$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/29a85c30-a52d-36a6-9030-0ec6daf5320c.roa File: 29a85c30-a52d-36a6-9030-0ec6daf5320c.roa (raw, json) Hash identifier: JGZgvs98JEVAT5NVuFx14qqgNS+hUfreuCZhPCPcEMI= Subject key identifier: 57:02:0C:70:3B:49:98:5F:15:5B:FB:DD:6D:B8:0A:B0:CF:DC:67:2F Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584E104ED335CC7D8D9D4FD4E280 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/29a85c30-a52d-36a6-9030-0ec6daf5320c.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 14618 IP address blocks: 167.176.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:d3:35:cc:7d:8d:9d:4f:d4:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=3cdb4bef-0cdb-48ac-bfa2-bf4ff8b86fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:be:7d:cf:ea:b2:cb:82:cb:28:e8:a6:ab:8c: f9:20:b9:97:8d:6b:f8:67:f2:19:65:5c:17:1e:65: 25:30:86:f2:63:e7:da:c7:54:ee:91:0b:d3:92:2e: 45:3d:26:73:0b:8c:51:73:a9:e6:8d:2e:06:c5:bf: a1:b6:93:1c:0a:f9:b4:5d:bf:a8:74:27:9c:80:cd: f9:57:fc:e8:6f:80:e7:82:c6:62:9e:9d:b4:d1:cf: d9:95:c0:5c:9d:56:77:a3:43:7f:44:61:8e:0e:36: 7f:c1:78:f2:49:85:f4:bf:9a:dd:98:cb:69:26:1d: 7d:60:3d:d2:b4:7a:61:43:ad:bc:5a:82:fd:a4:f6: cc:ab:8a:db:11:a0:e0:83:d3:ce:00:e0:66:5b:f1: af:96:e0:f0:32:be:04:91:64:dd:b1:73:b6:b6:49: d5:86:4a:52:81:2e:e8:db:f9:3c:03:69:11:1c:94: 88:8c:ac:3e:1b:f4:fd:3f:5c:d8:0b:e4:21:ec:55: 07:39:12:89:38:8d:d5:3e:ab:a8:1f:f2:66:37:52: 4c:e6:84:91:01:b1:f0:c3:b6:70:2c:72:4f:12:5a: 0e:12:2d:ec:0b:1c:74:b6:cc:b5:89:61:0b:f2:85: 94:17:06:72:c2:57:71:0f:46:ed:4a:50:1e:e6:a4: 9f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:02:0C:70:3B:49:98:5F:15:5B:FB:DD:6D:B8:0A:B0:CF:DC:67:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/29a85c30-a52d-36a6-9030-0ec6daf5320c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:62:2e:56:dd:da:b6:6b:ad:a9:19:fe:fe:2b:aa:60:23:ca: 24:ee:ef:1a:a3:a6:1a:94:40:7c:13:ce:28:76:f5:af:c9:f2: a8:2f:fc:07:68:c5:9a:05:f9:11:e7:c2:b3:35:0b:9b:bc:a0: 5e:b9:d5:da:88:07:f1:16:7a:ab:ac:e8:8a:d0:3f:44:97:65: 7b:a3:5f:2b:04:29:5d:b0:f8:12:fe:55:50:b8:cf:96:94:df: f0:40:6b:35:af:6b:51:9f:ef:dd:ae:a8:c8:c0:8b:a5:8b:2a: 78:34:57:1e:92:0e:91:55:42:79:62:aa:e6:c4:82:94:d6:fa: 88:0e:ab:62:72:b9:f3:f6:ca:3b:7f:1d:df:01:b2:41:d4:a4: ab:20:95:50:96:31:38:c2:e1:74:2e:c7:5c:f1:d4:2e:87:d6: d3:36:9c:79:8a:dc:7d:2c:7c:3b:e8:3d:7c:e4:db:26:4f:a9: d3:b4:7a:9d:4f:3c:00:04:54:a0:2d:7d:75:9d:e5:28:ce:f0: b1:b2:84:9b:57:6c:a0:5d:67:4b:ac:8c:b2:3f:11:a5:fd:ac: 64:af:f5:91:61:1f:76:ce:55:60:a6:4a:62:5b:a7:c5:8c:da: 5f:35:a9:ef:b1:cf:91:47:f1:e0:69:94:c6:bb:c3:2f:1b:94: f8:71:7c:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTtM1zH2NnU/U4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk M2NkYjRiZWYtMGNkYi00OGFjLWJmYTItYmY0ZmY4Yjg2ZmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr59z+qyy4LLKOimq4z5ILmXjWv4Z/IZZVwX HmUlMIbyY+fax1TukQvTki5FPSZzC4xRc6nmjS4Gxb+htpMcCvm0Xb+odCecgM35 V/zob4DngsZinp200c/ZlcBcnVZ3o0N/RGGODjZ/wXjySYX0v5rdmMtpJh19YD3S tHphQ628WoL9pPbMq4rbEaDgg9POAOBmW/GvluDwMr4EkWTdsXO2tknVhkpSgS7o 2/k8A2kRHJSIjKw+G/T9P1zYC+Qh7FUHORKJOI3VPquoH/JmN1JM5oSRAbHww7Zw LHJPEloOEi3sCxx0tsy1iWEL8oWUFwZywldxD0btSlAe5qSfLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcCDHA7SZhfFVv73W24CrDP3GcvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMjlhODVjMzAtYTUyZC0z NmE2LTkwMzAtMGVjNmRhZjUzMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7ByMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpiLlbd2rZrrakZ/v4rqmAjyiTu7xqjphqUQHwTzih29a/J8qgv/Ado xZoF+RHnwrM1C5u8oF651dqIB/EWequs6IrQP0SXZXujXysEKV2w+BL+VVC4z5aU 3/BAazWva1Gf792uqMjAi6WLKng0Vx6SDpFVQnliqubEgpTW+ogOq2JyufP2yjt/ Hd8BskHUpKsglVCWMTjC4XQux1zx1C6H1tM2nHmK3H0sfDvoPXzk2yZPqdO0ep1P PAAEVKAtfXWd5SjO8LGyhJtXbKBdZ0usjLI/EaX9rGSv9ZFhH3bOVWCmSmJbp8WM 2l81qe+xz5FH8eBplMa7wy8blPhxfEk= -----END CERTIFICATE-----Generated at Sat Jun 13 14:57:03 2026 by rpki-client