$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa File: 33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa (raw, json) Hash identifier: nlRZ+N6Z72DUTtnj0CdYEX+taE/4xkMqfQij7wGhWE0= Subject key identifier: 72:14:C1:06:C5:A2:BB:F8:6A:8C:02:7C:83:A4:2E:80:A3:AC:75:58 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584A07D52CF70C9069634EDF9480 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 16509 IP address blocks: 170.114.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:2c:f7:0c:90:69:63:4e:df:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=2ad106b6-5f1a-4df6-b131-3a6b01b5bf9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:4d:85:54:ab:64:9a:10:3c:16:18:a9:33: 62:03:20:78:ef:8a:b4:2e:65:0c:ca:7d:39:a3:6d: a1:aa:8c:8c:09:f3:9a:62:2b:da:e9:ac:1f:ba:8c: 28:3f:c0:77:80:3a:78:cd:16:38:d9:3d:8d:9f:46: 10:95:d5:96:37:2a:d5:a3:25:83:4a:01:36:d9:bd: 1f:67:c2:43:64:5f:ff:dd:fe:7e:c0:b4:25:18:0a: 76:92:58:7a:46:2c:9f:31:2b:7b:7c:4b:37:4c:3e: 85:84:b9:98:12:4b:86:48:75:65:c3:41:87:9b:c8: 97:db:fe:1d:01:9c:90:e2:c4:db:b4:dc:64:6e:50: a2:1e:79:c9:0f:82:9c:43:ed:e1:0b:ee:23:f2:e4: 5d:25:aa:be:e5:fb:c3:36:3f:b7:ce:19:53:b9:4f: 67:bb:b1:7c:04:9b:74:08:d1:63:24:69:d9:f3:e9: 0e:bd:c8:01:a4:49:a6:b3:81:03:13:22:e9:94:1a: dc:59:95:fe:bb:a7:d7:7f:fc:f8:27:b7:88:4d:75: 8f:fc:9d:e7:dd:19:73:af:e3:51:e0:c6:b4:e0:5c: 74:ab:8a:fd:35:b3:ce:88:db:47:a5:27:1e:0c:c0: 1e:5b:ae:56:c2:e5:b4:4c:66:11:84:e2:16:9d:33: 81:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:14:C1:06:C5:A2:BB:F8:6A:8C:02:7C:83:A4:2E:80:A3:AC:75:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:6e:a9:61:d6:bb:db:f3:ec:3e:e5:08:58:88:7f:60:65:0b: 42:e3:96:ef:f1:a4:fd:38:10:97:3b:b6:4e:c9:a3:48:fe:20: ab:b0:e5:b8:c4:31:7f:91:4e:35:c2:b5:e9:69:9c:ba:9c:39: a7:e6:00:d1:82:37:a9:78:d4:70:b8:75:da:6c:9d:6f:00:87: 8d:3c:00:28:35:06:13:d7:4c:74:8d:3b:b3:55:07:c0:38:06: e7:44:76:5f:96:bd:bb:6b:f2:96:e3:25:76:b4:dd:2f:72:f0: ab:73:42:c2:7a:b1:6b:d0:a6:e5:b0:0d:8b:43:f0:d0:76:ed: c9:4a:2d:b4:c8:c1:97:2a:9a:f2:4c:2c:70:ff:e3:6b:fd:c9: 0c:59:8c:a1:91:95:7a:a7:f6:77:9c:88:a1:71:38:33:48:21: ef:a3:27:9a:35:00:6d:1b:ee:b1:4c:83:8d:3b:4a:1d:94:9f: e3:ef:7e:96:ab:14:fb:f9:3d:1d:a0:57:b7:04:2f:95:72:19: 9c:6e:99:e0:72:3d:cd:1a:95:b3:54:1f:3e:ee:5e:05:dc:24: 64:64:6f:c7:48:e7:fe:f7:a7:62:99:f8:13:0e:29:b0:8c:82: 04:5c:cd:53:fc:f5:e6:d3:ed:08:0c:08:0d:d0:09:5c:e1:19: d6:b3:77:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1Sz3DJBpY07flIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk MmFkMTA2YjYtNWYxYS00ZGY2LWIxMzEtM2E2YjAxYjViZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjhNhVSrZJoQPBYYqTNiAyB474q0LmUMyn05 o22hqoyMCfOaYiva6awfuowoP8B3gDp4zRY42T2Nn0YQldWWNyrVoyWDSgE22b0f Z8JDZF//3f5+wLQlGAp2klh6RiyfMSt7fEs3TD6FhLmYEkuGSHVlw0GHm8iX2/4d AZyQ4sTbtNxkblCiHnnJD4KcQ+3hC+4j8uRdJaq+5fvDNj+3zhlTuU9nu7F8BJt0 CNFjJGnZ8+kOvcgBpEmms4EDEyLplBrcWZX+u6fXf/z4J7eITXWP/J3n3Rlzr+NR 4Ma04Fx0q4r9NbPOiNtHpSceDMAeW65WwuW0TGYRhOIWnTOBgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIUwQbForv4aowCfIOkLoCjrHVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMzM0MDJlOTMtMWQ4ZC0z NGUwLTlmODMtMWQyYjRiNDE0NmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERuqWHWu9vz7D7lCFiIf2BlC0Ljlu/xpP04EJc7tk7Jo0j+IKuw5bjE MX+RTjXCtelpnLqcOafmANGCN6l41HC4ddpsnW8Ah408ACg1BhPXTHSNO7NVB8A4 BudEdl+Wvbtr8pbjJXa03S9y8KtzQsJ6sWvQpuWwDYtD8NB27clKLbTIwZcqmvJM LHD/42v9yQxZjKGRlXqn9neciKFxODNIIe+jJ5o1AG0b7rFMg407Sh2Un+Pvfpar FPv5PR2gV7cEL5VyGZxumeByPc0albNUHz7uXgXcJGRkb8dI5/73p2KZ+BMOKbCM ggRczVP89ebT7QgMCA3QCVzhGdazd2Q= -----END CERTIFICATE-----Generated at Sat Jun 14 06:37:27 2025 by rpki-client