$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/070da204-b714-36a4-b828-67f11d0cc12c.roa File: 070da204-b714-36a4-b828-67f11d0cc12c.roa (raw, json) Hash identifier: KKz/apHPWcudurI7AZ5+L5PfhNtqrWHgQ5S/kdOwGg0= Subject key identifier: E0:4C:2F:E6:4A:6B:5F:C3:8D:AC:51:40:6A:69:03:38:C6:AC:54:AA Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584D300A3AE4BBD0AAC8B192385E Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/070da204-b714-36a4-b828-67f11d0cc12c.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 12037 IP address blocks: 167.176.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:3a:e4:bb:d0:aa:c8:b1:92:38:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=bd5bf6aa-bb88-4156-a5ef-78969aa0a10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:75:12:f2:62:b9:85:96:86:a0:65:82:9e:b2: 7d:4d:d7:a4:49:ba:aa:17:07:eb:a2:b7:d9:06:0a: 8f:c4:4d:97:7c:35:f8:0c:42:68:9f:56:ec:03:7b: 8f:88:e3:a8:ef:71:08:2d:7f:ca:c1:1e:7a:a8:0b: cb:71:c0:e4:9a:d7:1c:d3:ae:08:b1:15:05:b9:87: 7c:6a:a5:0b:f5:bd:91:1b:e3:18:61:0b:be:07:20: 48:c1:76:13:7a:15:06:d1:16:1d:cc:5e:9e:6f:cc: 78:06:8e:98:ac:43:97:28:60:a2:79:0e:68:36:ed: 8e:81:92:e6:33:d6:32:32:1e:55:5d:48:51:54:b9: 8c:74:0a:91:38:43:65:43:7e:aa:6c:09:c1:d3:31: 95:b8:9d:7c:ac:8a:b5:66:b3:50:2b:1c:0b:18:2c: 6f:57:66:28:4c:7d:7f:70:5e:ac:44:e2:f8:df:45: a5:6f:c3:d4:e7:c3:d3:c3:ce:c8:78:d6:76:a5:c3: e0:20:7e:29:85:bc:95:50:c2:cb:cb:dd:5e:70:f1: b8:4a:a5:4c:64:b8:b7:b8:79:05:12:73:41:09:33: 19:b2:b5:93:fd:0f:c2:ca:0c:9b:a1:79:14:a0:b7: 23:8c:d6:a3:a8:8b:76:a7:d1:8e:60:e6:93:87:93: 61:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4C:2F:E6:4A:6B:5F:C3:8D:AC:51:40:6A:69:03:38:C6:AC:54:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/070da204-b714-36a4-b828-67f11d0cc12c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ef:e1:fa:0f:24:17:01:3b:d1:35:43:c9:11:cf:b7:27:87: 21:56:66:99:21:e1:16:a1:e8:62:fc:44:cc:49:f4:0b:c0:e3: 29:07:90:91:12:25:11:d2:07:29:37:58:d5:0a:6e:19:8f:8b: 9b:1b:04:9d:07:e3:1f:0d:96:07:46:0d:a8:e1:8f:9b:00:72: a1:d4:0a:5f:4c:fd:4b:5e:55:d1:fe:e8:99:28:7e:84:af:90: fd:22:b9:a7:14:91:92:13:3c:70:b7:3e:90:1b:6c:68:51:9c: 4f:ea:48:a5:94:a8:52:57:3a:d8:b4:21:82:36:d6:61:94:a9: f9:9a:6a:9b:b2:1a:b5:94:03:50:2f:39:70:73:8e:e9:96:51: 3a:41:32:df:18:c6:d6:9c:1d:27:d1:87:ac:87:79:cb:c2:01: 64:a2:a3:a1:2e:9b:77:0c:f4:8d:4e:98:6f:f0:8a:38:88:ac: 8a:8f:17:8c:0a:7d:c2:c1:2e:59:49:15:be:aa:b2:86:8b:5f: 69:03:eb:c5:0c:82:ba:b5:1f:c0:de:a1:d0:b6:ca:72:ff:e2: 6b:86:28:e9:55:02:8c:37:75:13:08:5e:0f:f5:07:15:eb:36: ca:6b:b4:21:95:a5:ac:47:06:44:2f:aa:96:3f:db:ae:af:22: 56:d3:b9:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCjrku9CqyLGSOF4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YmQ1YmY2YWEtYmI4OC00MTU2LWE1ZWYtNzg5NjlhYTBhMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3US8mK5hZaGoGWCnrJ9TdekSbqqFwfrorfZ BgqPxE2XfDX4DEJon1bsA3uPiOOo73EILX/KwR56qAvLccDkmtcc064IsRUFuYd8 aqUL9b2RG+MYYQu+ByBIwXYTehUG0RYdzF6eb8x4Bo6YrEOXKGCieQ5oNu2OgZLm M9YyMh5VXUhRVLmMdAqROENlQ36qbAnB0zGVuJ18rIq1ZrNQKxwLGCxvV2YoTH1/ cF6sROL430Wlb8PU58PTw87IeNZ2pcPgIH4phbyVUMLLy91ecPG4SqVMZLi3uHkF EnNBCTMZsrWT/Q/CygyboXkUoLcjjNajqIt2p9GOYOaTh5NhGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBML+ZKa1/DjaxRQGppAzjGrFSqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMDcwZGEyMDQtYjcxNC0z NmE0LWI4MjgtNjdmMTFkMGNjMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7ABMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLv4foPJBcBO9E1Q8kRz7cnhyFWZpkh4Rah6GL8RMxJ9AvA4ykHkJES JRHSByk3WNUKbhmPi5sbBJ0H4x8NlgdGDajhj5sAcqHUCl9M/UteVdH+6JkofoSv kP0iuacUkZITPHC3PpAbbGhRnE/qSKWUqFJXOti0IYI21mGUqfmaapuyGrWUA1Av OXBzjumWUTpBMt8YxtacHSfRh6yHecvCAWSio6Eum3cM9I1OmG/wijiIrIqPF4wK fcLBLllJFb6qsoaLX2kD68UMgrq1H8DeodC2ynL/4muGKOlVAow3dRMIXg/1BxXr NsprtCGVpaxHBkQvqpY/266vIlbTueQ= -----END CERTIFICATE-----Generated at Thu Mar 19 15:17:33 2026 by rpki-client