$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa File: 33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa (raw, json) Hash identifier: DnwMW1keSCu6k1jO8v9Iexgnq4LL3p8IdGAsUd4uuhQ= Subject key identifier: 22:17:58:A7:4A:BB:E8:87:4D:EA:4C:94:A7:E3:95:F2:BF:A1:B1:6F Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584CAA270D014E3A2FB53C1D0100 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 16509 IP address blocks: 170.114.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:0d:01:4e:3a:2f:b5:3c:1d:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=0de9faa7-7d6e-4ec0-9c99-1875ced23d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:17:5f:f8:63:ff:09:b9:0d:24:68:1e:fd:2b: e9:c1:5b:3c:73:e4:01:21:26:8a:d2:24:83:da:4e: 10:63:51:cb:a4:d9:2b:fa:94:4a:cc:cb:a3:13:31: 43:c4:28:28:d0:25:8d:8a:d9:54:48:4d:b5:26:a9: c4:1a:47:a8:a8:57:62:59:e7:60:3e:4e:d7:f1:05: c7:29:1d:61:0a:d1:a4:13:77:2b:b0:f5:7d:cc:05: ce:c0:05:90:39:1b:89:2c:f6:f7:39:6e:94:d0:9e: a0:18:0d:c5:69:00:57:41:45:2b:44:df:e1:24:52: 3d:2c:7a:ea:6f:56:28:4c:47:e6:71:61:60:97:4a: af:4d:77:64:96:68:80:82:98:d6:32:84:5d:3c:1a: ce:52:83:68:a5:ed:0e:ae:bd:25:9c:24:70:04:cb: 28:4f:78:07:b3:62:70:b2:ee:38:2a:23:80:7c:4b: 92:3c:2b:ee:28:2e:20:6f:99:e6:4d:78:ec:9c:53: e2:ff:95:58:25:bc:b3:60:62:1a:c4:cb:94:92:b7: 60:39:5e:1c:e6:7f:ce:68:80:ad:99:58:0f:18:f8: db:4b:c8:d8:e5:2c:54:d0:f1:bb:a8:4b:d7:94:14: 69:7f:f3:21:94:fc:48:68:3d:67:f6:34:a5:d9:33: 76:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:17:58:A7:4A:BB:E8:87:4D:EA:4C:94:A7:E3:95:F2:BF:A1:B1:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:4d:85:0d:b2:31:ee:56:3d:f0:b4:2c:e2:85:6c:c1:81:12: de:c8:e4:74:4c:f4:71:80:66:dd:e0:d7:59:d0:bf:00:f7:ac: fe:39:10:ba:2d:51:3c:c2:a4:7f:c2:64:1f:c1:9d:4c:5d:25: f3:a4:b5:79:69:e5:ff:c0:23:61:6a:cd:e9:a3:d3:0b:11:b6: b4:60:02:d0:5e:f4:ab:95:90:18:f7:d1:3f:58:5f:c2:99:ab: 04:0e:cb:2a:96:4f:96:ae:b0:f4:3c:0d:c1:63:90:c4:2a:4c: 91:a0:2c:c0:7c:6f:27:57:87:f6:da:2d:01:87:00:ea:a8:af: 09:69:e7:26:0c:22:49:81:d3:88:11:b4:24:84:95:85:4c:0e: 0b:93:5b:8b:a6:e3:04:d5:8b:0d:1f:cc:0d:81:e8:d3:d3:e7: f7:3a:24:87:dd:a9:39:27:26:bf:27:71:de:5a:57:03:ce:f3: 16:98:43:8d:75:47:6a:23:77:43:4c:aa:7e:a3:6c:2e:44:42: c6:06:3b:2e:83:7e:c7:f0:8a:28:a4:6c:68:c9:e2:98:35:47: ca:82:97:8f:6f:61:52:9c:66:10:9f:12:00:70:ea:ce:94:b1: 21:51:4d:d5:c4:d4:4b:d6:11:1d:85:52:32:db:ca:45:bf:0e: f8:5d:c1:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJw0BTjovtTwdAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk MGRlOWZhYTctN2Q2ZS00ZWMwLTljOTktMTg3NWNlZDIzZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxdf+GP/CbkNJGge/SvpwVs8c+QBISaK0iSD 2k4QY1HLpNkr+pRKzMujEzFDxCgo0CWNitlUSE21JqnEGkeoqFdiWedgPk7X8QXH KR1hCtGkE3crsPV9zAXOwAWQORuJLPb3OW6U0J6gGA3FaQBXQUUrRN/hJFI9LHrq b1YoTEfmcWFgl0qvTXdklmiAgpjWMoRdPBrOUoNope0Orr0lnCRwBMsoT3gHs2Jw su44KiOAfEuSPCvuKC4gb5nmTXjsnFPi/5VYJbyzYGIaxMuUkrdgOV4c5n/OaICt mVgPGPjbS8jY5SxU0PG7qEvXlBRpf/MhlPxIaD1n9jSl2TN2WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIXWKdKu+iHTepMlKfjlfK/obFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMzM0MDJlOTMtMWQ4ZC0z NGUwLTlmODMtMWQyYjRiNDE0NmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhNhQ2yMe5WPfC0LOKFbMGBEt7I5HRM9HGAZt3g11nQvwD3rP45ELot UTzCpH/CZB/BnUxdJfOktXlp5f/AI2Fqzemj0wsRtrRgAtBe9KuVkBj30T9YX8KZ qwQOyyqWT5ausPQ8DcFjkMQqTJGgLMB8bydXh/baLQGHAOqorwlp5yYMIkmB04gR tCSElYVMDguTW4um4wTViw0fzA2B6NPT5/c6JIfdqTknJr8ncd5aVwPO8xaYQ411 R2ojd0NMqn6jbC5EQsYGOy6DfsfwiiikbGjJ4pg1R8qCl49vYVKcZhCfEgBw6s6U sSFRTdXE1EvWER2FUjLbykW/DvhdwcI= -----END CERTIFICATE-----Generated at Sun Mar 1 19:03:04 2026 by rpki-client