$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa File: 33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa (raw, json) Hash identifier: RfpF8lWDf4ksOuv5o1II4DBEljdpT/5Egdd3rf3YnE0= Subject key identifier: A3:3F:54:CB:E0:58:AE:9A:45:B8:F0:2C:04:2A:B2:1A:E8:70:3E:25 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584D8AC53BCA7FB7833A3190D700 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 170.114.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:3b:ca:7f:b7:83:3a:31:90:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=4a4c78a0-8fd2-4392-88c6-448778ca8c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:20:ae:f7:29:25:43:c0:6e:50:70:e9:b1:32: ac:7a:c1:8d:b3:ad:c3:83:c7:e7:b8:b4:69:0f:14: aa:57:3d:36:2c:34:a7:5b:3f:d0:ad:06:66:d3:a9: 60:a5:86:03:6e:7d:e9:e4:cf:3b:40:09:0d:8e:98: 07:3b:29:5c:4c:73:47:fc:7d:fa:55:6a:1e:82:c0: 2c:eb:1d:60:fc:12:36:e8:bd:ea:00:b0:7e:65:04: 2c:65:57:68:d4:94:85:de:ca:62:d5:d7:ec:c8:0d: 7c:d9:92:f5:5f:1b:3b:05:30:e6:e1:e8:d9:d2:a9: f8:51:ac:30:62:42:ab:d3:a4:c2:a4:9e:3a:ea:0e: 91:41:2f:db:62:2d:8c:1c:38:3a:41:ed:e3:af:8e: 57:5a:5b:36:b4:2a:9c:e6:75:22:f4:91:b9:a4:8a: 69:a6:60:4c:b8:6f:c0:b8:2e:6b:80:1f:81:7a:bf: 8b:4a:15:54:33:a1:75:3a:eb:43:dd:67:5b:fa:20: c9:3d:af:13:20:37:ed:4f:d8:ef:0a:5f:9b:4e:a8: f1:b0:13:eb:0f:8e:4e:6d:4a:71:98:90:d4:39:b7: 20:e5:6d:d0:06:d3:e9:8c:63:e0:d0:a7:e6:64:c2: 12:da:d7:48:d6:1f:6b:36:e1:d8:c8:91:9e:97:5c: 35:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3F:54:CB:E0:58:AE:9A:45:B8:F0:2C:04:2A:B2:1A:E8:70:3E:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/33402e93-1d8d-34e0-9f83-1d2b4b4146dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:6f:18:07:00:2c:50:79:95:f7:cc:1d:2b:19:73:3c:01:2f: 0b:32:95:68:8d:6d:1c:09:17:c4:fb:4b:47:36:f6:ce:91:e7: 33:8d:66:29:3c:58:82:46:17:5b:8c:09:cb:3d:75:9b:a7:1d: 1b:05:fc:49:e8:8b:b2:2a:0b:aa:c2:14:bf:28:cf:98:d5:6a: ef:24:c7:a7:81:56:32:6e:76:c2:44:11:3c:03:59:6c:5f:2a: b4:9e:0e:9c:a7:23:aa:4f:67:5f:c7:d5:ad:2c:f0:f9:71:1d: e7:aa:d3:e6:e8:5c:82:f7:06:c3:25:c1:ec:8a:76:a3:50:e9: 34:7c:38:6d:29:63:0b:ef:f3:a4:14:6b:ae:11:6f:71:3d:b6: a5:66:0f:ff:6d:d2:ef:90:99:63:fa:29:53:b9:40:23:25:b1: dd:42:7c:09:d3:10:4b:e6:81:19:63:ea:b5:22:14:9e:ae:67: 0a:11:69:7b:17:4c:c2:0f:d5:ca:47:b7:13:77:45:7b:b9:25: dd:fb:11:ad:eb:c8:e5:ad:eb:df:4a:80:31:9b:91:0e:49:45: 70:6c:a4:50:1d:56:22:25:31:da:18:e4:f5:43:6e:63:a2:97: 20:09:d8:35:21:ab:cc:0c:ef:d1:04:05:38:0a:a7:2b:89:2b: d9:8d:b3:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxTvKf7eDOjGQ1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk NGE0Yzc4YTAtOGZkMi00MzkyLTg4YzYtNDQ4Nzc4Y2E4YzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCCu9yklQ8BuUHDpsTKsesGNs63Dg8fnuLRp DxSqVz02LDSnWz/QrQZm06lgpYYDbn3p5M87QAkNjpgHOylcTHNH/H36VWoegsAs 6x1g/BI26L3qALB+ZQQsZVdo1JSF3spi1dfsyA182ZL1Xxs7BTDm4ejZ0qn4Uaww YkKr06TCpJ466g6RQS/bYi2MHDg6Qe3jr45XWls2tCqc5nUi9JG5pIpppmBMuG/A uC5rgB+Ber+LShVUM6F1OutD3Wdb+iDJPa8TIDftT9jvCl+bTqjxsBPrD45ObUpx mJDUObcg5W3QBtPpjGPg0KfmZMIS2tdI1h9rNuHYyJGel1w1xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKM/VMvgWK6aRbjwLAQqshrocD4lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvMzM0MDJlOTMtMWQ4ZC0z NGUwLTlmODMtMWQyYjRiNDE0NmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnIkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpvGAcALFB5lffMHSsZczwBLwsylWiNbRwJF8T7S0c29s6R5zONZik8 WIJGF1uMCcs9dZunHRsF/Enoi7IqC6rCFL8oz5jVau8kx6eBVjJudsJEETwDWWxf KrSeDpynI6pPZ1/H1a0s8PlxHeeq0+boXIL3BsMlweyKdqNQ6TR8OG0pYwvv86QU a64Rb3E9tqVmD/9t0u+QmWP6KVO5QCMlsd1CfAnTEEvmgRlj6rUiFJ6uZwoRaXsX TMIP1cpHtxN3RXu5Jd37Ea3ryOWt699KgDGbkQ5JRXBspFAdViIlMdoY5PVDbmOi lyAJ2DUhq8wM79EEBTgKpyuJK9mNs5k= -----END CERTIFICATE-----Generated at Mon Apr 20 06:00:22 2026 by rpki-client