$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa File: 33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa (raw, json) Hash identifier: YdwPW7Q0SP/eaeHDiy5EMXdpszoEa483bRqai8ZDr40= Subject key identifier: E9:A7:3D:5E:92:43:10:25:C9:88:BE:09:A1:9E:6C:D2:B7:53:1B:7B Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584AE891270527DFF8EEA0104400 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 170.114.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:27:05:27:df:f8:ee:a0:10:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=08d1f6e9-a395-4af3-99f4-6e1f63d49fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:2b:f3:e3:79:e8:66:e5:aa:c1:8a:9a:8e: bf:2b:b6:f0:2b:04:68:09:c2:61:0e:26:15:3a:1f: b4:fd:32:a1:d8:62:8d:82:0f:cd:13:26:e2:ed:65: 15:d5:50:d6:fd:ac:b0:4d:a6:1b:6b:54:2e:e9:b4: dd:b3:aa:7f:76:88:8f:fa:cf:45:99:a1:d2:40:5c: 88:7d:d1:69:7f:35:2c:bb:0e:33:c2:9d:3e:c7:90: 10:ca:85:b3:df:6b:92:9c:2e:32:24:27:e4:0e:88: e8:0b:50:92:ce:15:90:60:cc:f2:03:60:b6:45:09: 7f:cb:35:2c:b6:2c:81:b3:63:9a:3e:22:58:d1:e2: f4:99:44:56:84:e5:7c:5b:d6:d0:5f:60:fe:96:9e: 93:e0:c9:13:18:75:a3:18:9a:0d:03:06:22:bd:52: d2:52:d1:2f:dd:64:ac:da:ed:ff:f5:91:54:89:c6: 76:56:30:a4:20:b3:24:39:71:e2:85:32:e5:79:a7: 5c:1f:4b:95:5a:3b:f6:df:0e:fb:bd:97:24:d0:a3: e8:4c:4f:80:67:e8:c6:16:60:e7:04:10:f6:92:d9: e8:df:9c:18:e1:93:b4:a4:d2:eb:69:e0:af:b7:1f: 87:59:d1:9c:3b:75:a0:fb:c6:3d:10:cc:35:06:de: 54:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A7:3D:5E:92:43:10:25:C9:88:BE:09:A1:9E:6C:D2:B7:53:1B:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:85:bd:b3:0b:57:06:d2:32:d3:4c:46:91:56:27:d6:be:32: ea:90:41:db:89:16:04:de:9a:f6:d7:e2:10:2a:f0:fe:d4:88: 76:4c:7b:2e:ac:64:90:a1:28:02:90:72:ea:f9:22:58:67:1c: eb:34:36:03:8e:e0:72:a2:38:f0:c6:61:c8:e0:41:90:fa:e3: 75:6e:b0:68:4a:a0:b8:ed:f9:dd:2c:b1:1d:fd:68:10:fe:30: 0a:06:97:cf:11:e5:ab:e4:9e:8e:21:75:e4:8d:5d:8d:ef:c5: f3:63:96:89:fc:17:cd:4b:3b:a8:c4:34:ac:b5:28:74:ef:b7: 5d:2f:cb:49:ad:8d:b9:a4:04:c5:99:22:53:76:65:d5:98:40: 47:6a:5e:9d:76:ba:98:4a:b2:e5:c7:bd:65:56:94:1a:dd:34: 32:00:d4:9d:7d:0b:17:41:21:7e:6b:b3:bc:2a:fe:77:6f:79: 86:d4:d5:23:b7:e7:20:b1:04:49:9f:54:eb:05:a6:d2:ea:d5: 24:4a:da:91:e4:f6:59:ac:9d:90:84:ee:8f:40:a8:48:3d:a3: 9a:ab:85:5f:c7:7c:01:b2:23:e7:89:cc:b1:16:ea:60:a2:a1: ca:9f:24:c8:46:52:9f:8c:93:3d:0d:7e:71:0a:dd:3f:c9:8e: 1e:31:fa:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokScFJ9/47qAQRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk MDhkMWY2ZTktYTM5NS00YWYzLTk5ZjQtNmUxZjYzZDQ5ZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm4r8+N56GblqsGKmo6/K7bwKwRoCcJhDiYV Oh+0/TKh2GKNgg/NEybi7WUV1VDW/aywTaYba1Qu6bTds6p/doiP+s9FmaHSQFyI fdFpfzUsuw4zwp0+x5AQyoWz32uSnC4yJCfkDojoC1CSzhWQYMzyA2C2RQl/yzUs tiyBs2OaPiJY0eL0mURWhOV8W9bQX2D+lp6T4MkTGHWjGJoNAwYivVLSUtEv3WSs 2u3/9ZFUicZ2VjCkILMkOXHihTLleadcH0uVWjv23w77vZck0KPoTE+AZ+jGFmDn BBD2ktno35wY4ZO0pNLraeCvtx+HWdGcO3Wg+8Y9EMw1Bt5U8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmnPV6SQxAlyYi+CaGebNK3Uxt7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMzM0MDJlOTMtMWQ4ZC0z NGUwLTlmODMtMWQyYjRiNDE0NmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaFvbMLVwbSMtNMRpFWJ9a+MuqQQduJFgTemvbX4hAq8P7UiHZMey6s ZJChKAKQcur5IlhnHOs0NgOO4HKiOPDGYcjgQZD643VusGhKoLjt+d0ssR39aBD+ MAoGl88R5avkno4hdeSNXY3vxfNjlon8F81LO6jENKy1KHTvt10vy0mtjbmkBMWZ IlN2ZdWYQEdqXp12uphKsuXHvWVWlBrdNDIA1J19CxdBIX5rs7wq/ndveYbU1SO3 5yCxBEmfVOsFptLq1SRK2pHk9lmsnZCE7o9AqEg9o5qrhV/HfAGyI+eJzLEW6mCi ocqfJMhGUp+Mkz0NfnEK3T/Jjh4x+iw= -----END CERTIFICATE-----Generated at Sat Aug 23 12:24:43 2025 by rpki-client