$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d97e6a5f-696a-3b98-874c-824499b6ecbf.roa File: d97e6a5f-696a-3b98-874c-824499b6ecbf.roa (raw, json) Hash identifier: LFNrL3FT9gFGGlpd9vmLYwkt9LtG8qXU3tQbgotItRc= Subject key identifier: 93:5D:B9:D6:2A:F5:03:E4:AC:54:2E:1D:9D:A2:5B:56:0C:60:8F:B5 Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584D300A298B58274A6A5A3D6100 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d97e6a5f-696a-3b98-874c-824499b6ecbf.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 12037 IP address blocks: 167.176.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:29:8b:58:27:4a:6a:5a:3d:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=11d14669-683d-4046-b240-35aaa715108d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:11:88:68:3f:50:45:99:62:ea:f3:8c:3e:4a: 18:fc:0e:1e:29:6a:b5:53:83:9e:71:56:45:42:5b: 70:8f:ca:e7:51:c7:b7:59:fd:4a:db:9d:9b:04:9e: 27:fe:58:0d:a6:86:8d:18:39:61:c0:b4:4b:ca:ba: c9:40:97:a1:51:02:d7:fc:94:f5:bd:81:1b:d9:46: 78:9d:f0:f2:64:e3:ea:5e:f9:cd:43:ef:bd:bb:d3: 95:c8:dd:67:f1:21:66:fd:81:29:2f:96:ff:8c:ef: 70:78:c2:50:b7:78:79:52:09:39:3c:af:68:b4:65: 0d:78:47:70:9f:63:00:f1:b1:47:c9:06:51:8b:9f: 36:a9:10:cd:9b:5b:0a:6a:32:80:e5:64:cf:1b:d3: 8e:ea:27:f3:f9:fa:0b:6e:7c:49:95:ea:33:31:77: ea:aa:41:22:cb:be:c1:bf:fd:3c:ef:fd:6c:7f:fe: b3:80:34:b3:8a:56:2a:fe:74:65:3c:f0:57:93:d0: 0c:6d:6e:27:c7:e4:14:c5:6f:7e:10:7e:9f:e5:ea: ac:cd:ef:4f:13:7d:ea:f6:b1:43:79:15:57:7a:95: d1:42:00:ef:9c:61:0b:9e:6c:21:c9:ab:c8:df:e3: 74:1f:65:dc:3c:dc:51:28:52:bb:ec:5d:6a:8f:a1: f4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5D:B9:D6:2A:F5:03:E4:AC:54:2E:1D:9D:A2:5B:56:0C:60:8F:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d97e6a5f-696a-3b98-874c-824499b6ecbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:2f:42:b4:0a:73:32:e9:2a:cf:94:cd:bd:2b:8b:12:5b:78: 28:d9:cc:05:2a:64:b0:b9:61:d6:6a:0d:36:28:9d:f0:22:3e: 4f:43:58:9c:91:3f:dd:54:13:3d:5f:c3:26:28:71:6e:35:2e: 42:18:77:ac:fc:ee:9f:36:16:95:e6:38:3d:bf:e6:02:c1:82: da:d5:69:fa:89:81:f4:a4:7f:9f:e6:5f:9b:3d:dc:cc:69:25: 29:2e:fb:e7:3b:13:18:4b:cf:b5:43:99:85:71:22:a9:3f:2b: 03:a1:18:5f:6c:dc:fe:65:af:1c:3b:84:7e:d8:71:53:28:50: 09:10:6b:52:c1:d4:31:6c:6f:6c:10:92:17:a4:22:b4:dc:58: fa:a3:74:b8:d1:a0:36:e8:f4:49:5d:54:15:df:d3:c2:5c:d3: 67:a0:ea:3a:90:d3:68:7f:38:d4:c4:86:cf:2c:2f:c1:43:51: a1:f4:65:3d:03:79:2a:29:bc:be:0b:66:69:78:22:19:b2:aa: 24:63:63:40:c2:6f:92:5e:f5:8b:d6:8e:fd:0d:d9:19:6a:b1: 12:dd:98:3c:5d:d6:71:8f:8d:7b:7c:5b:b5:57:6a:73:6f:2a: 92:14:79:5c:d5:83:3d:43:36:a1:73:67:43:48:36:ce:8d:3f: 61:19:a1:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCimLWCdKalo9YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MTFkMTQ2NjktNjgzZC00MDQ2LWIyNDAtMzVhYWE3MTUxMDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BGIaD9QRZli6vOMPkoY/A4eKWq1U4OecVZF Qltwj8rnUce3Wf1K252bBJ4n/lgNpoaNGDlhwLRLyrrJQJehUQLX/JT1vYEb2UZ4 nfDyZOPqXvnNQ++9u9OVyN1n8SFm/YEpL5b/jO9weMJQt3h5Ugk5PK9otGUNeEdw n2MA8bFHyQZRi582qRDNm1sKajKA5WTPG9OO6ifz+foLbnxJleozMXfqqkEiy77B v/087/1sf/6zgDSzilYq/nRlPPBXk9AMbW4nx+QUxW9+EH6f5eqsze9PE33q9rFD eRVXepXRQgDvnGELnmwhyavI3+N0H2XcPNxRKFK77F1qj6H0ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNdudYq9QPkrFQuHZ2iW1YMYI+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvZDk3ZTZhNWYtNjk2YS0z Yjk4LTg3NGMtODI0NDk5YjZlY2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7AIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcvQrQKczLpKs+Uzb0rixJbeCjZzAUqZLC5YdZqDTYonfAiPk9DWJyR P91UEz1fwyYocW41LkIYd6z87p82FpXmOD2/5gLBgtrVafqJgfSkf5/mX5s93Mxp JSku++c7ExhLz7VDmYVxIqk/KwOhGF9s3P5lrxw7hH7YcVMoUAkQa1LB1DFsb2wQ khekIrTcWPqjdLjRoDbo9EldVBXf08Jc02eg6jqQ02h/ONTEhs8sL8FDUaH0ZT0D eSopvL4LZml4IhmyqiRjY0DCb5Je9YvWjv0N2RlqsRLdmDxd1nGPjXt8W7VXanNv KpIUeVzVgz1DNqFzZ0NINs6NP2EZoWc= -----END CERTIFICATE-----Generated at Thu Mar 19 15:16:51 2026 by rpki-client