$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa File: acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa (raw, json) Hash identifier: IxHmM6hXlKqO8Gxxc06AmK46NnxAHg+VpOvtgIpftGc= Subject key identifier: 69:32:08:3C:03:42:4C:53:68:34:07:D3:A1:64:F1:DC:77:0D:AC:08 Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584E210EF606380A9F43B4024380 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa Signing time: Wed 10 Jun 2026 21:00:11 +0000 ROA not before: Wed 10 Jun 2026 21:00:11 +0000 ROA not after: Tue 08 Sep 2026 21:00:11 +0000 asID: 14618 IP address blocks: 192.161.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:0e:f6:06:38:0a:9f:43:b4:02:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Jun 10 21:00:11 2026 GMT Not After : Sep 8 21:00:11 2026 GMT Subject: CN=42b6d684-4a7e-4400-ba47-b92112654c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a7:1b:7e:b1:16:03:f5:0a:18:7c:c3:66:3f: e5:7f:f1:7d:35:4d:c9:33:97:8a:94:b6:a3:4a:2c: f5:62:2f:62:25:33:70:d1:27:3a:d7:81:d4:93:55: e6:d9:63:d3:1b:33:55:c6:0d:a8:13:75:de:33:b9: cf:34:2c:d2:c6:27:bd:82:1b:03:ce:bb:dc:39:1a: 1b:a4:85:29:4e:00:8c:06:d6:4a:dd:ff:4b:36:d2: 83:08:63:f0:e0:1e:7d:c7:c2:32:1d:3c:c5:0b:1e: 70:ec:15:1b:7c:93:7b:2b:b8:b9:83:85:22:9f:f9: da:c6:18:2a:07:96:30:3d:36:1b:ba:f3:13:20:98: d5:b4:cc:b4:99:f8:30:cd:d1:90:d3:33:60:ac:88: 08:32:40:50:c0:20:c9:99:73:78:7d:1a:27:fa:08: f9:84:c9:ca:e2:b9:76:b1:52:eb:01:dd:5b:05:3d: 0e:aa:a4:83:5f:32:da:b2:2d:09:06:dc:3e:cb:5c: bf:20:11:76:d0:16:b0:c5:cc:79:95:01:74:e9:d9: bc:81:3e:7f:ce:4f:2e:d2:b9:dd:ef:1c:4b:b3:af: 14:39:f2:31:92:1a:ce:1d:b0:da:9b:1b:d9:23:41: eb:d1:83:36:bf:83:6a:b9:7c:83:66:98:03:af:a4: 42:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:32:08:3C:03:42:4C:53:68:34:07:D3:A1:64:F1:DC:77:0D:AC:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 192.161.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e8:30:e8:67:3b:bd:bb:a1:d7:0e:b5:6a:6b:e5:2e:32:03: 92:34:50:29:2f:09:74:ac:ae:60:99:51:d0:d1:03:9f:da:ef: 87:2e:a8:e9:18:09:63:0e:a8:8d:0b:64:0e:9f:b0:5b:6a:b1: e3:b6:79:e0:2c:30:69:62:24:90:8c:fd:40:b9:aa:d2:93:96: 01:26:ed:39:64:f4:6c:f9:17:82:2e:98:06:ea:c3:3a:6d:d1: 43:22:cc:15:68:08:44:04:17:73:29:40:1d:f4:3f:a2:b3:fd: d7:db:01:f3:b8:5a:f7:f5:8b:40:20:43:27:5a:e4:e6:fb:e4: ac:1c:11:6d:23:f8:fa:07:b4:0d:b9:43:d7:11:a0:72:0d:5c: 06:a9:5c:6a:39:5f:9c:2d:70:28:34:1d:1a:bb:a4:86:f7:ab: 99:0d:46:16:89:13:58:90:07:93:6a:1a:b6:21:3d:fb:cc:d6: 2a:34:d8:48:65:46:ea:19:91:2d:85:fd:f2:8a:84:b6:68:04: 28:bc:0b:de:0d:2e:f7:c4:0e:8e:70:98:e1:ab:62:f9:2a:fc: 65:cf:39:e4:93:06:12:c7:df:49:85:be:dc:0a:7b:a8:59:70: 65:03:74:2c:7c:86:dc:c9:54:59:38:08:49:e1:90:3b:1f:b1: 52:6e:9b:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hDvYGOAqfQ7QCQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk NDJiNmQ2ODQtNGE3ZS00NDAwLWJhNDctYjkyMTEyNjU0YzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2acbfrEWA/UKGHzDZj/lf/F9NU3JM5eKlLaj Siz1Yi9iJTNw0Sc614HUk1Xm2WPTGzNVxg2oE3XeM7nPNCzSxie9ghsDzrvcORob pIUpTgCMBtZK3f9LNtKDCGPw4B59x8IyHTzFCx5w7BUbfJN7K7i5g4Uin/naxhgq B5YwPTYbuvMTIJjVtMy0mfgwzdGQ0zNgrIgIMkBQwCDJmXN4fRon+gj5hMnK4rl2 sVLrAd1bBT0OqqSDXzLasi0JBtw+y1y/IBF20Bawxcx5lQF06dm8gT5/zk8u0rnd 7xxLs68UOfIxkhrOHbDamxvZI0Hr0YM2v4NquXyDZpgDr6RCdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkyCDwDQkxTaDQH06Fk8dx3DawIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvYWNlYzZhMjgtMzNkMy0z MmE4LWFhM2EtOWZlMjE2YzA5ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvoMOhnO727odcOtWpr5S4yA5I0UCkvCXSsrmCZUdDRA5/a74cuqOkY CWMOqI0LZA6fsFtqseO2eeAsMGliJJCM/UC5qtKTlgEm7Tlk9Gz5F4IumAbqwzpt 0UMizBVoCEQEF3MpQB30P6Kz/dfbAfO4Wvf1i0AgQyda5Ob75KwcEW0j+PoHtA25 Q9cRoHINXAapXGo5X5wtcCg0HRq7pIb3q5kNRhaJE1iQB5NqGrYhPfvM1io02Ehl RuoZkS2F/fKKhLZoBCi8C94NLvfEDo5wmOGrYvkq/GXPOeSTBhLH30mFvtwKe6hZ cGUDdCx8htzJVFk4CEnhkDsfsVJum/Y= -----END CERTIFICATE-----Generated at Sat Jun 13 14:56:10 2026 by rpki-client