$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ae2323eb-9fb7-3160-b3dc-b47b3b37ccd4.roa File: ae2323eb-9fb7-3160-b3dc-b47b3b37ccd4.roa (raw, json) Hash identifier: 9rp3CKknuMiSuTUga44RkSTythBdz7j0Wuhwg3VngaY= Subject key identifier: 8E:A0:48:0E:4A:18:FC:D4:DF:F7:A4:B0:90:47:70:06:78:8E:9E:6F Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584F49747476408DF8BCD88A6E60 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ae2323eb-9fb7-3160-b3dc-b47b3b37ccd4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 170.114.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:74:76:40:8d:f8:bc:d8:8a:6e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3cf00f43-eed9-417e-ac79-59fa1eec295e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4a:83:24:8f:eb:87:9e:d0:f0:81:ad:bb:72: 45:ea:f4:66:1e:f7:1c:88:04:8d:bc:0a:eb:ec:13: 0c:81:01:00:94:a8:0d:a0:fd:09:29:49:59:24:11: ac:5a:b6:34:ab:d2:8c:35:c8:ca:65:82:99:52:7e: 51:6d:e5:25:e5:8e:d4:d4:93:c1:be:e3:97:a6:e2: 2b:ba:10:80:fe:26:18:b2:a0:be:11:62:bf:d0:8b: d6:ee:e8:c0:c9:3f:b4:ad:81:75:b4:3f:fb:0d:9d: 0b:e6:37:23:99:5d:2e:d9:28:94:e0:90:cf:30:9c: 79:99:54:f5:39:f9:f5:e7:ac:2c:63:d7:2a:85:e7: 2d:b1:b4:12:99:1d:65:31:b5:fd:e2:57:05:9f:ba: c2:59:b9:9b:9a:de:09:65:db:f3:b2:f3:d0:15:46: 8f:ce:c9:55:28:a6:cc:7e:34:1a:73:73:ee:c2:60: c4:4e:dd:c3:02:dc:0b:cf:4f:11:63:66:76:c3:79: f7:db:55:cc:21:d3:54:69:c3:cd:4f:1a:1a:38:ee: b7:1e:96:e2:29:f4:e1:cd:4e:7e:c2:6e:f2:4d:2b: f9:96:a0:c4:17:de:fc:49:f8:53:6f:fd:67:43:88: 69:6b:6d:0e:35:03:ae:61:16:b7:ad:03:e6:5f:7b: 2f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A0:48:0E:4A:18:FC:D4:DF:F7:A4:B0:90:47:70:06:78:8E:9E:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ae2323eb-9fb7-3160-b3dc-b47b3b37ccd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:76:cf:e7:03:0f:24:f7:18:0e:a2:ea:85:07:84:00:9c:77: 72:29:35:ea:98:e1:e2:e7:3e:63:1d:fa:41:2f:eb:c6:21:62: 9a:4f:21:62:4a:b7:d9:3f:27:be:ee:48:c1:1f:87:99:d7:db: 33:ad:6f:92:5f:38:4f:82:07:2c:b4:56:fa:b5:20:40:ac:cc: d9:90:99:40:18:ee:49:7d:2f:fc:44:eb:5d:bb:b0:0a:a6:08: 14:c0:af:90:5c:5e:06:98:aa:0d:d6:c6:8c:8e:a5:4e:f8:f6: a1:a7:e1:a8:de:ea:9d:a6:ee:48:9e:ef:8f:0b:4c:22:89:1c: 59:05:18:49:eb:11:05:0e:85:41:df:f4:02:8b:ac:50:7e:cd: 37:d3:9d:ad:71:1f:eb:fc:9d:59:be:b7:3e:d5:ba:7d:1f:fe: c1:9c:fd:68:fe:ee:82:f0:06:18:0e:00:7a:18:03:c3:0f:a9: ab:d1:31:5e:a5:93:7b:da:55:9c:bf:fd:31:41:48:22:33:e1: 0b:2b:e0:9b:a6:9d:4b:54:f4:65:0a:bb:4b:81:0e:5d:88:69: 46:a6:6f:2a:f9:ff:e1:1d:95:b5:20:2b:37:c5:55:25:02:ee: dc:24:87:36:f2:e3:0c:5e:96:d9:3e:1b:59:60:a8:ca:a7:3d: d1:96:f3:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdHR2QI34vNiKbmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2NmMDBmNDMtZWVkOS00MTdlLWFjNzktNTlmYTFlZWMyOTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEqDJI/rh57Q8IGtu3JF6vRmHvcciASNvArr 7BMMgQEAlKgNoP0JKUlZJBGsWrY0q9KMNcjKZYKZUn5RbeUl5Y7U1JPBvuOXpuIr uhCA/iYYsqC+EWK/0IvW7ujAyT+0rYF1tD/7DZ0L5jcjmV0u2SiU4JDPMJx5mVT1 Ofn156wsY9cqhectsbQSmR1lMbX94lcFn7rCWbmbmt4JZdvzsvPQFUaPzslVKKbM fjQac3PuwmDETt3DAtwLz08RY2Z2w3n321XMIdNUacPNTxoaOO63HpbiKfThzU5+ wm7yTSv5lqDEF978SfhTb/1nQ4hpa20ONQOuYRa3rQPmX3sv2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6gSA5KGPzU3/eksJBHcAZ4jp5vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYWUyMzIzZWItOWZiNy0z MTYwLWIzZGMtYjQ3YjNiMzdjY2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA52z+cDDyT3GA6i6oUHhACcd3IpNeqY4eLnPmMd+kEv68YhYppPIWJK t9k/J77uSMEfh5nX2zOtb5JfOE+CByy0Vvq1IECszNmQmUAY7kl9L/xE6127sAqm CBTAr5BcXgaYqg3WxoyOpU749qGn4aje6p2m7kie748LTCKJHFkFGEnrEQUOhUHf 9AKLrFB+zTfTna1xH+v8nVm+tz7Vun0f/sGc/Wj+7oLwBhgOAHoYA8MPqavRMV6l k3vaVZy//TFBSCIz4Qsr4JumnUtU9GUKu0uBDl2IaUambyr5/+EdlbUgKzfFVSUC 7twkhzby4wxeltk+G1lgqMqnPdGW80c= -----END CERTIFICATE-----Generated at Sat Sep 26 11:46:13 2026 by rpki-client