$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/1754d7cd-1a51-3b76-83a5-08afa5c93828.roa File: 1754d7cd-1a51-3b76-83a5-08afa5c93828.roa (raw, json) Hash identifier: f+oEFj0XoB9h/0ESn4Dwi8Ro/QiIp7cOdPRLcr3W7Kc= Subject key identifier: 8F:2F:E3:64:CA:21:68:0C:C7:B5:5D:75:7C:0D:9A:3A:7E:4D:13:2D Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584EB2B1A2E55A2505C0FC621140 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/1754d7cd-1a51-3b76-83a5-08afa5c93828.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 12037 IP address blocks: 167.176.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:a2:e5:5a:25:05:c0:fc:62:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=bceeeee9-e0d1-4c96-89ff-5f317841e81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2e:91:4b:3e:3b:ed:15:aa:98:32:2c:e8:70: 25:a5:21:45:27:38:e3:a1:ca:1d:b0:59:d5:6a:8c: 58:07:fe:98:68:ba:66:62:de:8c:91:07:bb:ec:06: 2b:32:b4:f7:84:83:37:a6:49:e1:9d:d2:ea:a8:99: 86:b4:de:53:03:7c:ea:ab:3a:06:ba:3d:6e:b0:b3: c4:e4:9f:9a:87:c0:60:db:39:15:29:16:7f:e3:87: 65:aa:26:ed:8e:79:8a:c6:d1:d4:25:94:51:f6:6c: 36:9c:d5:bf:dd:fb:25:f5:d7:08:25:92:88:b9:73: 7c:94:67:ae:e8:3e:67:a4:9b:a2:18:91:87:ec:3c: 0c:cd:3a:ae:be:de:6c:11:19:4b:73:1e:11:90:62: d0:64:97:83:c6:25:9f:ab:af:db:0a:f1:77:5b:9d: 2d:2a:50:c0:67:df:6b:6f:b5:97:65:de:ba:77:73: a1:24:28:1a:97:1a:ba:5f:4f:81:77:7c:7a:ca:a7: 32:ad:f9:78:2d:4d:75:91:d8:c6:84:af:64:85:ec: 8f:de:e7:e9:a1:e8:84:31:b6:c3:c6:5a:d4:c2:75: 54:21:af:16:31:3d:cc:ad:7a:e8:d1:01:84:c0:22: 30:3c:c9:fa:21:2f:2e:31:82:2d:36:c9:fd:2f:0b: 25:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2F:E3:64:CA:21:68:0C:C7:B5:5D:75:7C:0D:9A:3A:7E:4D:13:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/1754d7cd-1a51-3b76-83a5-08afa5c93828.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d3:81:98:b4:62:2c:13:e3:f3:b3:ec:64:72:55:9c:6f:66: 7e:49:66:15:a0:80:cc:75:85:f2:ac:93:91:ac:4d:55:08:65: 52:3c:16:54:b0:af:ce:ae:85:14:da:c8:fc:a0:b7:8c:60:cc: d4:f0:fc:1b:d4:88:b7:38:17:3e:54:f2:c4:b4:86:07:06:ff: 90:df:57:2d:56:62:23:07:f4:c2:a4:98:2e:41:b6:21:a5:ea: 7b:a4:9b:bd:26:72:2e:d3:04:8a:05:d6:9e:04:64:ad:5f:49: 50:45:64:66:79:92:c8:40:aa:77:87:71:cd:6e:2d:ca:c9:12: 25:3c:5b:88:8b:76:d3:76:47:8a:80:b7:55:0c:6d:73:09:17: b6:fe:1f:64:ef:ee:c4:5a:c0:6e:29:1e:01:e1:10:e3:df:7a: c4:15:76:6d:31:4b:eb:68:16:ec:d7:7b:7e:e6:9c:78:43:ad: 19:6b:63:ff:59:d0:8b:74:7e:40:83:70:99:69:10:20:8e:c3: f4:48:85:0f:a1:cf:7b:9d:21:a8:34:ad:92:22:37:73:60:00: 6c:e7:f2:55:c0:51:33:ff:73:a9:e5:4d:e2:11:63:5a:91:3e: 68:8f:61:9a:8b:ab:e9:dd:38:8c:87:48:09:30:a6:27:33:4b: 90:5a:e9:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysaLlWiUFwPxiEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk YmNlZWVlZTktZTBkMS00Yzk2LTg5ZmYtNWYzMTc4NDFlODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS6RSz477RWqmDIs6HAlpSFFJzjjocodsFnV aoxYB/6YaLpmYt6MkQe77AYrMrT3hIM3pknhndLqqJmGtN5TA3zqqzoGuj1usLPE 5J+ah8Bg2zkVKRZ/44dlqibtjnmKxtHUJZRR9mw2nNW/3fsl9dcIJZKIuXN8lGeu 6D5npJuiGJGH7DwMzTquvt5sERlLcx4RkGLQZJeDxiWfq6/bCvF3W50tKlDAZ99r b7WXZd66d3OhJCgalxq6X0+Bd3x6yqcyrfl4LU11kdjGhK9kheyP3ufpoeiEMbbD xlrUwnVUIa8WMT3MrXro0QGEwCIwPMn6IS8uMYItNsn9LwslYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8v42TKIWgMx7VddXwNmjp+TRMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMTc1NGQ3Y2QtMWE1MS0z Yjc2LTgzYTUtMDhhZmE1YzkzODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7AkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfTgZi0YiwT4/Oz7GRyVZxvZn5JZhWggMx1hfKsk5GsTVUIZVI8FlSw r86uhRTayPygt4xgzNTw/BvUiLc4Fz5U8sS0hgcG/5DfVy1WYiMH9MKkmC5BtiGl 6nukm70mci7TBIoF1p4EZK1fSVBFZGZ5kshAqneHcc1uLcrJEiU8W4iLdtN2R4qA t1UMbXMJF7b+H2Tv7sRawG4pHgHhEOPfesQVdm0xS+toFuzXe37mnHhDrRlrY/9Z 0It0fkCDcJlpECCOw/RIhQ+hz3udIag0rZIiN3NgAGzn8lXAUTP/c6nlTeIRY1qR PmiPYZqLq+ndOIyHSAkwpiczS5Ba6Rc= -----END CERTIFICATE-----Generated at Fri Aug 21 01:11:24 2026 by rpki-client