$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d26a62a4-65ec-3c5b-a2ee-bb9e364c9f7a.roa File: d26a62a4-65ec-3c5b-a2ee-bb9e364c9f7a.roa (raw, json) Hash identifier: ufUGhFPsiE1hXBOp5DFF6JgDFMiwEkvbayt0cQ6WJEg= Subject key identifier: FD:4B:EE:0D:C5:16:9E:6D:BA:DA:F4:05:4A:0F:99:30:10:A5:14:0D Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584B6EF8C940D4EEC49A8CC4F400 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d26a62a4-65ec-3c5b-a2ee-bb9e364c9f7a.roa Signing time: Mon 06 Oct 2025 16:27:53 +0000 ROA not before: Mon 06 Oct 2025 16:27:53 +0000 ROA not after: Sun 04 Jan 2026 17:27:53 +0000 asID: 396982 IP address blocks: 167.176.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:f8:c9:40:d4:ee:c4:9a:8c:c4:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Oct 6 16:27:53 2025 GMT Not After : Jan 4 17:27:53 2026 GMT Subject: CN=ed0d3f77-3f27-4f4f-b493-3a414e8e3b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c7:da:1c:95:27:09:a4:85:85:21:a7:06:41: 78:55:f7:3f:b5:de:8d:52:0a:da:48:f8:ea:f2:7b: 2a:73:f8:d0:13:ff:79:f8:41:8f:30:af:4a:cd:c6: fd:a7:a5:72:7c:a4:30:06:21:e8:9e:08:7a:a8:1c: 5b:3c:72:c0:cc:6d:b4:bb:bc:53:2a:c9:0e:99:52: 33:00:68:74:5e:ea:df:57:97:d9:eb:f2:de:e5:db: 4a:fe:17:82:69:0b:d4:72:e5:fd:9c:c4:bd:ba:3b: df:8d:ba:25:5f:98:34:f6:de:dd:52:aa:0f:6f:60: 4b:1b:75:7c:8e:7c:42:34:82:a8:b4:f1:55:ca:df: 93:f7:6e:b2:7a:08:7f:8d:5d:2d:db:f9:ed:41:dd: 10:2b:fe:b5:6d:54:7e:ff:64:7d:a9:c8:e8:be:56: f4:09:2f:8f:10:80:50:58:e0:28:65:4b:c8:4d:9e: d0:9b:45:10:d9:66:72:86:1f:7c:8f:e1:61:6d:82: c0:d3:dd:28:49:84:d5:7c:2b:9a:60:f1:e6:5a:bb: 66:12:42:a9:3c:6b:f7:60:3b:b1:14:19:3f:29:ed: 3f:ab:2e:3d:55:a2:75:67:78:0d:2b:8b:ae:c1:8b: 6d:6b:96:fe:3f:de:52:55:5a:a0:44:bb:65:a5:39: b4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4B:EE:0D:C5:16:9E:6D:BA:DA:F4:05:4A:0F:99:30:10:A5:14:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/d26a62a4-65ec-3c5b-a2ee-bb9e364c9f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:65:72:46:94:1c:7c:87:52:35:ef:5f:ea:bc:e5:c1:6f:d9: 36:7e:b9:9e:ad:06:c6:e5:f1:76:29:04:c4:42:c1:c9:a6:5b: 11:7d:13:6a:5e:7e:33:93:d5:14:37:c9:4e:2d:06:ab:07:57: a4:2f:14:b5:df:1b:05:29:6f:b4:d2:be:79:59:cd:cc:1c:ed: f9:62:52:7b:6c:fd:71:9c:cc:2b:05:3b:4e:e7:72:d4:ad:39: a4:41:7d:8e:97:f5:8a:7c:5c:f8:26:de:41:03:76:73:57:ef: e8:69:16:c4:99:9f:59:57:99:6c:6f:8e:d5:0d:47:05:8c:92: bd:5a:95:ea:7f:77:57:57:95:cb:aa:c6:01:a9:99:4c:c7:dd: 15:1e:60:f1:e1:2c:4d:b3:89:7c:25:02:4b:77:d0:07:60:64: f0:4e:18:3e:82:7a:29:17:c3:6a:61:57:75:1f:dc:d9:e2:29: 84:b8:fd:dd:29:f6:d9:52:77:c8:17:5e:25:5c:3e:9a:24:cf: 46:8d:e2:38:9d:36:c7:29:78:b6:d8:8e:dc:0a:ef:d3:7f:44: a8:ef:4c:c3:56:27:a1:cf:a0:5c:ed:13:9c:ca:6b:31:a0:bf: 64:60:77:3d:6d:e9:b7:95:5b:dc:62:9c:5b:94:26:85:cd:45: 7d:66:36:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtu+MlA1O7EmozE9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI1MTAwNjE2Mjc1M1oXDTI2MDEwNDE3Mjc1M1owLzEtMCsGA1UEAxMk ZWQwZDNmNzctM2YyNy00ZjRmLWI0OTMtM2E0MTRlOGUzYjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMfaHJUnCaSFhSGnBkF4Vfc/td6NUgraSPjq 8nsqc/jQE/95+EGPMK9Kzcb9p6VyfKQwBiHongh6qBxbPHLAzG20u7xTKskOmVIz AGh0XurfV5fZ6/Le5dtK/heCaQvUcuX9nMS9ujvfjbolX5g09t7dUqoPb2BLG3V8 jnxCNIKotPFVyt+T926yegh/jV0t2/ntQd0QK/61bVR+/2R9qcjovlb0CS+PEIBQ WOAoZUvITZ7Qm0UQ2WZyhh98j+FhbYLA090oSYTVfCuaYPHmWrtmEkKpPGv3YDux FBk/Ke0/qy49VaJ1Z3gNK4uuwYtta5b+P95SVVqgRLtlpTm0dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1L7g3FFp5tutr0BUoPmTAQpRQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvZDI2YTYyYTQtNjVlYy0z YzViLWEyZWUtYmI5ZTM2NGM5ZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7B0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACllckaUHHyHUjXvX+q85cFv2TZ+uZ6tBsbl8XYpBMRCwcmmWxF9E2pe fjOT1RQ3yU4tBqsHV6QvFLXfGwUpb7TSvnlZzcwc7fliUnts/XGczCsFO07nctSt OaRBfY6X9Yp8XPgm3kEDdnNX7+hpFsSZn1lXmWxvjtUNRwWMkr1alep/d1dXlcuq xgGpmUzH3RUeYPHhLE2ziXwlAkt30AdgZPBOGD6CeikXw2phV3Uf3NniKYS4/d0p 9tlSd8gXXiVcPpokz0aN4jidNscpeLbYjtwK79N/RKjvTMNWJ6HPoFztE5zKazGg v2Rgdz1t6beVW9xinFuUJoXNRX1mNsM= -----END CERTIFICATE-----Generated at Wed Nov 5 07:45:58 2025 by rpki-client