$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/070da204-b714-36a4-b828-67f11d0cc12c.roa File: 070da204-b714-36a4-b828-67f11d0cc12c.roa (raw, json) Hash identifier: Ent1ZtQAcWgCsuZucQg0ZFC1SXadNAHOKsqMRWdB0ZU= Subject key identifier: 19:20:CE:45:2C:B6:D8:3C:2C:55:C2:6F:83:97:31:14:4B:84:5A:0D Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584B6EEA6503FFC6671EA2824A60 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/070da204-b714-36a4-b828-67f11d0cc12c.roa Signing time: Mon 06 Oct 2025 15:58:54 +0000 ROA not before: Mon 06 Oct 2025 15:58:54 +0000 ROA not after: Sun 04 Jan 2026 16:58:54 +0000 asID: 12037 IP address blocks: 167.176.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:ea:65:03:ff:c6:67:1e:a2:82:4a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Oct 6 15:58:54 2025 GMT Not After : Jan 4 16:58:54 2026 GMT Subject: CN=d023f3d5-9282-465f-871a-2750e4597afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:09:8f:ca:72:d5:10:a0:38:0a:a5:f6:d8:fa: 2e:73:c1:66:d1:f8:3d:c9:77:72:4b:bd:6c:19:7c: a2:08:39:a0:ca:f4:85:fc:80:8f:ad:a3:61:3b:04: d5:9c:83:eb:38:f9:7f:7c:3b:77:b4:b2:1f:31:c4: 70:d0:3e:6c:0d:59:1b:14:82:a9:5b:42:ed:00:0c: 1d:38:25:fb:30:8e:45:79:fb:be:75:b4:d4:d3:3c: 4e:ba:c1:13:91:b4:17:51:90:36:41:c7:3a:06:39: 31:91:9c:34:8d:90:19:45:14:3b:68:c1:b9:9e:5b: 9c:a7:b6:61:1e:f6:77:86:fc:af:76:ba:32:d0:36: 6f:ad:75:b4:50:c4:4a:9b:eb:f2:bb:db:98:1b:12: 70:93:23:da:87:b6:fd:d4:f1:f3:e8:fc:c3:a6:d7: 32:a2:3a:df:5a:6f:46:8e:74:37:b8:8a:1a:04:9c: 74:68:63:4b:0f:9f:a2:cb:ca:62:49:d8:f6:88:e7: 57:73:b6:ef:5d:35:75:6f:20:e9:60:df:48:a5:71: c7:9f:66:94:3f:34:a8:32:71:a1:f4:ff:5f:05:20: 76:9a:bd:22:8f:a4:ea:6e:d6:28:59:28:ee:cc:ee: 10:db:bf:56:dc:54:30:9f:3a:4d:18:70:15:ec:50: 41:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:20:CE:45:2C:B6:D8:3C:2C:55:C2:6F:83:97:31:14:4B:84:5A:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/070da204-b714-36a4-b828-67f11d0cc12c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f6:e5:b3:d8:6d:a5:ac:a2:7d:b7:37:be:ba:a2:04:b5:90: af:3f:7c:34:4a:97:eb:7d:a1:16:57:f9:ed:67:4d:2e:c6:d9: 6a:ce:25:cf:93:f5:80:f9:eb:35:f3:02:c9:3e:47:9f:6d:4c: 0f:5a:1a:ff:01:f6:96:b3:c6:dc:ac:32:cc:c5:3a:6a:b2:de: 6c:1d:97:c4:4c:1f:a0:01:fc:14:11:d5:22:bb:72:1b:17:5e: e8:75:69:b9:42:de:a2:bf:c0:a9:24:ac:22:64:88:17:1a:b4: b3:9c:cc:c7:10:49:1d:f9:13:66:ea:98:57:4e:50:1b:37:b0: ca:49:a7:df:d3:7e:90:32:ab:e0:35:39:0e:b1:d1:73:4d:c2: 76:b9:7a:85:18:4f:6f:57:79:3b:49:63:da:6b:4f:f4:8d:34: b0:3a:8f:5a:dd:72:d1:83:01:a8:49:41:df:d5:ba:ef:5a:a8: 1b:5c:b4:46:fd:d5:65:f4:e4:c4:0e:4c:9b:40:c5:a9:8e:df: 4e:8b:85:3c:65:d1:cd:6a:ff:58:b1:e2:7b:c2:88:09:a6:92: ea:78:d0:75:10:1e:e5:f7:63:42:53:bb:0a:5c:72:f9:20:96: 43:77:76:55:8f:de:b3:60:81:09:39:18:d0:d8:00:dd:7f:49: 6b:60:5d:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu6mUD/8ZnHqKCSmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI1MTAwNjE1NTg1NFoXDTI2MDEwNDE2NTg1NFowLzEtMCsGA1UEAxMk ZDAyM2YzZDUtOTI4Mi00NjVmLTg3MWEtMjc1MGU0NTk3YWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAmPynLVEKA4CqX22Pouc8Fm0fg9yXdyS71s GXyiCDmgyvSF/ICPraNhOwTVnIPrOPl/fDt3tLIfMcRw0D5sDVkbFIKpW0LtAAwd OCX7MI5Fefu+dbTU0zxOusETkbQXUZA2Qcc6BjkxkZw0jZAZRRQ7aMG5nlucp7Zh HvZ3hvyvdroy0DZvrXW0UMRKm+vyu9uYGxJwkyPah7b91PHz6PzDptcyojrfWm9G jnQ3uIoaBJx0aGNLD5+iy8piSdj2iOdXc7bvXTV1byDpYN9IpXHHn2aUPzSoMnGh 9P9fBSB2mr0ij6TqbtYoWSjuzO4Q279W3FQwnzpNGHAV7FBBlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkgzkUsttg8LFXCb4OXMRRLhFoNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMDcwZGEyMDQtYjcxNC0z NmE0LWI4MjgtNjdmMTFkMGNjMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7ABMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE725bPYbaWson23N766ogS1kK8/fDRKl+t9oRZX+e1nTS7G2WrOJc+T 9YD56zXzAsk+R59tTA9aGv8B9pazxtysMszFOmqy3mwdl8RMH6AB/BQR1SK7chsX Xuh1ablC3qK/wKkkrCJkiBcatLOczMcQSR35E2bqmFdOUBs3sMpJp9/TfpAyq+A1 OQ6x0XNNwna5eoUYT29XeTtJY9prT/SNNLA6j1rdctGDAahJQd/Vuu9aqBtctEb9 1WX05MQOTJtAxamO306LhTxl0c1q/1ix4nvCiAmmkup40HUQHuX3Y0JTuwpccvkg lkN3dlWP3rNggQk5GNDYAN1/SWtgXSs= -----END CERTIFICATE-----Generated at Wed Nov 5 13:57:36 2025 by rpki-client