$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d998e5d-3741-3db9-a5a4-201dfc0ba612.roa File: 2d998e5d-3741-3db9-a5a4-201dfc0ba612.roa (raw, json) Hash identifier: qpcfCZT9IGVINVqQt0jpuNS3dedwQ6vYLBQl219VlPE= Subject key identifier: B7:ED:EF:7C:E5:25:E9:E6:64:B8:0E:E9:0A:97:68:D2:86:DF:43:3B Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584B6EECCFF26E83FB7CAA036F00 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d998e5d-3741-3db9-a5a4-201dfc0ba612.roa Signing time: Mon 06 Oct 2025 16:03:46 +0000 ROA not before: Mon 06 Oct 2025 16:03:46 +0000 ROA not after: Sun 04 Jan 2026 17:03:46 +0000 asID: 12037 IP address blocks: 167.176.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:ec:cf:f2:6e:83:fb:7c:aa:03:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Oct 6 16:03:46 2025 GMT Not After : Jan 4 17:03:46 2026 GMT Subject: CN=5d99d22c-0c1b-46cf-bd2d-61db44faa51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:68:cc:ed:42:a7:62:69:46:44:ac:5a:f2:c6: d4:49:09:2a:b0:d0:af:b7:1f:ed:fc:f0:ad:76:0e: 42:8d:d4:8f:ec:27:99:42:fb:b0:e0:d7:e4:89:33: 97:b7:b0:9e:95:a6:3f:b8:d2:0f:6b:1d:ec:60:d2: 69:45:db:aa:ea:96:60:b0:bc:af:a9:e5:3c:17:c5: dc:2e:d3:d6:87:fa:21:c1:a9:ee:62:b6:dd:79:84: 8d:52:30:4c:89:c3:3d:74:3b:5c:3b:4e:ee:14:bf: 88:db:8c:39:f8:1f:ca:a2:0d:31:53:78:0f:fc:d2: 13:36:e6:46:05:25:de:ce:40:3c:76:5c:dd:35:12: bd:44:be:2c:96:08:7d:07:dc:45:aa:55:74:87:c6: 36:2d:36:07:cf:0c:98:64:47:a0:be:8d:e1:61:fc: c0:67:10:a5:af:d0:17:ce:27:dd:51:de:0d:5a:63: fb:b9:0d:76:c0:83:34:36:aa:2b:ae:66:5d:db:55: a8:bd:9e:5e:68:04:41:b0:c1:56:8b:c2:dd:de:83: eb:f2:65:d3:9a:ad:e6:9a:76:29:62:ad:b9:59:41: f7:ca:4d:c7:7c:b3:bd:31:33:78:7c:a1:f9:75:eb: ab:ea:94:50:ad:33:e1:5d:b1:86:b3:3c:bc:ee:e9: 70:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:ED:EF:7C:E5:25:E9:E6:64:B8:0E:E9:0A:97:68:D2:86:DF:43:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d998e5d-3741-3db9-a5a4-201dfc0ba612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4c:69:de:15:53:e9:d0:04:b0:81:59:18:d9:b1:d5:58:ed: 1b:73:5d:71:69:44:39:2c:2e:f5:1b:5f:c4:ff:c8:31:37:58: 11:0b:18:14:f5:9c:63:72:cb:12:cc:e7:ee:eb:e4:0a:0f:86: 26:b7:a7:a6:0a:c5:61:b3:99:3e:04:7c:2d:2f:88:e9:c2:e9: 3d:3d:3a:1b:f8:7b:0a:da:1a:14:a4:ef:ab:4f:77:91:9f:cc: 14:b0:0b:44:e2:af:4c:82:48:10:5a:60:08:29:93:43:0c:81: 66:ef:d7:fd:0b:f3:cd:ec:05:1f:de:6b:be:44:de:8c:36:44: 47:85:86:01:72:c1:39:a6:88:2f:d3:4d:a2:27:f0:69:c8:eb: 0c:c0:9a:06:e6:c3:be:f4:73:15:66:2f:7e:69:09:fd:97:44: 19:ce:26:07:14:09:5c:a5:3b:09:45:38:74:7f:70:74:35:93: e6:70:c9:b0:e4:76:a8:6d:14:ae:10:d5:eb:b7:14:9b:6e:ab: 82:91:53:9c:fb:b3:2e:a5:e8:af:1c:14:50:62:af:c0:1e:62: 0c:11:3d:a9:86:62:8c:c8:12:96:0d:c8:ad:70:af:cc:28:f8: 02:03:c9:5c:c0:27:98:df:43:29:c0:ee:69:db:14:a6:f6:94: 66:ec:0d:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu7M/yboP7fKoDbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI1MTAwNjE2MDM0NloXDTI2MDEwNDE3MDM0NlowLzEtMCsGA1UEAxMk NWQ5OWQyMmMtMGMxYi00NmNmLWJkMmQtNjFkYjQ0ZmFhNTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGjM7UKnYmlGRKxa8sbUSQkqsNCvtx/t/PCt dg5CjdSP7CeZQvuw4NfkiTOXt7CelaY/uNIPax3sYNJpRduq6pZgsLyvqeU8F8Xc LtPWh/ohwanuYrbdeYSNUjBMicM9dDtcO07uFL+I24w5+B/Kog0xU3gP/NITNuZG BSXezkA8dlzdNRK9RL4slgh9B9xFqlV0h8Y2LTYHzwyYZEegvo3hYfzAZxClr9AX zifdUd4NWmP7uQ12wIM0NqorrmZd21WovZ5eaARBsMFWi8Ld3oPr8mXTmq3mmnYp Yq25WUH3yk3HfLO9MTN4fKH5deur6pRQrTPhXbGGszy87ulwrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLft73zlJenmZLgO6QqXaNKG30M7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMmQ5OThlNWQtMzc0MS0z ZGI5LWE1YTQtMjAxZGZjMGJhNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7AmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVMad4VU+nQBLCBWRjZsdVY7RtzXXFpRDksLvUbX8T/yDE3WBELGBT1 nGNyyxLM5+7r5AoPhia3p6YKxWGzmT4EfC0viOnC6T09Ohv4ewraGhSk76tPd5Gf zBSwC0Tir0yCSBBaYAgpk0MMgWbv1/0L883sBR/ea75E3ow2REeFhgFywTmmiC/T TaIn8GnI6wzAmgbmw770cxVmL35pCf2XRBnOJgcUCVylOwlFOHR/cHQ1k+ZwybDk dqhtFK4Q1eu3FJtuq4KRU5z7sy6l6K8cFFBir8AeYgwRPamGYozIEpYNyK1wr8wo +AIDyVzAJ5jfQynA7mnbFKb2lGbsDbA= -----END CERTIFICATE-----Generated at Wed Oct 8 21:11:25 2025 by rpki-client