$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/eb25502e-d655-3cc3-84b2-66dd2c6fb7b4.roa File: eb25502e-d655-3cc3-84b2-66dd2c6fb7b4.roa (raw, json) Hash identifier: vn0NAcUs3P332kw4/k2HCpk4Js/tuvSZhxOwwsgL1JY= Subject key identifier: 18:A2:F3:A7:5D:65:CE:65:17:2F:6C:CC:B2:9F:A1:3C:F7:4E:07:03 Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584B6EF9AF30DE84665B979B2220 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/eb25502e-d655-3cc3-84b2-66dd2c6fb7b4.roa Signing time: Mon 06 Oct 2025 16:29:42 +0000 ROA not before: Mon 06 Oct 2025 16:29:42 +0000 ROA not after: Sun 04 Jan 2026 17:29:42 +0000 asID: 394089 IP address blocks: 167.176.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:f9:af:30:de:84:66:5b:97:9b:22:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Oct 6 16:29:42 2025 GMT Not After : Jan 4 17:29:42 2026 GMT Subject: CN=447c32f2-47c0-4465-8959-59a36e09040d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0f:a3:71:12:d9:ca:a0:13:80:5a:41:6a:c9: 24:91:4e:09:25:48:fd:37:cd:f0:57:ba:cd:45:64: 07:fa:d5:c1:93:a5:47:2e:1c:f8:e3:0c:34:08:30: 6c:bc:3d:25:3c:cc:14:f0:64:23:9a:e8:da:5d:3f: 89:db:82:5a:48:a7:26:9b:0b:b2:ac:e6:c4:96:84: 92:4d:71:33:66:e7:c0:74:35:9b:db:c9:17:c8:32: e6:39:ed:87:4d:f8:4b:3a:df:9b:f8:fb:3b:48:99: 79:15:bc:ca:a4:c0:42:c8:05:09:52:b5:01:26:d4: 1b:74:ed:1e:6f:ae:ce:98:9b:b4:f7:6e:67:ac:74: 42:32:91:a0:f5:91:f5:b4:73:7c:3e:95:be:5d:20: 61:01:21:87:1e:b1:ad:4d:66:0a:e7:92:f0:11:b0: da:34:62:d8:6c:f6:b8:02:9f:3c:50:80:ae:fe:a8: 41:9a:0a:fd:92:2b:30:d3:70:3a:6e:3a:a3:01:53: 33:a5:75:5f:c8:81:4e:38:da:b2:cd:ab:c6:8b:86: 5a:42:ec:1b:bd:cb:a9:76:70:ab:e9:89:e8:c9:de: 0f:68:53:5b:01:13:77:01:5d:e3:20:dd:ef:46:fb: 44:45:8a:57:2f:db:0c:98:bc:cb:42:e1:0f:d3:7e: 4c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A2:F3:A7:5D:65:CE:65:17:2F:6C:CC:B2:9F:A1:3C:F7:4E:07:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/eb25502e-d655-3cc3-84b2-66dd2c6fb7b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c4:07:1d:d1:a6:f3:ff:d2:5b:63:9b:47:d3:18:17:3d:f0: 10:b5:c2:ea:44:bc:29:eb:04:4f:96:12:a9:7b:df:1e:ef:e8: 97:40:3f:92:fd:36:d8:96:c6:2a:7b:95:31:23:62:86:5c:8c: b0:a7:1c:5c:bf:2a:f9:5e:11:fe:f4:7e:21:5c:83:dc:85:5a: 41:2e:bc:9f:41:16:d6:57:cd:31:1f:61:5b:63:6f:a4:8b:15: 10:f0:ee:83:a8:a9:83:b2:ee:01:e2:e3:ed:95:be:dd:e2:df: 35:0f:99:13:4f:39:31:3a:54:47:b2:8e:33:f2:18:a2:16:b0: 73:83:1b:46:2e:a1:1b:3d:a1:27:da:a3:a6:ff:db:54:58:81: f1:37:91:f3:3d:b8:56:2b:c3:26:08:40:bd:cd:ba:43:69:4c: 08:ec:0f:e5:72:22:cb:87:bf:f7:f5:f5:e7:b0:25:e7:cb:70: 10:8f:d2:e9:c5:f3:cb:e5:4d:43:73:74:3f:e2:af:ec:27:ca: 45:b2:5d:50:b0:d8:98:01:5e:cf:52:b4:33:0c:99:a8:16:c8: 61:90:85:ce:cd:7c:ae:6a:cc:e2:86:7e:7e:52:a5:2f:40:c7: 89:c8:3e:ac:74:63:49:ad:4c:08:06:8a:8c:20:29:bd:d3:2b: 0e:26:73:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu+a8w3oRmW5ebIiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI1MTAwNjE2Mjk0MloXDTI2MDEwNDE3Mjk0MlowLzEtMCsGA1UEAxMk NDQ3YzMyZjItNDdjMC00NDY1LTg5NTktNTlhMzZlMDkwNDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg+jcRLZyqATgFpBaskkkU4JJUj9N83wV7rN RWQH+tXBk6VHLhz44ww0CDBsvD0lPMwU8GQjmujaXT+J24JaSKcmmwuyrObEloSS TXEzZufAdDWb28kXyDLmOe2HTfhLOt+b+Ps7SJl5FbzKpMBCyAUJUrUBJtQbdO0e b67OmJu0925nrHRCMpGg9ZH1tHN8PpW+XSBhASGHHrGtTWYK55LwEbDaNGLYbPa4 Ap88UICu/qhBmgr9kisw03A6bjqjAVMzpXVfyIFOONqyzavGi4ZaQuwbvcupdnCr 6Ynoyd4PaFNbARN3AV3jIN3vRvtERYpXL9sMmLzLQuEP035M4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBii86ddZc5lFy9szLKfoTz3TgcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvZWIyNTUwMmUtZDY1NS0z Y2MzLTg0YjItNjZkZDJjNmZiN2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7B1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLEBx3RpvP/0ltjm0fTGBc98BC1wupEvCnrBE+WEql73x7v6JdAP5L9 NtiWxip7lTEjYoZcjLCnHFy/KvleEf70fiFcg9yFWkEuvJ9BFtZXzTEfYVtjb6SL FRDw7oOoqYOy7gHi4+2Vvt3i3zUPmRNPOTE6VEeyjjPyGKIWsHODG0YuoRs9oSfa o6b/21RYgfE3kfM9uFYrwyYIQL3NukNpTAjsD+VyIsuHv/f19eewJefLcBCP0unF 88vlTUNzdD/ir+wnykWyXVCw2JgBXs9StDMMmagWyGGQhc7NfK5qzOKGfn5SpS9A x4nIPqx0Y0mtTAgGiowgKb3TKw4mc4k= -----END CERTIFICATE-----Generated at Wed Oct 8 21:11:29 2025 by rpki-client