$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa File: 5253ae96-6f67-3e85-86be-36c4a5535f8d.roa (raw, json) Hash identifier: kjlbhogs/6OMDjlvtHgnsFiLj7pCiheYqQF3DO2MMzI= Subject key identifier: 52:60:0B:8E:1B:97:6B:A2:19:51:89:1B:8A:92:74:7A:E1:BC:A6:B1 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584E0D84252CF2E9F10A691D2980 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 31898 IP address blocks: 170.114.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:25:2c:f2:e9:f1:0a:69:1d:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=60de4831-1f12-469e-af30-3417ad7cf904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bd:2b:c6:3a:4c:87:bc:6a:b1:f1:9d:28:99: d2:ae:49:72:36:5e:0a:fd:e3:a2:55:bd:d4:ad:3b: 63:f9:d2:44:cf:f6:95:33:8c:ca:a3:06:19:60:aa: 3d:d6:51:af:37:4b:2e:68:0f:82:2e:ca:02:b0:bd: ff:a2:48:f5:34:8b:72:4a:ee:84:f5:41:26:84:fa: bc:67:ce:6e:f1:52:42:17:fb:c4:2c:ed:36:c3:64: f1:00:f1:6f:2f:8c:d7:d5:b8:c4:43:23:d9:eb:3e: a5:64:7e:51:e0:d1:1d:d3:60:9c:41:96:0a:7a:3c: e4:ce:0f:e5:5f:3d:4b:ac:3a:1e:63:61:56:84:48: a1:5a:d8:84:e1:bc:73:f4:ec:9a:ab:46:e7:07:ce: df:f7:00:a6:aa:30:22:2a:bc:e5:85:c7:9e:a0:02: 6b:75:b3:96:93:e2:90:c2:ab:e0:9a:73:b1:d4:fe: 9e:6c:35:fe:14:8b:bb:17:db:32:5c:d5:b2:c1:a4: 45:01:3f:e2:3e:12:6b:3f:af:91:ba:87:f5:db:bc: a7:47:ae:48:88:b4:15:7f:d7:66:be:66:a8:a6:f8: 25:63:5e:34:02:cb:72:f8:3a:6c:93:fa:0d:ce:35: 28:a6:2d:56:c3:79:9c:12:31:c8:ef:a6:91:f8:d1: 9f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:60:0B:8E:1B:97:6B:A2:19:51:89:1B:8A:92:74:7A:E1:BC:A6:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5253ae96-6f67-3e85-86be-36c4a5535f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 170.114.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f3:7a:3d:ee:89:0c:0f:7d:ac:08:ce:13:09:f5:1c:87:dc: 34:5a:17:32:02:0c:c4:2f:0d:22:57:1d:70:a0:ee:d6:8b:bc: 1e:ae:36:9a:a3:68:1a:48:3b:ae:f6:74:20:88:e6:c5:a6:33: 70:f9:40:62:36:ae:78:36:00:8d:c0:6c:13:97:b1:32:fc:fc: ab:5d:f6:0e:94:f5:69:19:71:18:b7:0a:7e:70:ca:7b:5f:9c: 88:be:ca:ba:73:08:b2:d7:66:a0:24:9d:d7:63:fc:fd:8e:7b: 5a:36:c4:bc:f0:97:12:71:6e:cd:8e:1d:af:a4:05:bc:35:4f: f7:31:8c:84:d5:66:de:0d:b0:fd:15:0e:b6:13:47:88:56:c7: 39:9c:02:b1:7a:74:a9:ef:1a:fe:d9:c3:0c:fd:7d:de:28:cd: f9:91:e5:33:ce:12:11:81:0c:56:c9:e4:b5:63:ca:3b:4a:76: 49:c0:a4:72:2d:6c:72:38:04:35:b6:50:50:4e:28:1a:34:77: 96:0f:51:4c:bb:b7:97:51:38:02:5c:9d:2f:ed:d0:71:23:c4: 95:2f:d7:9e:67:c5:4b:05:a4:52:8a:3a:fc:b4:9a:54:34:98: c6:50:70:0c:b9:8b:21:29:40:cd:73:f9:ba:ec:53:ed:d9:fd: 60:d8:d6:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NhCUs8unxCmkdKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk NjBkZTQ4MzEtMWYxMi00NjllLWFmMzAtMzQxN2FkN2NmOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4L0rxjpMh7xqsfGdKJnSrklyNl4K/eOiVb3U rTtj+dJEz/aVM4zKowYZYKo91lGvN0suaA+CLsoCsL3/okj1NItySu6E9UEmhPq8 Z85u8VJCF/vELO02w2TxAPFvL4zX1bjEQyPZ6z6lZH5R4NEd02CcQZYKejzkzg/l Xz1LrDoeY2FWhEihWtiE4bxz9Oyaq0bnB87f9wCmqjAiKrzlhceeoAJrdbOWk+KQ wqvgmnOx1P6ebDX+FIu7F9syXNWywaRFAT/iPhJrP6+Ruof127ynR65IiLQVf9dm vmaopvglY140Asty+Dpsk/oNzjUopi1Ww3mcEjHI76aR+NGfbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJgC44bl2uiGVGJG4qSdHrhvKaxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNTI1M2FlOTYtNmY2Ny0z ZTg1LTg2YmUtMzZjNGE1NTM1ZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnJIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvzej3uiQwPfawIzhMJ9RyH3DRaFzICDMQvDSJXHXCg7taLvB6uNpqj aBpIO672dCCI5sWmM3D5QGI2rng2AI3AbBOXsTL8/Ktd9g6U9WkZcRi3Cn5wyntf nIi+yrpzCLLXZqAknddj/P2Oe1o2xLzwlxJxbs2OHa+kBbw1T/cxjITVZt4NsP0V DrYTR4hWxzmcArF6dKnvGv7Zwwz9fd4ozfmR5TPOEhGBDFbJ5LVjyjtKdknApHIt bHI4BDW2UFBOKBo0d5YPUUy7t5dROAJcnS/t0HEjxJUv155nxUsFpFKKOvy0mlQ0 mMZQcAy5iyEpQM1z+brsU+3Z/WDY1qA= -----END CERTIFICATE-----Generated at Sat Jun 6 19:29:46 2026 by rpki-client