$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/12a8c028-198a-3a51-beee-1da8945080cb.roa File: 12a8c028-198a-3a51-beee-1da8945080cb.roa (raw, json) Hash identifier: bPy/izy+Y7De5YIPJ9rKZC1rj1deMHBgXjVf9I5KPY0= Subject key identifier: B3:12:D4:44:9C:9B:C5:35:98:35:D4:13:B7:39:11:4E:01:7F:64:61 Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584F497554D1531633C2D426BAC0 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/12a8c028-198a-3a51-beee-1da8945080cb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 192.161.158.0/24 maxlen: 24 192.161.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:54:d1:53:16:33:c2:d4:26:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=90f441d1-4550-46fb-a76b-01169fd00b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:3b:01:c3:8e:bc:ba:d7:8b:28:39:48:3a: d8:00:5a:d7:1b:16:cf:82:60:0d:b9:1d:81:01:4b: 17:82:e1:93:90:e3:23:50:6f:1f:31:8a:ad:e6:4b: 84:79:3c:5e:f2:20:78:33:40:4f:dc:d8:ab:3b:0f: ec:5c:51:55:b0:b7:f7:43:49:57:6d:8b:0b:16:91: 93:c2:89:c8:12:3e:68:ed:d0:ed:9a:82:f7:3d:74: 2d:a8:ff:0c:81:b1:87:ab:cc:97:fd:94:d2:39:cd: bc:2d:bf:b3:00:5e:5e:f4:15:12:fe:c3:93:59:81: de:fa:4e:2b:ef:27:48:97:43:ec:ce:9b:6e:2d:a2: d9:62:f7:a2:ef:a9:4a:e4:93:87:d1:f1:61:21:a1: b6:13:d9:7f:84:a7:30:1a:cd:c1:3f:64:df:98:0e: 1a:b5:43:0d:4c:16:d5:d7:90:a3:07:ea:30:b1:60: dc:12:f7:62:1a:66:c0:6d:d3:88:82:4a:60:82:82: da:a1:e6:45:41:aa:2a:ff:08:51:f3:a2:d6:77:ed: 25:d2:e1:f5:88:8b:df:b6:98:ed:2b:46:f2:31:0b: 3d:bd:af:dd:80:29:a4:c5:b5:2d:14:2c:92:40:ea: 69:50:8b:7b:74:79:e8:aa:20:4f:c3:09:b0:79:1f: 75:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:12:D4:44:9C:9B:C5:35:98:35:D4:13:B7:39:11:4E:01:7F:64:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/12a8c028-198a-3a51-beee-1da8945080cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 192.161.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:6c:5f:ae:e3:04:d6:ff:d8:3b:06:f0:07:ff:23:30:65:af: 06:8b:76:3b:fa:a7:0b:52:b5:a1:01:b6:bf:e7:6b:29:02:0e: f1:75:3b:e0:94:12:8f:ef:bb:52:94:75:09:2d:7f:c0:ea:71: 61:bc:d1:03:8e:63:9f:b8:fb:e6:f4:6a:cb:d7:fa:a9:37:a6: 7b:cb:f3:f0:64:78:12:36:5a:96:41:e4:2b:97:a6:1c:92:ba: 39:8c:0f:3c:b6:6d:6f:b6:99:cb:1a:2c:72:1c:4d:c8:b6:87: 02:15:b4:c3:06:a4:ec:22:ef:b0:d6:d7:39:00:e7:32:61:28: 1f:d7:1f:1f:e9:84:3b:ec:a7:cd:bc:13:98:ef:ae:03:c6:44: c7:d7:ac:ae:1d:03:41:25:c9:05:09:0f:ba:6f:1c:a3:8d:9e: de:12:5e:e7:da:35:0e:08:d0:05:3a:43:94:d9:12:2f:b5:3a: 0e:af:40:5e:13:0d:9b:98:a0:e9:eb:ae:71:d1:b1:b5:85:5b: 4e:fc:99:2a:2a:92:d1:d1:94:9c:af:c8:39:2f:4b:70:39:34: 76:85:67:6f:30:31:c3:8b:a4:9c:77:71:94:79:c4:93:d1:ce: 7e:d1:c8:5e:e8:af:0a:3b:65:68:e2:58:76:e6:2d:c1:e0:92: b8:f1:35:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdVTRUxYzwtQmusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTBmNDQxZDEtNDU1MC00NmZiLWE3NmItMDExNjlmZDAwYjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPM7AcOOvLrXiyg5SDrYAFrXGxbPgmANuR2B AUsXguGTkOMjUG8fMYqt5kuEeTxe8iB4M0BP3NirOw/sXFFVsLf3Q0lXbYsLFpGT wonIEj5o7dDtmoL3PXQtqP8MgbGHq8yX/ZTSOc28Lb+zAF5e9BUS/sOTWYHe+k4r 7ydIl0PszptuLaLZYvei76lK5JOH0fFhIaG2E9l/hKcwGs3BP2TfmA4atUMNTBbV 15CjB+owsWDcEvdiGmbAbdOIgkpggoLaoeZFQaoq/whR86LWd+0l0uH1iIvftpjt K0byMQs9va/dgCmkxbUtFCySQOppUIt7dHnoqiBPwwmweR91IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMS1EScm8U1mDXUE7c5EU4Bf2RhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvMTJhOGMwMjgtMTk4YS0z YTUxLWJlZWUtMWRhODk0NTA4MGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwKGeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5sX67jBNb/2DsG8Af/IzBlrwaLdjv6pwtStaEBtr/naykCDvF1O+CU Eo/vu1KUdQktf8DqcWG80QOOY5+4++b0asvX+qk3pnvL8/BkeBI2WpZB5CuXphyS ujmMDzy2bW+2mcsaLHIcTci2hwIVtMMGpOwi77DW1zkA5zJhKB/XHx/phDvsp828 E5jvrgPGRMfXrK4dA0ElyQUJD7pvHKONnt4SXufaNQ4I0AU6Q5TZEi+1Og6vQF4T DZuYoOnrrnHRsbWFW078mSoqktHRlJyvyDkvS3A5NHaFZ28wMcOLpJx3cZR5xJPR zn7RyF7orwo7ZWjiWHbmLcHgkrjxNSU= -----END CERTIFICATE-----Generated at Sun Sep 27 05:37:58 2026 by rpki-client