$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/05c6618d-1af2-336a-bb79-4114392152ca.roa File: 05c6618d-1af2-336a-bb79-4114392152ca.roa (raw, json) Hash identifier: I+8hRE6otQLgKTN+kl92jvloZXjM19YPNGMBp0+RaQg= Subject key identifier: 1B:3D:F3:A4:BC:FA:60:AD:92:C5:06:E5:3E:D3:66:05:46:73:FC:E7 Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584B6EF06F1689195351B1D96B80 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/05c6618d-1af2-336a-bb79-4114392152ca.roa Signing time: Mon 06 Oct 2025 16:11:04 +0000 ROA not before: Mon 06 Oct 2025 16:11:04 +0000 ROA not after: Sun 04 Jan 2026 17:11:04 +0000 asID: 396982 IP address blocks: 167.176.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:f0:6f:16:89:19:53:51:b1:d9:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Oct 6 16:11:04 2025 GMT Not After : Jan 4 17:11:04 2026 GMT Subject: CN=498b7843-d6fa-48d6-9d74-f2ef167c149f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:49:ab:ad:ac:86:3a:7d:d7:a8:30:f5:1f:86: 13:4b:67:b8:9b:a8:16:37:35:79:34:f4:fe:28:69: 25:f5:7e:42:2d:ad:1b:28:dc:b2:ab:fa:41:80:d8: 2b:09:02:0c:30:b9:24:4f:99:05:6b:84:71:c9:77: 08:a8:d5:a0:83:9b:38:8f:a7:3b:26:71:82:bb:eb: f7:43:a0:9b:d4:32:d8:bd:e5:34:a6:9c:9b:f1:7a: 8b:02:70:73:fc:99:2d:60:b6:0e:7f:30:ab:dd:fb: 39:ce:c5:91:91:4f:8d:13:6a:60:6e:7a:21:db:50: b6:e8:bd:f1:98:b2:ea:4c:86:e6:de:28:70:e1:0f: b8:d1:8a:1e:05:fc:29:a1:16:8c:21:b6:ac:6c:a4: 74:05:91:f5:0e:a6:4e:9b:ba:f4:54:cc:df:0d:cd: 7f:01:c5:bf:46:0a:8b:cd:22:45:70:77:3b:0b:5f: 7e:9c:81:96:f4:ef:a1:7d:fc:f6:98:4f:64:8f:3a: 91:58:3e:2f:dd:c7:5e:fc:52:da:7a:ef:29:c2:76: 51:c7:d7:33:d1:0e:0a:9f:ad:f5:16:fa:b0:b3:9e: 6e:c5:68:30:6d:17:ba:26:a0:87:b2:ac:7b:3b:c0: 57:d8:5b:30:ea:aa:f7:e4:e1:65:62:39:20:ae:6f: 1e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3D:F3:A4:BC:FA:60:AD:92:C5:06:E5:3E:D3:66:05:46:73:FC:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/05c6618d-1af2-336a-bb79-4114392152ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b4:17:00:10:b0:20:fc:e7:ea:a9:51:c1:48:79:f8:d0:4d: 07:79:7c:d2:71:fe:eb:9a:71:60:94:72:03:b8:18:45:7a:97: d5:cf:4e:14:64:17:4a:5c:10:1f:a6:d9:14:16:94:67:3e:5d: 14:25:d3:e0:13:b3:b0:d3:78:b9:9b:9a:a9:e0:09:13:4d:02: ce:5b:c5:25:89:33:f0:b5:34:90:2c:41:91:28:4e:bb:b0:a8: d5:d9:c2:25:15:ba:dc:d8:3d:25:7b:14:d2:1b:10:9f:74:76: 8f:c2:d1:37:b8:24:7b:7a:f4:fe:0b:70:ef:2d:e2:1a:c4:b6: 52:db:72:d2:6f:12:31:f5:b2:14:4c:48:82:92:99:80:7a:4b: 89:e4:cb:96:3a:b8:fd:bb:ef:8b:92:3e:1a:90:b0:be:e8:01: 97:a2:9d:56:ca:d0:10:15:e9:ea:dd:6e:ac:94:d1:e7:40:64: a3:e6:16:6c:93:a8:36:54:ba:85:35:cc:72:20:90:9b:33:37: 12:22:2b:50:7e:54:50:65:80:76:f7:bc:70:69:f8:15:b2:ac: 6b:42:d3:e7:7d:36:05:d0:a0:5f:1c:d4:85:2e:46:b4:a1:13: ee:91:e0:4d:d5:ba:77:17:c0:13:f4:72:50:d4:71:82:c5:89: 1d:8c:91:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu8G8WiRlTUbHZa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI1MTAwNjE2MTEwNFoXDTI2MDEwNDE3MTEwNFowLzEtMCsGA1UEAxMk NDk4Yjc4NDMtZDZmYS00OGQ2LTlkNzQtZjJlZjE2N2MxNDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0mrrayGOn3XqDD1H4YTS2e4m6gWNzV5NPT+ KGkl9X5CLa0bKNyyq/pBgNgrCQIMMLkkT5kFa4RxyXcIqNWgg5s4j6c7JnGCu+v3 Q6Cb1DLYveU0ppyb8XqLAnBz/JktYLYOfzCr3fs5zsWRkU+NE2pgbnoh21C26L3x mLLqTIbm3ihw4Q+40YoeBfwpoRaMIbasbKR0BZH1DqZOm7r0VMzfDc1/AcW/RgqL zSJFcHc7C19+nIGW9O+hffz2mE9kjzqRWD4v3cde/FLaeu8pwnZRx9cz0Q4Kn631 Fvqws55uxWgwbRe6JqCHsqx7O8BX2Fsw6qr35OFlYjkgrm8eqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBs986S8+mCtksUG5T7TZgVGc/znMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMDVjNjYxOGQtMWFmMi0z MzZhLWJiNzktNDExNDM5MjE1MmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7BwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEq0FwAQsCD85+qpUcFIefjQTQd5fNJx/uuacWCUcgO4GEV6l9XPThRk F0pcEB+m2RQWlGc+XRQl0+ATs7DTeLmbmqngCRNNAs5bxSWJM/C1NJAsQZEoTruw qNXZwiUVutzYPSV7FNIbEJ90do/C0Te4JHt69P4LcO8t4hrEtlLbctJvEjH1shRM SIKSmYB6S4nky5Y6uP2774uSPhqQsL7oAZeinVbK0BAV6erdbqyU0edAZKPmFmyT qDZUuoU1zHIgkJszNxIiK1B+VFBlgHb3vHBp+BWyrGtC0+d9NgXQoF8c1IUuRrSh E+6R4E3VuncXwBP0clDUcYLFiR2MkSE= -----END CERTIFICATE-----Generated at Wed Nov 5 07:40:16 2025 by rpki-client