$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/29a85c30-a52d-36a6-9030-0ec6daf5320c.roa File: 29a85c30-a52d-36a6-9030-0ec6daf5320c.roa (raw, json) Hash identifier: yJpLzyJDKCUmy8DbjS85uWA5qvOuiVjT7PzZFTy6h3Q= Subject key identifier: 05:CC:49:72:27:C0:83:9E:56:AF:5A:1A:A6:DB:29:D0:3D:20:46:20 Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584B6EF6D784004FA8D4F78A7F80 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/29a85c30-a52d-36a6-9030-0ec6daf5320c.roa Signing time: Mon 06 Oct 2025 16:23:58 +0000 ROA not before: Mon 06 Oct 2025 16:23:58 +0000 ROA not after: Sun 04 Jan 2026 17:23:58 +0000 asID: 14618 IP address blocks: 167.176.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:f6:d7:84:00:4f:a8:d4:f7:8a:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Oct 6 16:23:58 2025 GMT Not After : Jan 4 17:23:58 2026 GMT Subject: CN=1886de45-2cdf-4df2-98b5-37a247327999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:65:fe:37:75:5f:dc:04:9d:4c:20:cb:a6:04: 94:27:03:f6:fb:a0:c5:87:a3:26:c6:3f:46:6a:b0: 4c:99:28:32:f7:d7:46:51:57:02:e9:4d:ee:ef:9d: 1a:36:a9:34:f9:07:2a:8e:32:ef:43:f9:9f:d7:bb: da:c6:38:d5:98:53:99:eb:e1:a6:eb:aa:39:87:5f: 2c:e0:c1:d2:f5:0e:63:46:3b:5d:cb:f2:64:ce:1c: ff:69:28:00:dc:28:5f:d9:fd:ae:3e:80:54:88:53: 7c:d1:f4:52:60:c6:22:38:a2:cd:30:1c:ce:55:99: ec:21:d8:e5:63:7e:d1:99:a2:b8:f4:08:34:0c:60: 60:7e:3f:25:de:06:ab:b2:f9:8d:f6:06:9f:17:97: 38:c1:8a:9e:99:4e:8c:2a:fb:fb:35:89:ec:9b:c5: 75:bd:53:12:01:8b:da:0c:3f:79:24:83:ba:f7:fd: 3d:be:ad:eb:47:ea:67:d4:f2:b1:aa:1b:b0:ba:bc: 04:f7:a8:b1:e3:48:5f:ba:8f:58:08:84:39:bc:35: cb:98:39:5c:09:40:85:4b:f4:6c:f7:e4:ae:f9:b9: 02:f9:7d:6e:13:28:99:11:b4:1f:2c:5a:60:8e:78: 9f:48:4d:48:af:3d:3f:9a:6a:e3:75:2b:43:5d:bd: f8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CC:49:72:27:C0:83:9E:56:AF:5A:1A:A6:DB:29:D0:3D:20:46:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/29a85c30-a52d-36a6-9030-0ec6daf5320c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:86:52:ea:91:8b:f2:e2:c1:67:c1:d2:f5:21:89:f7:a7:14: 98:e3:65:56:9a:77:e0:9b:a9:8f:43:28:19:99:46:e4:ce:ce: 1c:50:d9:89:3e:73:62:3c:09:43:fb:f1:7d:cd:9c:39:cc:e5: 42:15:73:12:31:6b:2f:e2:16:9a:33:0c:24:a8:0c:2d:e7:bd: cb:cc:9c:05:71:de:3e:73:4e:b7:c8:8e:82:64:b9:2e:6d:b0: dd:14:85:b0:e6:46:9b:02:58:d6:57:93:19:fb:42:b3:60:3d: f9:c5:e4:b9:e2:73:d5:91:15:4e:bc:71:33:f0:2c:11:63:a3: 47:96:44:67:06:32:ce:cb:6a:cd:90:f4:e1:fd:c1:78:c4:2d: 3b:96:46:b9:1d:78:11:eb:6f:0f:76:52:c9:80:17:94:a3:97: 44:66:84:e6:84:af:22:a0:b3:88:99:85:e1:df:02:f2:e1:1a: e1:c7:47:2c:78:63:12:12:c3:ee:8f:2d:17:6f:b3:cc:4d:c6: 1e:b9:9f:55:ce:e1:96:bd:02:66:da:ee:4e:1d:9e:00:bb:54: bc:10:6c:35:21:74:ca:bf:12:e6:dd:fc:e6:ca:0a:09:d4:58: 75:97:8b:ec:c4:b0:57:c3:e7:46:3b:e6:eb:42:34:af:33:75: 52:36:8d:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu9teEAE+o1PeKf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI1MTAwNjE2MjM1OFoXDTI2MDEwNDE3MjM1OFowLzEtMCsGA1UEAxMk MTg4NmRlNDUtMmNkZi00ZGYyLTk4YjUtMzdhMjQ3MzI3OTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmX+N3Vf3ASdTCDLpgSUJwP2+6DFh6Mmxj9G arBMmSgy99dGUVcC6U3u750aNqk0+QcqjjLvQ/mf17vaxjjVmFOZ6+Gm66o5h18s 4MHS9Q5jRjtdy/Jkzhz/aSgA3Chf2f2uPoBUiFN80fRSYMYiOKLNMBzOVZnsIdjl Y37RmaK49Ag0DGBgfj8l3garsvmN9gafF5c4wYqemU6MKvv7NYnsm8V1vVMSAYva DD95JIO69/09vq3rR+pn1PKxqhuwurwE96ix40hfuo9YCIQ5vDXLmDlcCUCFS/Rs 9+Su+bkC+X1uEyiZEbQfLFpgjnifSE1Irz0/mmrjdStDXb34YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXMSXInwIOeVq9aGqbbKdA9IEYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMjlhODVjMzAtYTUyZC0z NmE2LTkwMzAtMGVjNmRhZjUzMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7ByMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuGUuqRi/LiwWfB0vUhifenFJjjZVaad+CbqY9DKBmZRuTOzhxQ2Yk+ c2I8CUP78X3NnDnM5UIVcxIxay/iFpozDCSoDC3nvcvMnAVx3j5zTrfIjoJkuS5t sN0UhbDmRpsCWNZXkxn7QrNgPfnF5Lnic9WRFU68cTPwLBFjo0eWRGcGMs7Las2Q 9OH9wXjELTuWRrkdeBHrbw92UsmAF5Sjl0RmhOaEryKgs4iZheHfAvLhGuHHRyx4 YxISw+6PLRdvs8xNxh65n1XO4Za9Amba7k4dngC7VLwQbDUhdMq/Eubd/ObKCgnU WHWXi+zEsFfD50Y75utCNK8zdVI2jYI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:38:53 2025 by rpki-client