$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2de9bb04-17ca-3075-950c-e4e984cfba45.roa File: 2de9bb04-17ca-3075-950c-e4e984cfba45.roa (raw, json) Hash identifier: d3YezXmNSjtN815BTYXXbaDAvD2evCPuBpREkpgonyM= Subject key identifier: 16:95:D1:0A:4B:D4:F2:2E:27:4F:08:A1:7E:CA:85:86:DA:F8:02:D0 Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584D300A407AD2AA3C051D58A040 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2de9bb04-17ca-3075-950c-e4e984cfba45.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 394089 IP address blocks: 167.176.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:40:7a:d2:aa:3c:05:1d:58:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=63e4470e-8039-42eb-be1b-47877ef4f6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1f:58:08:07:ed:75:de:eb:f6:68:89:a8:df: ff:98:04:c2:c4:29:a5:d6:52:61:20:f4:d0:98:81: da:82:c9:f0:86:9c:47:25:d5:d6:40:67:95:e0:cc: a4:db:60:42:46:e9:ff:ea:08:d4:3f:39:aa:fb:87: 15:25:2b:32:da:b6:7a:66:69:aa:7c:ba:9f:23:dd: 0a:cb:00:7d:37:3b:95:78:b6:a5:26:3e:4a:57:4b: be:f8:f4:9b:cc:2a:86:5b:e1:fe:e2:ee:d0:8c:c2: 85:ed:71:c1:90:33:94:a9:fd:fe:9f:45:56:b9:b1: 33:4f:cd:3a:0d:c7:10:33:b4:a3:01:7d:48:52:13: a5:b7:1c:12:8c:b8:8b:36:a4:4c:2a:a9:a4:44:c5: de:20:c9:4f:b8:9b:a6:1a:44:9a:6e:ca:36:0b:67: 5d:ed:d5:a6:00:ce:24:a8:36:ea:03:6c:ab:84:19: 73:d8:ed:c2:c0:68:05:08:5c:48:58:f8:57:95:59: 17:4f:7e:43:73:07:a4:17:2e:15:7b:44:10:ea:53: 81:75:35:73:cb:a8:65:ae:4b:e5:b5:c4:d4:19:eb: 4d:27:d0:55:50:68:85:5e:4a:61:d5:3c:86:c8:17: 19:6c:de:8f:cc:33:c8:2f:af:58:33:f1:f6:50:b7: f4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:95:D1:0A:4B:D4:F2:2E:27:4F:08:A1:7E:CA:85:86:DA:F8:02:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2de9bb04-17ca-3075-950c-e4e984cfba45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9b:70:3a:8a:58:49:4f:a7:11:d6:f6:db:3b:92:56:83:87: 8c:11:86:0f:f6:81:20:71:d9:02:7c:9b:e6:73:a1:25:62:ea: 7d:3c:9c:2e:04:7c:4b:a1:46:4b:14:80:6a:d5:64:e7:58:34: 2e:c0:eb:e1:ff:73:93:cb:37:04:d5:26:1f:7d:21:81:9d:a9: aa:39:de:9f:9e:4d:99:b7:c9:61:38:6d:7a:91:a9:76:de:44: 58:d0:0a:19:f2:6e:3b:ef:1d:c9:26:cf:21:63:7a:45:97:e5: b4:b0:02:bb:1c:52:49:66:7a:f0:6c:1e:56:d4:e1:6b:92:eb: 3a:27:29:7c:35:3c:15:65:c5:d8:56:e2:7f:4e:88:e0:19:93: 50:a1:2f:a2:76:bd:35:a7:8f:11:25:96:77:81:fb:d9:30:45: 12:7f:6b:ea:11:06:38:d4:22:e9:7e:d3:30:45:ac:59:0e:12: 72:96:6e:da:6e:49:90:32:9f:71:2c:c4:21:c7:86:b8:b7:7f: 14:95:06:20:a4:82:70:8e:b6:04:5d:6a:e0:a8:6b:54:58:10: b6:5b:92:e6:54:d5:6b:1b:60:dc:8f:46:dd:7e:3d:fa:8e:24: 69:08:c5:d3:11:54:a0:82:bc:64:5e:95:77:bf:a7:66:20:71: a5:3b:99:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCkB60qo8BR1YoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NjNlNDQ3MGUtODAzOS00MmViLWJlMWItNDc4NzdlZjRmNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgx9YCAftdd7r9miJqN//mATCxCml1lJhIPTQ mIHagsnwhpxHJdXWQGeV4Myk22BCRun/6gjUPzmq+4cVJSsy2rZ6ZmmqfLqfI90K ywB9NzuVeLalJj5KV0u++PSbzCqGW+H+4u7QjMKF7XHBkDOUqf3+n0VWubEzT806 DccQM7SjAX1IUhOltxwSjLiLNqRMKqmkRMXeIMlPuJumGkSabso2C2dd7dWmAM4k qDbqA2yrhBlz2O3CwGgFCFxIWPhXlVkXT35DcwekFy4Ve0QQ6lOBdTVzy6hlrkvl tcTUGetNJ9BVUGiFXkph1TyGyBcZbN6PzDPIL69YM/H2ULf0OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaV0QpL1PIuJ08IoX7KhYba+ALQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMmRlOWJiMDQtMTdjYS0z MDc1LTk1MGMtZTRlOTg0Y2ZiYTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7BwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKbcDqKWElPpxHW9ts7klaDh4wRhg/2gSBx2QJ8m+ZzoSVi6n08nC4E fEuhRksUgGrVZOdYNC7A6+H/c5PLNwTVJh99IYGdqao53p+eTZm3yWE4bXqRqXbe RFjQChnybjvvHckmzyFjekWX5bSwArscUklmevBsHlbU4WuS6zonKXw1PBVlxdhW 4n9OiOAZk1ChL6J2vTWnjxEllneB+9kwRRJ/a+oRBjjUIul+0zBFrFkOEnKWbtpu SZAyn3EsxCHHhri3fxSVBiCkgnCOtgRdauCoa1RYELZbkuZU1WsbYNyPRt1+PfqO JGkIxdMRVKCCvGRelXe/p2YgcaU7mWA= -----END CERTIFICATE-----Generated at Thu Mar 19 15:13:10 2026 by rpki-client