$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d4cef2d3-b7ee-3c2a-96ed-648ac580e7fa.roa File: d4cef2d3-b7ee-3c2a-96ed-648ac580e7fa.roa (raw, json) Hash identifier: ZiMBqwwJHxQAHgtcQVkU//pWuwcI4txe6kX6NuH2Ntg= Subject key identifier: 6D:C2:3A:F7:71:12:4D:8A:55:4E:6D:09:D0:CB:73:09:57:88:BB:2C Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584B6EF9F8A3A45D5FDE29560400 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d4cef2d3-b7ee-3c2a-96ed-648ac580e7fa.roa Signing time: Mon 06 Oct 2025 16:30:17 +0000 ROA not before: Mon 06 Oct 2025 16:30:17 +0000 ROA not after: Sun 04 Jan 2026 17:30:17 +0000 asID: 396982 IP address blocks: 167.176.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:f9:f8:a3:a4:5d:5f:de:29:56:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Oct 6 16:30:17 2025 GMT Not After : Jan 4 17:30:17 2026 GMT Subject: CN=10c9c1c1-df98-4cc8-a654-de66a193a4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:27:94:d0:4a:ca:ed:cc:ff:40:b2:6f:bf:1c: 3f:5d:89:ae:6d:57:78:27:03:36:97:4e:22:0e:5d: e4:0d:56:f8:76:8d:15:1e:b8:e0:ae:06:f3:6c:fd: 06:15:52:45:68:a3:96:41:60:c2:f9:22:49:86:9a: 6a:9f:b8:4e:26:4b:80:22:7e:2a:76:64:74:01:cf: 52:a0:69:a1:2c:96:aa:11:19:c6:6c:6c:e4:4e:d1: 89:ac:a7:6d:51:7f:eb:1f:f3:34:d2:11:16:be:80: 86:89:99:a3:04:cc:64:7c:24:26:21:1b:d0:92:7f: 1a:36:b1:16:d8:b7:38:46:8a:0a:80:2e:82:a9:79: 65:fb:38:8b:90:6d:db:fc:af:a5:2c:fc:dd:58:10: 46:00:dc:86:bb:9c:6b:b4:95:25:fb:c2:f9:b2:74: 53:6c:44:f4:f6:25:12:ca:01:0b:6e:69:a2:3b:44: be:bd:8f:64:22:d6:e9:f5:dc:10:8e:3b:e4:17:90: 64:f6:3a:ee:11:08:c9:33:48:58:11:9d:d7:1a:be: 72:5d:9f:c1:14:41:6d:ff:07:98:de:76:06:fc:e2: f3:e8:0c:15:92:6c:89:f8:6e:4c:98:69:03:4d:f8: 0e:a0:56:20:d1:89:99:32:d6:46:34:09:9d:af:4c: 13:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C2:3A:F7:71:12:4D:8A:55:4E:6D:09:D0:CB:73:09:57:88:BB:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d4cef2d3-b7ee-3c2a-96ed-648ac580e7fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b9:49:2b:28:b1:3e:f9:c0:a2:6a:aa:87:7e:ec:53:2f:70: 8f:52:77:d8:f0:8a:f4:c6:1a:6e:fc:51:ab:12:71:e8:8a:71: 03:83:0a:80:a5:0d:9f:6e:ab:0f:d3:56:c2:2c:56:09:b9:bf: 87:0e:32:13:21:63:d2:d0:85:4d:b4:62:a9:0f:45:fc:d7:6f: c1:13:00:e2:8b:68:1f:d6:8f:4b:0c:a5:62:dc:a4:0f:8a:d3: 8b:b7:e8:6c:c8:43:07:55:3d:e5:0d:cc:d7:4b:e2:5d:e9:ed: 8d:27:b3:66:db:2e:da:75:83:8c:9d:9c:9c:4f:cf:83:b8:bc: 75:11:6c:63:e8:51:b0:31:d7:fe:ec:3a:a6:47:66:c3:47:56: c3:3f:7c:47:6e:19:4d:5f:15:57:04:2b:ab:fb:c0:bf:27:34: fa:6a:08:0b:c3:cd:61:f8:2b:03:fb:97:67:b5:bb:08:87:68: 9b:4e:61:b4:45:37:d0:98:57:7c:dc:fb:34:60:a4:ca:bc:8b: 5f:8f:a6:73:81:9f:d7:1a:7d:17:4f:b3:04:0c:06:9e:c5:16: bd:ba:83:c9:9c:a4:f8:0a:e3:8e:b8:de:46:e7:81:56:8b:b9: 25:09:cc:02:68:9d:27:c3:57:26:19:60:0b:bc:e6:1d:4b:ae: a8:85:d7:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu+fijpF1f3ilWBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI1MTAwNjE2MzAxN1oXDTI2MDEwNDE3MzAxN1owLzEtMCsGA1UEAxMk MTBjOWMxYzEtZGY5OC00Y2M4LWE2NTQtZGU2NmExOTNhNGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCeU0ErK7cz/QLJvvxw/XYmubVd4JwM2l04i Dl3kDVb4do0VHrjgrgbzbP0GFVJFaKOWQWDC+SJJhppqn7hOJkuAIn4qdmR0Ac9S oGmhLJaqERnGbGzkTtGJrKdtUX/rH/M00hEWvoCGiZmjBMxkfCQmIRvQkn8aNrEW 2Lc4RooKgC6CqXll+ziLkG3b/K+lLPzdWBBGANyGu5xrtJUl+8L5snRTbET09iUS ygELbmmiO0S+vY9kItbp9dwQjjvkF5Bk9jruEQjJM0hYEZ3XGr5yXZ/BFEFt/weY 3nYG/OLz6AwVkmyJ+G5MmGkDTfgOoFYg0YmZMtZGNAmdr0wTmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3COvdxEk2KVU5tCdDLcwlXiLssMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvZDRjZWYyZDMtYjdlZS0z YzJhLTk2ZWQtNjQ4YWM1ODBlN2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7B1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu5SSsosT75wKJqqod+7FMvcI9Sd9jwivTGGm78UasSceiKcQODCoCl DZ9uqw/TVsIsVgm5v4cOMhMhY9LQhU20YqkPRfzXb8ETAOKLaB/Wj0sMpWLcpA+K 04u36GzIQwdVPeUNzNdL4l3p7Y0ns2bbLtp1g4ydnJxPz4O4vHURbGPoUbAx1/7s OqZHZsNHVsM/fEduGU1fFVcEK6v7wL8nNPpqCAvDzWH4KwP7l2e1uwiHaJtOYbRF N9CYV3zc+zRgpMq8i1+PpnOBn9cafRdPswQMBp7FFr26g8mcpPgK44643kbngVaL uSUJzAJonSfDVyYZYAu85h1LrqiF1xQ= -----END CERTIFICATE-----Generated at Wed Oct 8 21:12:42 2025 by rpki-client