$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/89e25532-51ae-3f0c-a4c9-b31181f7c0dc.roa File: 89e25532-51ae-3f0c-a4c9-b31181f7c0dc.roa (raw, json) Hash identifier: twH+Lz/tHnUsMzRRwWXrMXPcrq96W9e7KnyVH1kI0ds= Subject key identifier: 99:B0:82:AD:CD:75:2A:90:A3:BF:DD:B6:C1:5D:33:13:0B:AA:23:43 Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584CF85247F73054121183E93E00 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/89e25532-51ae-3f0c-a4c9-b31181f7c0dc.roa Signing time: Tue 24 Feb 2026 14:00:41 +0000 ROA not before: Tue 24 Feb 2026 14:00:41 +0000 ROA not after: Mon 25 May 2026 13:00:41 +0000 asID: 14618 IP address blocks: 192.161.158.0/24 maxlen: 24 192.161.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:52:47:f7:30:54:12:11:83:e9:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Feb 24 14:00:41 2026 GMT Not After : May 25 13:00:41 2026 GMT Subject: CN=77f1ee09-0231-40af-9fd2-9dfe806a9648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:da:bb:07:d4:58:d5:40:f7:b7:65:32:24:25: f3:1a:14:d1:8d:bc:df:37:17:a8:b6:9e:89:3b:5f: 8f:f0:1a:76:ea:69:bf:72:fe:71:2f:de:37:fc:57: b6:35:a1:9f:99:4d:56:d6:d6:ef:35:54:97:49:97: 1b:a3:cb:de:d9:79:48:70:55:5a:20:04:17:34:6b: d4:c7:0e:77:e7:a0:ee:0f:0f:27:85:36:42:e4:df: 77:48:ad:4b:d0:19:a5:8e:69:a7:96:f4:ce:e4:13: 1e:7a:5f:99:d1:fe:81:e6:59:34:65:de:69:2b:1d: 34:5f:46:fa:79:f5:44:1f:61:03:b4:9e:dc:89:a2: 8a:1e:29:0a:08:e5:3d:ee:61:ce:5b:b7:fe:f0:4e: 29:26:c0:57:62:0d:b7:cc:a4:d1:5b:cc:b8:52:ed: 7d:ca:cc:46:b7:de:a7:72:c4:8a:7f:6f:f9:a3:e7: a8:bd:f4:c3:ca:1b:da:bd:3c:ac:12:d2:23:5c:fd: e1:8b:53:74:7c:31:df:c1:db:25:0e:73:08:42:de: 42:53:ae:af:e6:c3:a4:d7:77:12:8f:1b:86:e6:13: ca:91:57:66:4f:90:a2:54:a0:92:19:db:22:8e:0c: 5d:ba:67:ba:77:7d:2b:5e:4d:33:57:5e:66:50:b5: 8b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B0:82:AD:CD:75:2A:90:A3:BF:DD:B6:C1:5D:33:13:0B:AA:23:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/89e25532-51ae-3f0c-a4c9-b31181f7c0dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 192.161.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ab:41:75:09:0b:01:2d:8b:0c:68:3a:59:45:d5:19:87:16: 57:aa:36:cb:aa:6f:78:eb:79:fb:be:67:00:b1:62:4d:d6:c0: 19:f4:79:7c:14:ae:1d:29:00:cb:d8:6d:8f:c3:4d:bc:a2:57: 7a:cf:97:c4:1b:28:91:d1:16:7d:a6:06:0e:96:09:b1:69:16: bd:a5:e4:9b:1d:0a:c2:2e:a9:bc:4a:25:ad:e1:03:bd:f0:bf: f6:e3:e6:cf:cc:27:d1:5d:1c:55:94:27:01:68:8e:f8:f4:66: 38:ff:f2:61:45:68:f1:d1:e0:17:e8:c4:6c:79:21:c4:63:92: ba:52:bb:ef:ef:67:df:f5:11:66:00:2e:a5:e4:0b:65:a6:89: bd:45:b9:52:69:d9:d8:b0:96:f5:12:8a:67:fb:4c:bd:13:6d: 7b:27:23:91:be:8a:7b:72:48:18:07:02:b7:54:81:f5:07:9e: 3a:f2:0d:e2:aa:36:7b:11:24:00:c9:e4:62:bf:e5:a3:9d:68: 09:25:89:51:41:2d:12:44:f4:d8:48:a3:00:95:42:2c:48:2d: 22:e8:45:d9:9d:b4:63:34:a3:bc:77:75:b9:c6:df:54:02:1b: c2:80:3b:2f:d2:b8:a1:68:a4:0b:f7:97:90:43:6a:2f:fc:8e: ee:1e:33:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4Ukf3MFQSEYPpPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk NzdmMWVlMDktMDIzMS00MGFmLTlmZDItOWRmZTgwNmE5NjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNq7B9RY1UD3t2UyJCXzGhTRjbzfNxeotp6J O1+P8Bp26mm/cv5xL943/Fe2NaGfmU1W1tbvNVSXSZcbo8ve2XlIcFVaIAQXNGvU xw5356DuDw8nhTZC5N93SK1L0BmljmmnlvTO5BMeel+Z0f6B5lk0Zd5pKx00X0b6 efVEH2EDtJ7ciaKKHikKCOU97mHOW7f+8E4pJsBXYg23zKTRW8y4Uu19ysxGt96n csSKf2/5o+eovfTDyhvavTysEtIjXP3hi1N0fDHfwdslDnMIQt5CU66v5sOk13cS jxuG5hPKkVdmT5CiVKCSGdsijgxdume6d30rXk0zV15mULWLKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmwgq3NdSqQo7/dtsFdMxMLqiNDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvODllMjU1MzItNTFhZS0z ZjBjLWE0YzktYjMxMTgxZjdjMGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwKGeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCrQXUJCwEtiwxoOllF1RmHFleqNsuqb3jrefu+ZwCxYk3WwBn0eXwU rh0pAMvYbY/DTbyiV3rPl8QbKJHRFn2mBg6WCbFpFr2l5JsdCsIuqbxKJa3hA73w v/bj5s/MJ9FdHFWUJwFojvj0Zjj/8mFFaPHR4BfoxGx5IcRjkrpSu+/vZ9/1EWYA LqXkC2Wmib1FuVJp2diwlvUSimf7TL0TbXsnI5G+intySBgHArdUgfUHnjryDeKq NnsRJADJ5GK/5aOdaAkliVFBLRJE9NhIowCVQixILSLoRdmdtGM0o7x3dbnG31QC G8KAOy/SuKFopAv3l5BDai/8ju4eMzM= -----END CERTIFICATE-----Generated at Mon Mar 2 04:38:23 2026 by rpki-client