$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d97e6a5f-696a-3b98-874c-824499b6ecbf.roa File: d97e6a5f-696a-3b98-874c-824499b6ecbf.roa (raw, json) Hash identifier: QXB8z7HpG85c11Da9EtPhFznPJtpefWNj2Jqg5WJbzM= Subject key identifier: 42:5F:4C:E8:D8:65:89:B4:FD:62:74:3F:F7:D9:DE:CE:0D:E3:16:B1 Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584B6EEB9F7864901F24D2BF9AC0 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d97e6a5f-696a-3b98-874c-824499b6ecbf.roa Signing time: Mon 06 Oct 2025 16:01:22 +0000 ROA not before: Mon 06 Oct 2025 16:01:22 +0000 ROA not after: Sun 04 Jan 2026 17:01:22 +0000 asID: 12037 IP address blocks: 167.176.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:eb:9f:78:64:90:1f:24:d2:bf:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Oct 6 16:01:22 2025 GMT Not After : Jan 4 17:01:22 2026 GMT Subject: CN=a0555f34-ff12-4429-bb49-a25f4fe83a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8e:f1:33:c7:bd:eb:2c:38:56:ba:0b:dd:01: 16:11:46:1c:90:af:7f:0e:17:31:48:bf:18:f7:ce: 71:34:bc:9e:b7:91:bd:10:28:f0:0b:82:63:80:b7: 9c:ee:8b:e5:21:94:c8:ff:68:4a:a9:5a:65:dc:b1: c8:2b:c2:49:89:21:5b:0c:e6:ad:f2:50:c6:c0:8b: 97:f4:09:44:82:d4:b0:31:69:b5:e6:0e:bf:d1:ac: a1:1c:a6:c4:3a:79:ed:2c:a8:18:25:a1:4a:a3:87: 99:2b:4b:69:50:48:ee:fb:a3:7b:4c:13:eb:03:fe: 2b:0e:22:61:0b:51:5d:98:01:3d:5a:90:de:ab:b1: de:3e:32:72:a9:b2:d6:45:a3:c5:cb:94:7c:b6:c1: 9b:04:e6:c4:5c:94:a4:5e:1d:43:fd:47:b3:19:0f: 44:8a:a7:54:8b:11:2f:8c:fc:e0:b9:c3:08:e9:9a: 10:d1:a8:7d:08:87:70:e5:2c:05:86:35:b9:3d:c4: f6:22:06:b5:c7:04:04:b0:6d:7c:04:e9:9f:1d:6b: d4:96:aa:39:3b:2f:93:ce:d2:4b:ed:0b:8c:09:e4: d8:cb:6b:30:e7:c5:39:d8:13:36:4e:aa:8a:45:d4: 76:26:39:65:29:2c:6d:3a:5d:3a:36:77:b2:10:b0: 20:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5F:4C:E8:D8:65:89:B4:FD:62:74:3F:F7:D9:DE:CE:0D:E3:16:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d97e6a5f-696a-3b98-874c-824499b6ecbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ed:9a:4c:24:c8:e9:21:a6:a9:75:41:85:60:a3:f5:d5:cd: 0a:05:a9:9d:e6:d6:bf:28:93:2d:34:f4:2b:31:9f:f6:23:81: 16:b7:66:26:3b:17:ca:92:1b:02:43:45:54:2c:1a:c3:91:11: ef:b9:13:fc:5d:39:c2:b9:c2:21:f0:bc:52:ca:2b:0a:ee:02: 8b:0c:4d:f5:61:d4:e1:6a:58:d5:ee:b9:0c:9b:6d:aa:3d:ae: 51:58:44:2e:18:df:70:1c:9d:c1:fc:9b:f3:fb:a5:53:45:f2: 35:53:d2:b6:e8:a2:ba:51:e0:9d:fd:90:71:6d:18:5a:54:65: 11:ed:91:71:af:2d:d6:4c:19:dc:0c:3b:5f:24:83:9e:b6:95: 5c:72:b8:5e:09:63:90:27:92:f7:66:ea:df:37:95:06:0d:3c: f9:a0:53:23:0c:92:0e:76:ad:fe:2d:a3:60:5c:c6:a2:63:25: b7:73:1d:52:2a:68:51:b6:61:9d:c6:d0:66:e5:46:3f:7b:c2: 30:24:29:dd:8f:2c:bd:a9:13:39:fa:c7:61:c6:e3:ed:9d:13: e6:9a:bd:94:05:62:9a:39:8d:91:70:4d:38:e4:05:2e:ba:3e: 64:85:0d:d6:6e:03:8d:d1:83:51:ad:0d:af:bb:90:9f:a6:5b: 76:5b:aa:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu6594ZJAfJNK/msAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI1MTAwNjE2MDEyMloXDTI2MDEwNDE3MDEyMlowLzEtMCsGA1UEAxMk YTA1NTVmMzQtZmYxMi00NDI5LWJiNDktYTI1ZjRmZTgzYTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI7xM8e96yw4VroL3QEWEUYckK9/DhcxSL8Y 985xNLyet5G9ECjwC4JjgLec7ovlIZTI/2hKqVpl3LHIK8JJiSFbDOat8lDGwIuX 9AlEgtSwMWm15g6/0ayhHKbEOnntLKgYJaFKo4eZK0tpUEju+6N7TBPrA/4rDiJh C1FdmAE9WpDeq7HePjJyqbLWRaPFy5R8tsGbBObEXJSkXh1D/UezGQ9EiqdUixEv jPzgucMI6ZoQ0ah9CIdw5SwFhjW5PcT2Iga1xwQEsG18BOmfHWvUlqo5Oy+TztJL 7QuMCeTYy2sw58U52BM2TqqKRdR2JjllKSxtOl06NneyELAgrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJfTOjYZYm0/WJ0P/fZ3s4N4xaxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvZDk3ZTZhNWYtNjk2YS0z Yjk4LTg3NGMtODI0NDk5YjZlY2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7AIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjtmkwkyOkhpql1QYVgo/XVzQoFqZ3m1r8oky009Csxn/YjgRa3ZiY7 F8qSGwJDRVQsGsOREe+5E/xdOcK5wiHwvFLKKwruAosMTfVh1OFqWNXuuQybbao9 rlFYRC4Y33AcncH8m/P7pVNF8jVT0rboorpR4J39kHFtGFpUZRHtkXGvLdZMGdwM O18kg562lVxyuF4JY5Ankvdm6t83lQYNPPmgUyMMkg52rf4to2BcxqJjJbdzHVIq aFG2YZ3G0GblRj97wjAkKd2PLL2pEzn6x2HG4+2dE+aavZQFYpo5jZFwTTjkBS66 PmSFDdZuA43Rg1GtDa+7kJ+mW3Zbqhk= -----END CERTIFICATE-----Generated at Wed Oct 8 22:57:37 2025 by rpki-client