:31:4c:1e:56:57:79:4b:df:e2:7b:c9:4d:21:fd: 07:31:05:c2:f1:af:df:aa:48:fd:e6:d3:12:5b:45: 06:a3:2a:bf:18:90:7f:61:99:9a:b5:05:e9:47:e9: 4f:ef:ce:71:19:bb:7e:27:b6:35:ee:ea:e6:70:2f: de:4a:c2:de:8a:31:cb:21:1f:a8:ef:f8:7d:2b:84: e7:1c:72:3c:cc:72:58:f8:aa:3a:77:4b:ac:15:ef: b6:a3:15:d4:de:ee:99:4e:30:3b:2a:03:be:ae:bb: 4a:ad:05:4d:c9:fd:75:22:ce:2e:20:a1:45:fd:8c: 15:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:72:4D:8F:6C:6A:EE:1A:AE:08:37:DB:1C:E9:DA:BA:91:80:59:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5402a110-1b9b-3bb4-9717-335e1f5e16ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:f2:e9:f3:ac:1b:38:c3:9b:7b:f4:22:40:04:8d:af:3d:65: c3:fb:3f:be:af:c1:d2:df:da:73:a2:eb:42:b1:8e:41:bf:d1: 2f:5d:f1:59:04:86:4f:b5:2d:4a:57:d4:41:2a:36:7b:9b:d0: eb:db:79:40:30:ee:45:52:6c:89:7b:ae:52:a4:d2:c9:ac:05: 9c:f4:e5:54:eb:c3:ae:82:ee:99:ad:1a:9c:29:af:9e:4e:41: 9c:29:ec:e2:5f:39:f9:a5:82:38:0d:a6:9c:07:90:4e:c8:37: 50:89:81:e8:fc:0d:4a:e8:16:81:e6:54:40:e0:e4:4e:dd:ef: 95:b5:ff:bf:b5:5c:d7:91:1f:84:76:30:85:5d:78:94:26:a9: 80:a5:64:07:07:fb:77:63:61:da:85:ee:34:80:d6:6c:3a:8f: be:10:d1:a4:01:6d:29:f2:83:43:27:01:4b:a9:94:af:da:d2: b2:86:ba:c3:ba:f3:46:4a:06:cd:5c:ed:e6:1d:33:f2:b8:77: 95:1b:9c:8b:9d:58:f0:64:3d:3d:41:fc:ae:2d:5b:48:94:fd: 6f:84:68:5b:78:ee:39:d6:e3:27:5f:39:1e:06:c7:98:b1:5b: f0:14:8e:68:d5:c7:73:fc:ce:b4:93:fb:f7:ee:54:21:fa:a2: c4:9f:94:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbBRKeVy+l7o3bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk NzY3MjViYTgtNGMyOS00YjkzLTgzYmEtNDYyYzZhN2Q2NWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpLpOTM1xvO6RyddNcA4sxD8OeMW8fR6F1Zg jlPELyiYEI1ofBzxJuSSird4ji/NrxC8NhTIZ7d5GvjekiHG3ml5Tz4alhlFSTpO xs4fwItcvOHa14os4WPd7oUL+iurdhYU0iZUvWP59gjkjUCby1xgUtikl2M+hF+0 thbDMeXeUzIjO4aaMUweVld5S9/ie8lNIf0HMQXC8a/fqkj95tMSW0UGoyq/GJB/ YZmatQXpR+lP785xGbt+J7Y17urmcC/eSsLeijHLIR+o7/h9K4TnHHI8zHJY+Ko6 d0usFe+2oxXU3u6ZTjA7KgO+rrtKrQVNyf11Is4uIKFF/YwVtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPByTY9sau4argg32xzp2rqRgFmBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNTQwMmExMTAtMWI5Yi0z YmI0LTk3MTctMzM1ZTFmNWUxNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqnI6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLy6fOsGzjDm3v0IkAEja89ZcP7P76vwdLf2nOi60KxjkG/0S9d8VkE hk+1LUpX1EEqNnub0OvbeUAw7kVSbIl7rlKk0smsBZz05VTrw66C7pmtGpwpr55O QZwp7OJfOfmlgjgNppwHkE7IN1CJgej8DUroFoHmVEDg5E7d75W1/7+1XNeRH4R2 MIVdeJQmqYClZAcH+3djYdqF7jSA1mw6j74Q0aQBbSnyg0MnAUuplK/a0rKGusO6 80ZKBs1c7eYdM/K4d5UbnIudWPBkPT1B/K4tW0iU/W+EaFt47jnW4ydfOR4Gx5ix W/AUjmjVx3P8zrST+/fuVCH6osSflEg= -----END CERTIFICATE-----Generated at Wed Nov 5 00:45:11 2025 by rpki-client