$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/98e5af52-edcf-3974-a9c5-120d896af40d.roa File: 98e5af52-edcf-3974-a9c5-120d896af40d.roa (raw, json) Hash identifier: YqY39usTVIoOXfLcH8EFrPgBWNB/RZ7fW8q2kPZTw/Q= Subject key identifier: 32:52:57:26:A9:60:B5:8B:3A:E3:8B:9B:BB:70:11:E2:97:81:83:70 Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584F549DAC6AE9466CD51A059340 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/98e5af52-edcf-3974-a9c5-120d896af40d.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 167.176.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:ac:6a:e9:46:6c:d5:1a:05:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=53759b87-215a-41ab-b138-5cb2d1abe3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:96:bd:3f:65:65:39:7a:63:ce:2a:96:e4: 62:2e:92:35:18:89:b6:85:56:7e:33:1a:7b:ac:8c: 44:5f:ab:f7:72:60:4b:c0:74:c3:e3:81:a0:25:e9: 65:51:f2:d2:12:7e:0a:4c:90:73:0c:37:ad:3e:b0: 9d:e5:7d:11:a8:fa:d1:87:2a:14:19:c8:50:63:b9: 0a:2a:87:67:65:64:b8:75:3b:84:d2:ec:c0:72:c4: e6:2a:08:ed:60:44:e3:a5:60:38:76:61:39:a3:5c: e0:45:80:3f:d7:ee:61:1a:67:7a:9a:08:1e:cb:04: 15:2b:2f:84:92:d7:e5:9f:89:ff:7f:89:7f:af:06: 18:48:17:53:02:03:63:94:ed:65:21:5a:a4:d4:33: 30:b4:38:86:6e:92:57:38:fb:23:77:8b:ea:1c:eb: e5:58:b6:46:bd:1a:39:ce:c1:06:4d:2e:da:0a:80: b6:b5:7d:49:3a:db:32:fd:e9:c5:31:20:9c:99:3d: ba:de:e6:05:59:e7:1a:72:e0:09:f4:2a:4f:a6:c4: 51:fb:2b:07:20:be:cf:f9:48:23:cb:c4:e9:2e:59: 6c:a0:bb:84:dd:e5:e1:fb:ca:64:c6:1f:be:6b:d1: a1:5d:81:5f:04:1b:fb:e0:77:f0:67:13:f1:1a:56: 95:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:52:57:26:A9:60:B5:8B:3A:E3:8B:9B:BB:70:11:E2:97:81:83:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/98e5af52-edcf-3974-a9c5-120d896af40d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:fe:66:22:03:31:ee:b4:f1:9c:25:e1:41:69:4d:74:d9:e1: 0e:39:ab:b9:6e:57:98:3e:c8:19:07:2a:92:d7:a1:cc:b3:2a: 16:be:58:fb:68:0c:17:1b:e9:35:53:b8:75:cb:8c:6f:45:bf: 61:cc:d0:dd:fd:37:56:46:5d:5f:50:23:9d:95:26:1d:90:2b: 06:cf:c5:11:19:2e:cf:2b:a2:d7:ff:e2:f5:cd:41:19:54:7b: 8c:23:2c:08:f3:2a:39:c4:1e:51:16:3f:93:16:65:e8:ab:24: 2d:16:9b:20:f5:90:53:d5:8a:a5:0c:eb:51:43:30:3b:32:a4: 3d:84:9e:a1:6f:83:7a:c4:15:25:23:7d:11:6b:e9:d9:6a:16: eb:1a:5a:f6:3a:e3:48:89:4f:94:b5:5f:96:00:eb:d8:25:83: 7d:39:b1:29:b7:e0:29:3b:f7:a5:16:95:23:f7:dd:d4:c0:57: bb:25:db:83:64:36:ff:a4:b2:19:cb:ee:d4:b9:43:41:b4:a7: af:79:3d:87:a0:24:d7:21:21:07:c0:64:b2:07:ab:b9:cd:10: 22:d2:96:88:82:25:7e:e7:d2:c6:df:c5:0b:7a:fd:b6:4d:0a: 5a:20:24:53:d9:49:dc:7c:5d:84:0a:eb:61:0a:8b:3a:c8:3a: e3:30:0b:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Unaxq6UZs1RoFk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NTM3NTliODctMjE1YS00MWFiLWIxMzgtNWNiMmQxYWJlM2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4iWvT9lZTl6Y84qluRiLpI1GIm2hVZ+Mxp7 rIxEX6v3cmBLwHTD44GgJellUfLSEn4KTJBzDDetPrCd5X0RqPrRhyoUGchQY7kK KodnZWS4dTuE0uzAcsTmKgjtYETjpWA4dmE5o1zgRYA/1+5hGmd6mggeywQVKy+E ktfln4n/f4l/rwYYSBdTAgNjlO1lIVqk1DMwtDiGbpJXOPsjd4vqHOvlWLZGvRo5 zsEGTS7aCoC2tX1JOtsy/enFMSCcmT263uYFWecacuAJ9CpPpsRR+ysHIL7P+Ugj y8TpLllsoLuE3eXh+8pkxh++a9GhXYFfBBv74HfwZxPxGlaVDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJSVyapYLWLOuOLm7twEeKXgYNwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvOThlNWFmNTItZWRjZi0z OTc0LWE5YzUtMTIwZDg5NmFmNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7BwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn+ZiIDMe608Zwl4UFpTXTZ4Q45q7luV5g+yBkHKpLXocyzKha+WPto DBcb6TVTuHXLjG9Fv2HM0N39N1ZGXV9QI52VJh2QKwbPxREZLs8rotf/4vXNQRlU e4wjLAjzKjnEHlEWP5MWZeirJC0WmyD1kFPViqUM61FDMDsypD2EnqFvg3rEFSUj fRFr6dlqFusaWvY640iJT5S1X5YA69glg305sSm34Ck796UWlSP33dTAV7sl24Nk Nv+kshnL7tS5Q0G0p695PYegJNchIQfAZLIHq7nNECLSloiCJX7n0sbfxQt6/bZN ClogJFPZSdx8XYQK62EKizrIOuMwCyk= -----END CERTIFICATE-----Generated at Thu Oct 8 08:57:19 2026 by rpki-client