$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/17b0cc31-e4b1-32c1-a0b7-c537c5a94ce5.roa File: 17b0cc31-e4b1-32c1-a0b7-c537c5a94ce5.roa (raw, json) Hash identifier: hUmrQ42QGgJQDzstIuABZFk33GctQqYyXrKLeiqzVa4= Subject key identifier: D0:92:54:EB:39:55:28:8A:F9:CC:8D:36:49:74:07:6A:55:E8:C9:97 Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584D300A43F9D0C5E55B2B3A4600 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/17b0cc31-e4b1-32c1-a0b7-c537c5a94ce5.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 12037 IP address blocks: 167.176.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:43:f9:d0:c5:e5:5b:2b:3a:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=3bc82a9f-b7c6-498b-ab40-e400f88141fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:f7:60:7b:ba:d4:a1:62:7c:e4:77:04:61: 94:6d:f5:93:f9:4b:3e:52:35:c5:a5:ac:85:9f:64: 9e:d3:a6:d5:37:4e:9d:a6:f0:26:cb:10:9c:7f:90: b4:74:f0:b4:56:3f:c8:79:94:61:d7:f8:06:b9:65: ad:1b:46:09:52:16:3c:92:9c:d1:2e:17:80:2a:30: 68:51:53:71:e1:59:24:02:a4:f2:ae:72:4f:59:7e: 22:d1:44:bf:db:dc:ad:e6:d6:ae:41:03:c9:5c:99: 3d:95:06:dd:cd:38:9c:c9:51:03:f8:46:8f:84:bd: 8d:0a:6f:b8:89:5d:b3:16:63:ec:96:91:12:16:a7: d7:3c:d0:3d:40:df:67:08:9d:1e:0b:a5:be:72:2e: a8:ea:c6:7f:48:6d:60:93:8b:82:c5:f7:18:7d:18: ca:e3:a2:d0:1a:a4:2a:9c:7d:ec:af:11:fa:00:e4: c3:4b:dd:0c:24:ca:29:21:9b:32:84:9b:ce:5f:8a: 1a:bc:79:14:b8:ac:59:14:97:b5:ef:12:3b:8c:f1: 51:6f:e0:06:c9:27:ca:23:00:48:33:d0:2c:20:8b: 7e:ac:78:ef:da:86:fc:44:e7:33:c3:92:7f:b1:81: 5d:93:a4:47:99:b4:66:b7:e7:14:49:af:dd:9c:39: 9d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:92:54:EB:39:55:28:8A:F9:CC:8D:36:49:74:07:6A:55:E8:C9:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/17b0cc31-e4b1-32c1-a0b7-c537c5a94ce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ff:fd:70:26:a2:b8:e9:4c:5e:a1:b0:f5:4a:70:90:1d:23: af:bf:d9:81:35:9c:94:a3:3d:61:f4:98:5f:5a:ba:6d:d2:d8: 9c:ab:5b:cd:14:96:b7:81:a4:c6:24:9b:30:fe:0e:74:e4:7f: cd:05:7f:fa:65:be:d9:d2:c6:a4:57:ad:0b:e4:db:d5:fa:f1: 9b:15:a4:da:2b:35:c2:e5:a8:ad:6a:4f:8f:02:42:da:c4:92: e7:94:df:85:71:20:91:26:04:73:23:72:9c:35:03:46:a7:b5: 94:29:ab:ad:59:f5:3d:45:98:6d:c3:62:4e:69:cf:af:46:51: 1f:44:58:29:89:cf:4d:53:15:2a:86:7f:9f:8f:52:9d:c0:f2: 74:0f:85:43:46:d7:3e:19:04:fe:e9:f7:17:d9:7f:da:1a:2b: 00:17:70:ca:8b:3b:7d:4b:80:4f:75:39:46:b2:1e:e5:72:74: e5:f2:78:0c:98:04:98:4e:3b:78:e7:b8:2e:80:bc:0b:d8:e5: 9f:1a:2a:7a:d7:5b:ac:bb:77:a8:0e:5c:82:d8:69:78:ed:62: bd:5c:e3:37:81:35:2e:f7:ef:7f:78:53:ed:15:10:4b:dd:79: d6:eb:f9:9e:50:4b:42:bc:4c:53:d0:fe:fe:92:5b:54:73:53: 7b:95:71:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCkP50MXlWys6RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk M2JjODJhOWYtYjdjNi00OThiLWFiNDAtZTQwMGY4ODE0MWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKb3YHu61KFifOR3BGGUbfWT+Us+UjXFpayF n2Se06bVN06dpvAmyxCcf5C0dPC0Vj/IeZRh1/gGuWWtG0YJUhY8kpzRLheAKjBo UVNx4VkkAqTyrnJPWX4i0US/29yt5tauQQPJXJk9lQbdzTicyVED+EaPhL2NCm+4 iV2zFmPslpESFqfXPNA9QN9nCJ0eC6W+ci6o6sZ/SG1gk4uCxfcYfRjK46LQGqQq nH3srxH6AOTDS90MJMopIZsyhJvOX4oavHkUuKxZFJe17xI7jPFRb+AGySfKIwBI M9AsIIt+rHjv2ob8ROczw5J/sYFdk6RHmbRmt+cUSa/dnDmdvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCSVOs5VSiK+cyNNkl0B2pV6MmXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMTdiMGNjMzEtZTRiMS0z MmMxLWEwYjctYzUzN2M1YTk0Y2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7BMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHn//XAmorjpTF6hsPVKcJAdI6+/2YE1nJSjPWH0mF9aum3S2JyrW80U lreBpMYkmzD+DnTkf80Ff/plvtnSxqRXrQvk29X68ZsVpNorNcLlqK1qT48CQtrE kueU34VxIJEmBHMjcpw1A0antZQpq61Z9T1FmG3DYk5pz69GUR9EWCmJz01TFSqG f5+PUp3A8nQPhUNG1z4ZBP7p9xfZf9oaKwAXcMqLO31LgE91OUayHuVydOXyeAyY BJhOO3jnuC6AvAvY5Z8aKnrXW6y7d6gOXILYaXjtYr1c4zeBNS737394U+0VEEvd edbr+Z5QS0K8TFPQ/v6SW1RzU3uVcfM= -----END CERTIFICATE-----Generated at Thu Mar 19 15:15:43 2026 by rpki-client