$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/98cdc532-d434-3d0a-b6d1-140130e6240b.roa File: 98cdc532-d434-3d0a-b6d1-140130e6240b.roa (raw, json) Hash identifier: dZiHF0NZ7Md8TrMe/9IPYkMtoqLfX0hA2qdqFUDH4eM= Subject key identifier: 65:FE:D5:22:BC:3E:4D:8B:BE:A4:8D:B0:D9:9C:A3:A6:65:CD:1E:29 Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584D300A41647BAEEC52000D9580 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/98cdc532-d434-3d0a-b6d1-140130e6240b.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 12037 IP address blocks: 167.176.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:41:64:7b:ae:ec:52:00:0d:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=08368b38-62c6-4c4b-983c-4200d7462ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:43:41:67:67:c1:88:fd:50:ac:74:93:e3:eb: a6:98:20:1a:5c:5f:08:6c:8f:8c:3f:b4:24:80:a6: da:0c:ee:98:fb:56:f3:53:07:00:01:a4:c8:51:eb: 2d:fa:db:53:f3:32:86:c3:e8:a3:2e:cf:ec:a2:c8: ad:ca:c7:87:e0:9e:67:28:f4:8b:43:0e:2d:d7:c7: d0:9b:04:3b:a1:c3:5e:3a:ee:e9:f4:93:2c:3a:64: ca:ee:91:a8:87:40:eb:67:5c:80:e6:74:8e:8f:f1: d5:b9:ab:b1:82:9d:a6:8d:75:aa:02:63:f8:e2:fe: f2:a0:a9:03:2e:92:b0:78:bf:1b:4d:8c:30:01:4e: ef:bb:9d:3f:da:dd:32:ee:9e:84:83:7e:a3:30:c9: c9:af:cf:fa:31:4c:27:9e:78:ed:40:cd:81:96:cb: 4e:7a:39:23:fb:5e:78:52:36:6e:d0:97:38:f9:d6: 65:89:77:61:f3:87:77:d3:8c:cb:ee:65:35:03:6f: d1:0a:7d:11:19:d1:d7:1c:52:13:37:e3:2b:82:fb: 11:0b:e3:5a:1b:8e:87:c7:dc:92:17:3d:70:07:eb: f3:d1:1b:90:f1:dc:8b:d5:f9:52:1c:73:5d:2b:63: 81:a4:89:22:33:23:89:c3:6f:c8:11:be:46:7e:b9: f5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FE:D5:22:BC:3E:4D:8B:BE:A4:8D:B0:D9:9C:A3:A6:65:CD:1E:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/98cdc532-d434-3d0a-b6d1-140130e6240b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d2:be:5a:4a:3b:90:e2:89:d5:1e:b4:b8:cb:97:30:29:05: e2:bb:a2:87:95:4e:6c:7b:63:e6:47:c8:06:fe:ad:fd:40:f7: 2b:49:a3:8f:cf:a0:93:24:26:25:6a:5a:c1:e0:b5:0f:85:a3: 52:e4:71:b2:fd:15:df:47:c6:38:02:44:d7:de:ac:90:5a:59: 9f:7c:c0:b0:2a:53:dd:ae:fc:dc:57:8b:df:0c:c5:73:b7:33: b2:48:23:6f:a2:42:82:6c:2f:a7:57:e3:55:09:86:ef:48:ca: 09:e7:6f:0f:43:8c:95:0b:b4:73:1d:46:2f:fd:e8:d5:be:da: 27:d9:92:54:cf:76:d6:a2:6c:70:e4:88:25:27:b8:e7:85:65: 83:d0:56:ee:9e:de:94:8a:35:22:37:3e:36:e4:8d:8a:3c:d9: ce:17:41:c3:37:42:9e:d4:a6:a1:ee:08:9f:02:88:2b:13:ce: d0:78:31:8e:cc:ea:75:cc:83:4f:b8:d6:09:78:39:e2:cd:3b: 25:59:e8:f1:22:b1:a8:ec:9b:f1:17:2f:c8:9c:0b:ad:1b:a2: 99:bb:72:7d:7a:96:ba:ff:5f:10:60:6d:20:e8:31:09:de:46: 8f:4e:1c:f0:99:23:40:37:ef:64:7c:be:9d:fa:97:3b:80:b3: 0c:dc:cb:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCkFke67sUgANlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MDgzNjhiMzgtNjJjNi00YzRiLTk4M2MtNDIwMGQ3NDYyZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuENBZ2fBiP1QrHST4+ummCAaXF8IbI+MP7Qk gKbaDO6Y+1bzUwcAAaTIUest+ttT8zKGw+ijLs/sosityseH4J5nKPSLQw4t18fQ mwQ7ocNeOu7p9JMsOmTK7pGoh0DrZ1yA5nSOj/HVuauxgp2mjXWqAmP44v7yoKkD LpKweL8bTYwwAU7vu50/2t0y7p6Eg36jMMnJr8/6MUwnnnjtQM2BlstOejkj+154 UjZu0Jc4+dZliXdh84d304zL7mU1A2/RCn0RGdHXHFITN+MrgvsRC+NaG46Hx9yS Fz1wB+vz0RuQ8dyL1flSHHNdK2OBpIkiMyOJw2/IEb5Gfrn1nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGX+1SK8Pk2LvqSNsNmco6ZlzR4pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvOThjZGM1MzItZDQzNC0z ZDBhLWI2ZDEtMTQwMTMwZTYyNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7BEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHSvlpKO5DiidUetLjLlzApBeK7ooeVTmx7Y+ZHyAb+rf1A9ytJo4/P oJMkJiVqWsHgtQ+Fo1LkcbL9Fd9HxjgCRNferJBaWZ98wLAqU92u/NxXi98MxXO3 M7JII2+iQoJsL6dX41UJhu9Iygnnbw9DjJULtHMdRi/96NW+2ifZklTPdtaibHDk iCUnuOeFZYPQVu6e3pSKNSI3PjbkjYo82c4XQcM3Qp7UpqHuCJ8CiCsTztB4MY7M 6nXMg0+41gl4OeLNOyVZ6PEisajsm/EXL8icC60bopm7cn16lrr/XxBgbSDoMQne Ro9OHPCZI0A372R8vp36lzuAswzcyy8= -----END CERTIFICATE-----Generated at Thu Mar 19 15:17:32 2026 by rpki-client