$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d998e5d-3741-3db9-a5a4-201dfc0ba612.roa File: 2d998e5d-3741-3db9-a5a4-201dfc0ba612.roa (raw, json) Hash identifier: xCHoL0mfzH2mOVifr1rJD0R/YwH6+bsGdra6o+mwV28= Subject key identifier: 40:55:BA:BB:46:02:B9:BD:3F:9C:E1:F6:C2:E0:9F:0F:37:0D:39:66 Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584F549DACD0D93FC8EC74B91480 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d998e5d-3741-3db9-a5a4-201dfc0ba612.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 12037 IP address blocks: 167.176.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:ac:d0:d9:3f:c8:ec:74:b9:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=567ad398-ad6a-488a-b834-1bda98f10967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bf:58:e9:ad:f0:b0:a1:63:20:29:4c:bd:f6: cd:d0:99:60:8f:fb:f0:ec:9e:e8:10:e0:f4:dd:d2: ad:83:80:45:5d:aa:9a:7c:db:a9:04:34:dc:3e:26: ea:b7:61:54:ff:06:45:a8:25:f8:69:10:70:3e:c7: ae:30:81:e5:18:ce:a0:12:7a:46:4e:55:68:36:ee: fc:8c:91:b8:48:40:86:6b:3c:6c:d1:d7:b8:5a:ed: ec:d1:ab:b3:ee:46:94:58:00:8a:9c:cf:ac:35:bf: 1c:0a:3c:0f:4c:81:36:6e:0e:10:a7:0a:ba:71:70: 2c:a7:33:33:74:a2:04:6e:4d:bf:98:de:a3:ed:13: 41:3d:3d:46:21:93:8b:a9:29:78:0c:a2:ef:cb:e6: d7:f2:db:51:9f:1f:b5:74:ff:7a:b9:73:d6:85:52: 84:ef:2c:6d:c7:a5:20:4f:26:6b:48:86:28:ed:62: 0e:5e:3c:65:43:f5:6c:6f:ad:af:81:b9:98:53:38: 52:39:f1:cb:41:41:93:ce:03:c5:9c:f3:58:3c:60: 3e:66:f5:fb:b9:9e:32:df:b9:cf:06:e0:ea:3a:0f: d4:cf:d3:a5:4d:a0:9a:ea:21:91:e3:d4:9a:74:7a: 66:25:09:a9:83:32:02:50:8e:2f:93:1c:28:f2:d6: d9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:55:BA:BB:46:02:B9:BD:3F:9C:E1:F6:C2:E0:9F:0F:37:0D:39:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d998e5d-3741-3db9-a5a4-201dfc0ba612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:11:93:6c:31:f5:10:3f:81:c5:07:bb:86:de:c5:d3:e4:be: b0:3d:c2:3f:1b:f1:67:23:2c:77:0d:d8:44:e6:01:54:a5:5a: 28:d0:6d:d6:fc:5a:cb:c9:ab:b0:34:94:9f:2a:9c:5c:51:b2: 06:fd:68:be:47:55:9d:f2:27:dc:f8:26:14:22:9b:4f:6d:e5: 3f:a4:27:c3:fe:7b:0c:bc:2b:67:01:38:39:c4:e9:ab:24:97: c4:6b:6b:7b:37:b6:89:b4:ca:64:18:93:68:c1:b8:e9:4b:08: 8c:af:a9:86:62:b9:d1:55:5b:45:f1:5f:32:fe:a4:dd:38:59: 6d:5e:43:2e:72:a2:a2:a3:a5:f4:ad:10:a8:be:3c:9e:7d:94: c2:68:0d:e4:9d:14:e8:ee:54:14:aa:d3:1f:df:d0:c7:a1:7d: 3a:a5:95:30:d9:db:eb:ce:fa:eb:ba:da:d9:af:17:15:27:73: 4f:6b:29:b6:63:33:09:28:de:4a:e6:52:30:11:1c:23:ff:ec: da:23:77:d1:d4:9e:63:1a:aa:2f:9f:a1:d2:1c:b3:53:1d:f2: 00:2d:5c:d2:78:3b:52:05:a4:43:21:b0:b6:e0:e0:3c:28:a5: 23:19:b7:5d:87:fd:eb:30:4e:23:c3:38:b1:88:20:f4:63:2c: 20:3c:d3:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnazQ2T/I7HS5FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NTY3YWQzOTgtYWQ2YS00ODhhLWI4MzQtMWJkYTk4ZjEwOTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr9Y6a3wsKFjIClMvfbN0Jlgj/vw7J7oEOD0 3dKtg4BFXaqafNupBDTcPibqt2FU/wZFqCX4aRBwPseuMIHlGM6gEnpGTlVoNu78 jJG4SECGazxs0de4Wu3s0auz7kaUWACKnM+sNb8cCjwPTIE2bg4Qpwq6cXAspzMz dKIEbk2/mN6j7RNBPT1GIZOLqSl4DKLvy+bX8ttRnx+1dP96uXPWhVKE7yxtx6Ug TyZrSIYo7WIOXjxlQ/Vsb62vgbmYUzhSOfHLQUGTzgPFnPNYPGA+ZvX7uZ4y37nP BuDqOg/Uz9OlTaCa6iGR49SadHpmJQmpgzICUI4vkxwo8tbZ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBVurtGArm9P5zh9sLgnw83DTlmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMmQ5OThlNWQtMzc0MS0z ZGI5LWE1YTQtMjAxZGZjMGJhNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7AmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwRk2wx9RA/gcUHu4bexdPkvrA9wj8b8WcjLHcN2ETmAVSlWijQbdb8 WsvJq7A0lJ8qnFxRsgb9aL5HVZ3yJ9z4JhQim09t5T+kJ8P+ewy8K2cBODnE6ask l8Rra3s3tom0ymQYk2jBuOlLCIyvqYZiudFVW0XxXzL+pN04WW1eQy5yoqKjpfSt EKi+PJ59lMJoDeSdFOjuVBSq0x/f0MehfTqllTDZ2+vO+uu62tmvFxUnc09rKbZj Mwko3krmUjARHCP/7Nojd9HUnmMaqi+fodIcs1Md8gAtXNJ4O1IFpEMhsLbg4Dwo pSMZt12H/eswTiPDOLGIIPRjLCA80yM= -----END CERTIFICATE-----Generated at Thu Oct 8 14:04:20 2026 by rpki-client