$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/bb9a3eac-f30c-3261-bdb7-8c7bfb6a5fe5.roa File: bb9a3eac-f30c-3261-bdb7-8c7bfb6a5fe5.roa (raw, json) Hash identifier: S5c15IaDvnwpsr1ZeGlf2P8zFP5OnWEgMnGSwjHgenw= Subject key identifier: 55:D9:AA:60:77:E4:61:51:74:A6:2C:45:7F:B6:25:30:8C:67:B8:8D Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584EB2B1A03D046185B539E84F40 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/bb9a3eac-f30c-3261-bdb7-8c7bfb6a5fe5.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 14618 IP address blocks: 167.176.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:a0:3d:04:61:85:b5:39:e8:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=3c2dbac4-5414-4cec-8f97-8bcb9eb0f113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ba:63:6d:fb:91:36:00:ca:81:e5:7e:36:4b: 13:b2:b3:0f:61:73:d3:c4:d6:65:c4:16:80:90:fe: 26:7f:2b:63:5a:b4:72:e2:d5:97:9c:1b:2d:7b:6e: 75:cc:86:36:8e:ce:2f:3c:2d:91:a6:2c:6d:d5:8e: 99:10:45:3f:8c:71:9f:82:2f:27:4b:9a:c2:59:65: 78:b2:48:7f:05:75:4d:e0:fd:3c:58:8c:c3:f2:71: 54:c0:f4:fe:c1:e5:12:16:17:4e:5b:bc:7c:75:ca: 6a:26:81:50:53:a9:95:24:9d:39:66:d6:10:39:58: 20:ad:7c:e1:f1:a7:f7:3c:e1:6d:21:c1:f6:85:33: 9e:8c:42:8f:73:b8:1a:c9:f9:27:0a:f9:bc:b2:93: 02:5b:bd:d3:da:f5:b1:f7:40:f3:3f:a0:37:54:54: db:49:e0:33:f4:16:5d:6f:82:97:0e:9c:0d:9a:99: f6:ea:53:5c:58:60:f2:6b:d4:1e:86:1a:db:06:88: cf:f7:78:e5:12:76:05:32:18:7e:08:ca:d0:eb:36: d2:74:7f:2b:01:fe:0f:96:f0:88:8c:e2:37:6c:4b: 1c:42:3a:2d:e3:89:0f:00:f6:31:c1:cf:43:50:34: 76:6c:83:5e:ee:49:c2:5c:7f:23:ca:ec:e8:3d:33: 74:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D9:AA:60:77:E4:61:51:74:A6:2C:45:7F:B6:25:30:8C:67:B8:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/bb9a3eac-f30c-3261-bdb7-8c7bfb6a5fe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:1f:32:ed:45:42:a6:bf:9d:8f:1b:c0:09:54:30:5a:72:37: 3a:35:f5:25:59:4d:19:c6:cb:59:cf:f9:5c:a0:ec:8a:b5:a7: 79:15:2b:35:39:a4:71:3c:a0:0b:81:86:cf:f2:30:c1:03:d4: eb:ec:e2:7d:71:19:94:71:2d:61:d2:0d:0d:87:36:9f:82:0c: 2c:aa:93:39:e5:89:66:3a:a0:2c:1a:b0:8d:51:25:d5:f4:0c: 66:32:17:fb:d5:20:de:50:52:cb:d0:09:30:ec:3c:70:de:a9: 2a:fc:a0:ae:d8:07:c4:0a:f8:d1:b9:fd:25:93:05:ac:37:19: 4f:8d:00:7a:99:fe:d9:35:27:ba:c8:53:7d:63:d9:f1:ec:67: 52:7d:ea:aa:b5:49:17:70:3d:ab:61:c7:2e:16:5b:55:21:bc: 3d:f6:57:99:9a:32:e5:c1:57:71:fb:49:14:02:91:c9:b4:a3: 0a:ec:ca:46:47:0d:d9:a2:2a:81:a0:d6:80:59:67:e8:7f:f2: f1:ae:37:f9:f6:64:aa:f6:19:7d:35:ec:86:45:35:7e:8e:bf: 8e:c0:dc:84:99:f8:9a:43:af:33:70:ac:f5:c3:00:dd:ee:0c: 57:d9:f1:8c:a1:9c:67:1c:06:c2:a0:a5:3f:ab:51:01:58:ec: 21:a7:c8:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysaA9BGGFtTnoT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk M2MyZGJhYzQtNTQxNC00Y2VjLThmOTctOGJjYjllYjBmMTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7pjbfuRNgDKgeV+NksTsrMPYXPTxNZlxBaA kP4mfytjWrRy4tWXnBste251zIY2js4vPC2Rpixt1Y6ZEEU/jHGfgi8nS5rCWWV4 skh/BXVN4P08WIzD8nFUwPT+weUSFhdOW7x8dcpqJoFQU6mVJJ05ZtYQOVggrXzh 8af3POFtIcH2hTOejEKPc7gayfknCvm8spMCW73T2vWx90DzP6A3VFTbSeAz9BZd b4KXDpwNmpn26lNcWGDya9QehhrbBojP93jlEnYFMhh+CMrQ6zbSdH8rAf4PlvCI jOI3bEscQjot44kPAPYxwc9DUDR2bINe7knCXH8jyuzoPTN0PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXZqmB35GFRdKYsRX+2JTCMZ7iNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvYmI5YTNlYWMtZjMwYy0z MjYxLWJkYjctOGM3YmZiNmE1ZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7B1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEfMu1FQqa/nY8bwAlUMFpyNzo19SVZTRnGy1nP+Vyg7Iq1p3kVKzU5 pHE8oAuBhs/yMMED1Ovs4n1xGZRxLWHSDQ2HNp+CDCyqkznliWY6oCwasI1RJdX0 DGYyF/vVIN5QUsvQCTDsPHDeqSr8oK7YB8QK+NG5/SWTBaw3GU+NAHqZ/tk1J7rI U31j2fHsZ1J96qq1SRdwPathxy4WW1UhvD32V5maMuXBV3H7SRQCkcm0owrsykZH DdmiKoGg1oBZZ+h/8vGuN/n2ZKr2GX017IZFNX6Ov47A3ISZ+JpDrzNwrPXDAN3u DFfZ8YyhnGccBsKgpT+rUQFY7CGnyJI= -----END CERTIFICATE-----Generated at Thu Aug 20 21:56:51 2026 by rpki-client