$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baef8468-3f58-3bbe-b21b-0654fc798773.roa File: baef8468-3f58-3bbe-b21b-0654fc798773.roa (raw, json) Hash identifier: nz6MYQ5VmqDoQq/v3yBSr/TYr0YaIUEgyAhJiqvPqoI= Subject key identifier: D4:48:BA:0C:9F:7C:6B:3C:66:56:EE:C5:F5:D9:64:32:EB:2D:40:48 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584CB981F6E5F0053E4137845E80 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baef8468-3f58-3bbe-b21b-0654fc798773.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 14618 IP address blocks: 170.114.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:f6:e5:f0:05:3e:41:37:84:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=12df2ec8-9435-4b68-91dd-1b74db26c69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e5:e1:19:c5:5f:2c:9e:66:74:0f:e3:c2:e8: 0d:28:c8:4d:c6:ef:d3:28:00:b6:47:04:bb:4e:ea: 74:3f:18:ab:90:be:36:4c:b9:02:2c:37:34:56:6c: 31:fd:09:b1:f3:8d:a5:30:cb:3a:83:3a:08:39:9d: 84:ee:57:cf:42:4d:e9:8e:41:bb:da:8f:e3:5f:e1: 3a:b8:7d:70:9e:5d:55:3a:3e:7d:c1:81:b2:86:26: e7:b6:9e:bc:3e:57:74:16:38:3d:c4:71:40:99:67: 8b:24:d8:17:af:94:c6:9d:8d:7e:41:ab:8b:a7:7c: 10:79:b6:04:61:ec:4e:92:ce:4b:99:ee:5d:21:ac: f9:dc:df:cd:fa:76:03:fc:70:67:8a:75:d9:09:e3: 46:5f:3c:dc:42:0c:c1:dc:6d:2e:43:43:3d:dd:1f: db:f0:6c:df:83:bb:ab:d3:14:18:68:87:8f:c4:98: 1f:a2:bd:0c:24:3d:f7:e6:99:5f:36:b1:e5:0b:ec: 84:8d:d7:40:41:a3:34:66:0e:62:71:dd:fb:03:18: f3:3d:0d:6d:db:24:78:ab:bc:68:1e:d7:32:16:f3: e5:b2:62:5d:b6:d2:fa:97:77:e4:c7:ff:eb:3a:29: dd:4e:fe:0e:40:84:bb:2b:59:65:8f:3b:61:f7:e8: d9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:48:BA:0C:9F:7C:6B:3C:66:56:EE:C5:F5:D9:64:32:EB:2D:40:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/baef8468-3f58-3bbe-b21b-0654fc798773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:12:cb:d5:f4:a5:71:e2:20:a5:59:7c:40:d2:25:6e:82:98: dc:e2:96:be:e2:5c:79:da:09:8f:80:10:b4:86:26:38:6f:74: bb:40:31:e9:40:f2:f1:39:4a:59:a7:d5:3a:5c:26:26:92:dd: c9:29:dc:4a:71:65:52:1b:14:bb:e7:c1:41:fb:87:c1:13:ef: 45:45:30:0b:12:9f:f3:cf:04:86:f1:f8:78:03:40:4a:ab:83: 43:1a:79:d0:d0:97:83:54:8e:f9:78:a1:6f:a4:73:ea:cc:84: 38:17:2b:a3:72:80:34:13:99:ab:0b:c0:39:48:0a:c4:77:1d: 66:fe:09:a4:15:f2:72:e2:54:87:d6:18:fc:65:ea:19:c2:64: 9c:00:13:dc:ee:58:51:7e:d8:88:f3:fc:0e:73:f5:04:62:f8: a4:af:2a:19:6a:f4:77:20:62:39:c7:e7:25:df:66:29:7a:86: 2f:b1:46:2a:29:8f:08:0d:56:ff:18:28:a0:3d:61:fc:c0:ba: 47:1f:49:92:c6:93:83:80:f2:52:eb:f3:91:00:c1:f5:86:46: 3a:16:f0:3b:6e:5a:a3:68:54:3c:b0:b6:56:f4:e8:f6:51:21: e4:11:8a:92:b1:a8:ec:7a:65:01:68:ac:51:6f:e1:86:9a:b4: 03:90:73:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gfbl8AU+QTeEXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk MTJkZjJlYzgtOTQzNS00YjY4LTkxZGQtMWI3NGRiMjZjNjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOXhGcVfLJ5mdA/jwugNKMhNxu/TKAC2RwS7 Tup0PxirkL42TLkCLDc0Vmwx/Qmx842lMMs6gzoIOZ2E7lfPQk3pjkG72o/jX+E6 uH1wnl1VOj59wYGyhibntp68Pld0Fjg9xHFAmWeLJNgXr5TGnY1+QauLp3wQebYE YexOks5Lme5dIaz53N/N+nYD/HBninXZCeNGXzzcQgzB3G0uQ0M93R/b8Gzfg7ur 0xQYaIePxJgfor0MJD335plfNrHlC+yEjddAQaM0Zg5icd37AxjzPQ1t2yR4q7xo HtcyFvPlsmJdttL6l3fkx//rOindTv4OQIS7K1lljzth9+jZ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRIugyffGs8ZlbuxfXZZDLrLUBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvYmFlZjg0NjgtM2Y1OC0z YmJlLWIyMWItMDY1NGZjNzk4NzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqnJ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYSy9X0pXHiIKVZfEDSJW6CmNzilr7iXHnaCY+AELSGJjhvdLtAMelA 8vE5Slmn1TpcJiaS3ckp3EpxZVIbFLvnwUH7h8ET70VFMAsSn/PPBIbx+HgDQEqr g0MaedDQl4NUjvl4oW+kc+rMhDgXK6NygDQTmasLwDlICsR3HWb+CaQV8nLiVIfW GPxl6hnCZJwAE9zuWFF+2Ijz/A5z9QRi+KSvKhlq9HcgYjnH5yXfZil6hi+xRiop jwgNVv8YKKA9YfzAukcfSZLGk4OA8lLr85EAwfWGRjoW8DtuWqNoVDywtlb06PZR IeQRipKxqOx6ZQForFFv4YaatAOQcwA= -----END CERTIFICATE-----Generated at Mon Mar 2 11:45:00 2026 by rpki-client