$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/62ed57f7-eac6-37f5-b941-0a2bcf1844f0.roa File: 62ed57f7-eac6-37f5-b941-0a2bcf1844f0.roa (raw, json) Hash identifier: 99EMMskCzGDK+IDrR150C7A5TriAX5cVLdpE80Zdd2I= Subject key identifier: A7:DA:51:73:50:CB:A2:C0:35:F9:2F:0F:25:6E:23:43:47:64:96:87 Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584D651514A1D2BAA089A322B400 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/62ed57f7-eac6-37f5-b941-0a2bcf1844f0.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 14618 IP address blocks: 192.161.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:14:a1:d2:ba:a0:89:a3:22:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=01ceda47-0264-43dd-b401-889427a74fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:18:21:46:ea:46:9e:5f:24:4f:de:72:6c:2d: 82:c2:7c:b8:63:0e:f2:6c:7d:fa:aa:4f:3b:54:d3: fd:60:e2:e0:5d:63:c6:13:95:0d:23:d9:f3:fc:44: 49:9d:76:7b:61:a4:81:9b:b0:10:ca:25:3a:f9:1f: 8f:ec:80:96:6b:7d:a5:c4:2d:f8:15:5b:bb:4f:04: 65:ac:a8:9a:95:9e:26:21:09:e0:43:75:35:eb:e4: bd:44:91:bc:10:e4:9b:a0:29:37:05:38:7e:5a:fd: 4c:7b:55:af:a0:f5:f4:55:58:42:3c:45:70:45:df: ef:3c:a7:e2:8c:19:15:81:94:40:ff:5d:02:7f:af: 79:54:78:d6:d1:83:8b:de:fd:9f:f5:dc:47:ad:24: 54:e5:53:2d:86:aa:7b:c6:6d:77:20:18:00:0d:43: 22:77:d4:cf:24:7d:ed:67:f3:d2:8c:7d:87:f8:40: 0c:33:47:ef:cb:8d:cd:74:f3:78:38:34:e2:64:79: ff:16:5f:f1:8c:a3:b4:4c:80:41:39:4e:9b:15:90: 46:67:5d:6c:4f:fb:f2:ce:2f:71:78:c1:74:2e:7a: ec:ce:f1:67:24:f5:1f:d3:3d:85:7b:44:28:8b:c6: b2:46:0b:5f:c6:8f:69:92:2d:82:2f:2a:05:8d:d9: 0a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DA:51:73:50:CB:A2:C0:35:F9:2F:0F:25:6E:23:43:47:64:96:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/62ed57f7-eac6-37f5-b941-0a2bcf1844f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 192.161.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a7:78:7f:22:38:65:b0:cf:31:39:5b:be:70:45:d0:da:b4: d2:10:ea:b0:b5:61:9c:51:9e:28:51:f9:c3:5b:0f:45:8b:7e: 74:9c:04:6f:41:b2:d5:d6:81:10:e8:62:7c:ca:00:60:ac:c3: 3f:41:ca:d2:7b:c5:d7:79:4c:88:56:23:1e:67:8f:5a:0c:dc: 17:c8:21:c4:c9:76:2f:41:8a:85:88:f6:8a:d5:58:79:4e:b4: aa:bb:60:4f:aa:89:4d:39:2d:9f:aa:3a:89:42:b6:b6:27:50: b3:89:83:39:83:3c:82:39:5e:47:20:4c:1f:d4:86:17:0d:94: 69:a1:0d:08:1e:e9:a2:8e:42:aa:9e:2d:4f:c7:a0:4e:cc:2d: 77:ac:8a:09:ba:b3:70:c6:fe:b7:dd:1c:f7:b5:3e:bb:3e:cc: 88:b9:0c:cf:73:ab:de:87:36:53:71:56:77:82:b4:e0:f5:72: 68:67:db:c7:f1:05:45:60:37:f7:95:fd:2f:7d:9d:bf:d2:fa: f9:54:9e:dd:da:27:78:e5:bc:0c:67:4c:1c:30:84:2b:8e:db: c0:aa:4c:3b:fe:97:db:22:58:ad:79:fb:2f:2d:fa:07:9d:a9: 6c:f4:26:e8:16:a7:80:e8:64:b0:8f:12:d0:a6:17:0e:dd:8d: f0:c9:2d:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFRSh0rqgiaMitAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk MDFjZWRhNDctMDI2NC00M2RkLWI0MDEtODg5NDI3YTc0ZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRghRupGnl8kT95ybC2Cwny4Yw7ybH36qk87 VNP9YOLgXWPGE5UNI9nz/ERJnXZ7YaSBm7AQyiU6+R+P7ICWa32lxC34FVu7TwRl rKialZ4mIQngQ3U16+S9RJG8EOSboCk3BTh+Wv1Me1WvoPX0VVhCPEVwRd/vPKfi jBkVgZRA/10Cf695VHjW0YOL3v2f9dxHrSRU5VMthqp7xm13IBgADUMid9TPJH3t Z/PSjH2H+EAMM0fvy43NdPN4ODTiZHn/Fl/xjKO0TIBBOU6bFZBGZ11sT/vyzi9x eMF0LnrszvFnJPUf0z2Fe0Qoi8ayRgtfxo9pki2CLyoFjdkK5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfaUXNQy6LANfkvDyVuI0NHZJaHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvNjJlZDU3ZjctZWFjNi0z N2Y1LWI5NDEtMGEyYmNmMTg0NGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqneH8iOGWwzzE5W75wRdDatNIQ6rC1YZxRnihR+cNbD0WLfnScBG9B stXWgRDoYnzKAGCswz9BytJ7xdd5TIhWIx5nj1oM3BfIIcTJdi9BioWI9orVWHlO tKq7YE+qiU05LZ+qOolCtrYnULOJgzmDPII5XkcgTB/UhhcNlGmhDQge6aKOQqqe LU/HoE7MLXesigm6s3DG/rfdHPe1Prs+zIi5DM9zq96HNlNxVneCtOD1cmhn28fx BUVgN/eV/S99nb/S+vlUnt3aJ3jlvAxnTBwwhCuO28CqTDv+l9siWK15+y8t+ged qWz0JugWp4DoZLCPEtCmFw7djfDJLTE= -----END CERTIFICATE-----Generated at Fri Apr 17 09:54:47 2026 by rpki-client