$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/070da204-b714-36a4-b828-67f11d0cc12c.roa File: 070da204-b714-36a4-b828-67f11d0cc12c.roa (raw, json) Hash identifier: xSQ0jDTS5cf3H6S9j+AWjOh7RWrIdHl6vfih5q32RkA= Subject key identifier: 86:A8:06:93:5F:25:B6:83:7E:95:DE:F2:D2:C0:26:3C:DC:C0:02:50 Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584F549DA431621CE3BA8D90A4FE Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/070da204-b714-36a4-b828-67f11d0cc12c.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 12037 IP address blocks: 167.176.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:a4:31:62:1c:e3:ba:8d:90:a4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=827c57a6-29ac-4832-9c1e-bbcbdee79bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a3:a6:93:31:d8:72:25:cb:67:ac:58:8a:c2: 68:cc:d6:98:4c:da:d5:60:fa:92:9b:34:2c:5e:41: 6f:f6:ca:ef:52:9f:fb:60:e0:d4:f9:1b:9b:1b:05: 01:7f:9e:45:5b:d7:00:a6:84:62:ca:3d:17:d4:2a: 28:8d:2c:97:03:1a:f5:05:c9:3b:ee:c6:f7:e9:09: 93:b9:44:6d:bd:1a:dd:fa:d3:0b:21:f8:9d:d9:bd: 58:e2:c4:73:f9:10:36:e0:7b:fa:6b:14:93:6d:94: c4:66:69:69:a1:2d:24:48:69:a3:76:6e:da:14:1a: 07:0b:b0:f1:0c:98:45:24:eb:bb:7b:e6:80:f7:29: 7f:f2:88:a5:5a:7d:9f:fb:52:48:99:0a:18:3c:ae: 0a:75:a0:1c:29:b2:a1:15:72:e1:2d:0b:42:83:9a: 7c:e7:9e:5f:ac:c5:58:54:00:33:a1:82:83:9d:87: ce:56:eb:a0:e9:0e:fc:19:bb:dc:80:4d:29:53:ea: c9:91:a6:06:ef:76:01:b5:bc:3b:24:32:a8:9c:24: 32:d4:73:e2:d4:ce:0f:0d:d9:12:5b:d3:78:df:64: 5c:d7:2a:33:66:69:cc:81:05:4e:6b:3a:51:45:de: 8e:a5:8a:19:24:5d:7c:97:19:72:b6:b6:a4:f3:5f: cf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A8:06:93:5F:25:B6:83:7E:95:DE:F2:D2:C0:26:3C:DC:C0:02:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/070da204-b714-36a4-b828-67f11d0cc12c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:23:97:f7:f5:eb:17:64:32:b2:7f:85:dd:f4:5e:18:60:58: 08:7a:f5:23:59:b9:c2:c6:bd:a3:1a:ba:8d:a6:f8:31:b6:86: e8:70:24:fd:61:a6:38:75:4f:ee:5c:8a:16:a1:15:93:ee:7c: a2:1e:3f:ad:d7:1c:07:56:bc:12:67:63:f4:63:bf:0d:84:80: 87:2d:14:83:79:fc:ab:41:6d:44:4d:6d:c6:e2:e5:9b:c0:98: a0:75:74:9d:7d:e1:2b:8b:b4:2d:99:49:49:a4:f8:43:cd:8c: d9:ef:87:ab:9d:3a:a3:db:77:a6:97:e4:12:7b:b4:7b:ee:fd: 0b:07:05:03:17:e9:73:ae:e8:f7:a6:67:ac:63:97:92:c7:42: 77:50:cd:af:47:c7:c3:33:cc:c7:24:9c:25:aa:3c:11:76:ac: 40:3e:b0:e4:85:3d:11:79:da:e8:1d:fa:d9:df:73:18:95:ae: 18:03:fc:42:99:98:4c:20:70:4d:fc:f8:55:aa:9b:40:f3:73: 58:64:12:3d:d1:6e:8e:de:af:43:2c:8a:de:b4:ab:0e:e9:b0: e6:ef:82:f2:d7:ac:d5:91:ed:3f:07:47:2f:62:0a:59:0d:40: 9c:e7:54:f3:e8:5c:fa:46:bf:32:c4:a9:30:80:65:6b:01:72: 8d:d8:68:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnaQxYhzjuo2QpP4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ODI3YzU3YTYtMjlhYy00ODMyLTljMWUtYmJjYmRlZTc5YmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqOmkzHYciXLZ6xYisJozNaYTNrVYPqSmzQs XkFv9srvUp/7YODU+RubGwUBf55FW9cApoRiyj0X1CoojSyXAxr1Bck77sb36QmT uURtvRrd+tMLIfid2b1Y4sRz+RA24Hv6axSTbZTEZmlpoS0kSGmjdm7aFBoHC7Dx DJhFJOu7e+aA9yl/8oilWn2f+1JImQoYPK4KdaAcKbKhFXLhLQtCg5p8555frMVY VAAzoYKDnYfOVuug6Q78GbvcgE0pU+rJkaYG73YBtbw7JDKonCQy1HPi1M4PDdkS W9N432Rc1yozZmnMgQVOazpRRd6OpYoZJF18lxlytrak81/PAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaoBpNfJbaDfpXe8tLAJjzcwAJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMDcwZGEyMDQtYjcxNC0z NmE0LWI4MjgtNjdmMTFkMGNjMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7ABMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8jl/f16xdkMrJ/hd30XhhgWAh69SNZucLGvaMauo2m+DG2huhwJP1h pjh1T+5cihahFZPufKIeP63XHAdWvBJnY/Rjvw2EgIctFIN5/KtBbURNbcbi5ZvA mKB1dJ194SuLtC2ZSUmk+EPNjNnvh6udOqPbd6aX5BJ7tHvu/QsHBQMX6XOu6Pem Z6xjl5LHQndQza9Hx8MzzMcknCWqPBF2rEA+sOSFPRF52ugd+tnfcxiVrhgD/EKZ mEwgcE38+FWqm0Dzc1hkEj3Rbo7er0Msit60qw7psObvgvLXrNWR7T8HRy9iClkN QJznVPPoXPpGvzLEqTCAZWsBco3YaAM= -----END CERTIFICATE-----Generated at Thu Oct 8 08:57:21 2026 by rpki-client