$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2de9bb04-17ca-3075-950c-e4e984cfba45.roa File: 2de9bb04-17ca-3075-950c-e4e984cfba45.roa (raw, json) Hash identifier: uYpCXatDU72ETX3/OBIR7slw8LxT41n3PvLCH70cyS0= Subject key identifier: 80:E7:6A:A9:86:F4:C7:C4:99:5B:68:23:12:AC:6D:B8:84:DA:58:FE Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584B6EEF4A3ED082F4BF19D70800 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2de9bb04-17ca-3075-950c-e4e984cfba45.roa Signing time: Mon 06 Oct 2025 16:08:45 +0000 ROA not before: Mon 06 Oct 2025 16:08:45 +0000 ROA not after: Sun 04 Jan 2026 17:08:45 +0000 asID: 394089 IP address blocks: 167.176.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:ef:4a:3e:d0:82:f4:bf:19:d7:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Oct 6 16:08:45 2025 GMT Not After : Jan 4 17:08:45 2026 GMT Subject: CN=ba5245ef-102f-4404-bd0d-dd35b2929c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d8:9b:23:59:b0:b3:ab:d1:37:75:b2:43:b8: 1a:4e:0d:fc:27:0d:ed:01:3b:c7:24:14:86:6e:57: 24:02:1d:cf:a4:a0:b1:a9:49:c4:20:03:77:09:5d: d0:61:c5:2a:9b:44:77:44:b4:75:36:a7:62:e6:34: 71:4d:0b:da:58:4f:31:ee:89:c5:a0:75:ab:d6:de: fc:af:72:b6:8f:84:63:eb:aa:bd:fa:17:7c:02:de: e9:53:6a:9a:ee:82:19:7a:6c:c0:c7:98:6f:5d:97: 84:22:c3:c5:71:bf:d4:83:5b:af:b6:d1:27:e1:38: 50:b3:bc:cf:4b:c6:f2:41:a9:80:83:7b:2d:db:af: f6:72:de:86:71:82:4b:02:1e:64:04:f4:f2:b8:95: 87:45:26:ba:8b:45:fa:a4:6d:57:fe:36:00:17:23: b5:86:6f:db:5c:03:49:b5:c9:8e:cb:eb:9b:42:c1: a3:03:56:88:b4:2c:cc:6b:83:5e:3b:0d:36:e6:f4: f8:c0:c6:57:eb:6a:34:7f:54:fd:26:52:d6:08:6d: 46:96:32:8e:31:18:8d:89:40:7a:04:b2:03:a3:04: f4:97:af:85:a1:c3:75:09:96:40:96:45:c7:27:5f: 2e:cb:d2:8a:26:af:0a:92:98:e3:0e:bf:6a:63:f0: 77:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E7:6A:A9:86:F4:C7:C4:99:5B:68:23:12:AC:6D:B8:84:DA:58:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2de9bb04-17ca-3075-950c-e4e984cfba45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:86:da:4a:46:80:3b:ec:6b:ae:7b:d5:7c:84:ea:26:4b:c1: ed:97:56:a4:2f:f8:c7:40:64:70:28:bb:a1:57:60:2f:56:b0: 0e:48:a0:ce:86:ba:87:f8:27:11:74:7a:c5:73:ff:5e:3b:95: 72:ac:23:ef:35:a4:35:64:73:1c:53:13:f5:3c:4d:de:ba:3f: 84:fd:5b:53:cb:06:46:37:64:f3:8c:20:0e:1f:74:99:9d:0a: 91:20:a8:5a:6c:bc:7e:c9:2d:74:08:09:f7:8c:18:81:0d:5e: 6c:ed:da:b6:b8:5e:2e:7e:a4:1f:c9:3a:3a:fd:8c:8e:66:37: a1:bb:8c:36:be:2e:c9:6d:9c:f8:10:a1:56:38:5b:95:82:89: 16:72:03:38:80:2a:37:a5:96:54:1d:a4:44:86:f0:2c:e9:3d: 2b:53:96:3a:23:5a:37:6e:5c:8f:f5:10:61:ee:34:bd:58:05: 48:b7:4d:3c:d5:6c:62:9f:48:f5:4e:b1:21:ec:f6:e0:56:e9: 4e:54:b1:b6:ae:3c:56:57:5c:55:60:ce:98:d5:7d:32:af:3d: 4c:ed:ce:42:69:5f:41:ea:84:e0:be:cd:6a:00:72:77:87:24: 25:35:63:62:fc:d4:ec:40:bd:ac:62:58:39:05:61:44:f8:00: 2b:4e:f2:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu70o+0IL0vxnXCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI1MTAwNjE2MDg0NVoXDTI2MDEwNDE3MDg0NVowLzEtMCsGA1UEAxMk YmE1MjQ1ZWYtMTAyZi00NDA0LWJkMGQtZGQzNWIyOTI5YzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79ibI1mws6vRN3WyQ7gaTg38Jw3tATvHJBSG blckAh3PpKCxqUnEIAN3CV3QYcUqm0R3RLR1Nqdi5jRxTQvaWE8x7onFoHWr1t78 r3K2j4Rj66q9+hd8At7pU2qa7oIZemzAx5hvXZeEIsPFcb/Ug1uvttEn4ThQs7zP S8byQamAg3st26/2ct6GcYJLAh5kBPTyuJWHRSa6i0X6pG1X/jYAFyO1hm/bXANJ tcmOy+ubQsGjA1aItCzMa4NeOw025vT4wMZX62o0f1T9JlLWCG1GljKOMRiNiUB6 BLIDowT0l6+FocN1CZZAlkXHJ18uy9KKJq8KkpjjDr9qY/B3xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDnaqmG9MfEmVtoIxKsbbiE2lj+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMmRlOWJiMDQtMTdjYS0z MDc1LTk1MGMtZTRlOTg0Y2ZiYTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7BwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiG2kpGgDvsa6571XyE6iZLwe2XVqQv+MdAZHAou6FXYC9WsA5IoM6G uof4JxF0esVz/147lXKsI+81pDVkcxxTE/U8Td66P4T9W1PLBkY3ZPOMIA4fdJmd CpEgqFpsvH7JLXQICfeMGIENXmzt2ra4Xi5+pB/JOjr9jI5mN6G7jDa+LsltnPgQ oVY4W5WCiRZyAziAKjelllQdpESG8CzpPStTljojWjduXI/1EGHuNL1YBUi3TTzV bGKfSPVOsSHs9uBW6U5UsbauPFZXXFVgzpjVfTKvPUztzkJpX0HqhOC+zWoAcneH JCU1Y2L81OxAvaxiWDkFYUT4ACtO8pA= -----END CERTIFICATE-----Generated at Wed Nov 5 16:54:39 2025 by rpki-client