$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d998e5d-3741-3db9-a5a4-201dfc0ba612.roa File: 2d998e5d-3741-3db9-a5a4-201dfc0ba612.roa (raw, json) Hash identifier: K3icjNYbrJ5uCHlhQyZHhkm/dBzdmTaAdZqWP211MEc= Subject key identifier: 35:CB:99:F0:C9:A3:A6:D4:56:BF:6C:FA:FD:0F:B9:5B:24:66:BE:34 Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584D300A42D0BEFC65D136E67CA0 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d998e5d-3741-3db9-a5a4-201dfc0ba612.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 12037 IP address blocks: 167.176.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:42:d0:be:fc:65:d1:36:e6:7c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=6c0f2240-1eca-4829-ae81-b5c836e78fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6d:0a:2c:e7:d8:5d:0e:5b:07:fc:aa:e5:0b: b4:53:e6:7c:fb:8b:38:4d:a7:77:cf:37:ec:e3:54: 31:5a:31:3e:2c:69:cc:01:ee:dc:e0:80:20:fa:5a: 3f:02:fa:ca:06:20:3f:94:b4:d4:81:80:77:b7:2d: ba:c8:40:c2:80:89:f4:5d:8f:e7:64:20:7d:fb:4e: 62:3b:3d:7d:2c:00:ef:9b:29:82:d5:24:dd:60:b1: 58:e3:56:8e:7a:82:4d:eb:40:6f:b0:7d:ac:ed:59: fb:83:3c:40:5d:d6:01:e2:67:bd:5c:fc:e0:40:da: b4:ef:51:9f:c5:14:ad:33:48:17:36:40:ce:94:03: f4:c0:6b:5a:81:52:11:65:b6:76:b1:27:4b:cd:82: 81:1c:88:35:14:1b:3b:38:b0:f8:5c:e9:3c:e4:cc: 68:10:a7:37:f6:5a:20:78:0d:5e:30:6b:90:db:ab: 81:30:98:36:b3:02:99:2e:0c:6b:ac:08:74:5f:1e: ef:88:85:f4:07:3b:c2:4c:d1:da:01:57:82:49:2b: a7:e1:d7:e1:a9:7d:75:a4:e9:71:69:65:19:c1:96: b8:a2:76:a8:02:e7:56:de:5b:fe:07:18:ac:64:be: 71:ec:47:47:00:18:d8:95:83:85:6b:63:4b:ad:a1: 57:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CB:99:F0:C9:A3:A6:D4:56:BF:6C:FA:FD:0F:B9:5B:24:66:BE:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d998e5d-3741-3db9-a5a4-201dfc0ba612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a3:1a:bd:d2:54:00:1d:44:3f:47:f0:3a:f2:99:dc:58:1f: 4b:fc:1f:f7:b8:b8:56:02:36:5b:8d:db:3d:d7:b0:b9:f0:b5: 48:ca:c0:74:4b:e2:fa:bf:ff:be:42:58:7d:aa:03:76:6c:f7: 68:77:1d:61:de:9f:66:d5:71:9d:37:cd:bb:36:57:24:b1:3d: 48:86:70:c6:66:a0:fa:70:06:eb:e2:79:9d:13:bb:9c:13:3f: 58:f8:ee:e8:4c:ee:eb:18:ce:bb:4a:41:da:35:d0:dc:54:c7: 1e:37:80:39:18:9c:86:60:a6:5d:50:43:b5:e1:d9:c1:d2:7e: ae:9e:18:f2:6b:b7:d0:0d:3e:8a:c8:5e:0d:3c:8e:f6:28:41: b5:8b:29:99:5d:82:d9:ee:34:4a:d2:a2:cb:c7:31:10:0c:af: c5:39:97:84:d6:65:e3:10:16:9e:56:a7:01:c2:db:04:67:8f: 27:67:c9:18:aa:8f:c8:bb:41:6f:d5:59:6d:43:9d:e7:e5:1e: 2a:ab:e6:7d:05:86:fa:48:42:49:42:5f:ab:1e:6a:b4:0c:aa: c1:80:e9:f7:f2:11:07:63:f9:b9:ca:ee:ca:9a:89:e1:1b:53: 8f:a2:6c:05:66:b8:8f:13:a3:2e:7a:c5:f5:60:58:9e:96:12: 25:ce:12:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCkLQvvxl0TbmfKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NmMwZjIyNDAtMWVjYS00ODI5LWFlODEtYjVjODM2ZTc4ZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm0KLOfYXQ5bB/yq5Qu0U+Z8+4s4Tad3zzfs 41QxWjE+LGnMAe7c4IAg+lo/AvrKBiA/lLTUgYB3ty26yEDCgIn0XY/nZCB9+05i Oz19LADvmymC1STdYLFY41aOeoJN60BvsH2s7Vn7gzxAXdYB4me9XPzgQNq071Gf xRStM0gXNkDOlAP0wGtagVIRZbZ2sSdLzYKBHIg1FBs7OLD4XOk85MxoEKc39log eA1eMGuQ26uBMJg2swKZLgxrrAh0Xx7viIX0BzvCTNHaAVeCSSun4dfhqX11pOlx aWUZwZa4onaoAudW3lv+BxisZL5x7EdHABjYlYOFa2NLraFXPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXLmfDJo6bUVr9s+v0PuVskZr40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMmQ5OThlNWQtMzc0MS0z ZGI5LWE1YTQtMjAxZGZjMGJhNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7AmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCjGr3SVAAdRD9H8DrymdxYH0v8H/e4uFYCNluN2z3XsLnwtUjKwHRL 4vq//75CWH2qA3Zs92h3HWHen2bVcZ03zbs2VySxPUiGcMZmoPpwBuvieZ0Tu5wT P1j47uhM7usYzrtKQdo10NxUxx43gDkYnIZgpl1QQ7Xh2cHSfq6eGPJrt9ANPorI Xg08jvYoQbWLKZldgtnuNErSosvHMRAMr8U5l4TWZeMQFp5WpwHC2wRnjydnyRiq j8i7QW/VWW1DneflHiqr5n0FhvpIQklCX6searQMqsGA6ffyEQdj+bnK7sqaieEb U4+ibAVmuI8Toy56xfVgWJ6WEiXOEl0= -----END CERTIFICATE-----Generated at Thu Mar 19 15:14:21 2026 by rpki-client