$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa File: cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa (raw, json) Hash identifier: 1ftYFtbsQ6klokMkaCZ0M7Znw1mhn1mWJ0UwFk+sSjU= Subject key identifier: AE:B8:8F:11:12:1A:BD:AB:6A:41:25:57:88:33:41:97:7A:34:E3:22 Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584D60E4FA1D8F7646FF8B8D2240 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 14618 IP address blocks: 192.161.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:fa:1d:8f:76:46:ff:8b:8d:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=88b06ef2-2afd-4766-b2c0-6db338d4925b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:10:da:1c:fb:e7:38:dd:57:3f:3f:85:b5: 32:24:f7:0f:ba:4b:29:00:bb:3c:7c:a9:6c:df:89: 85:b3:2b:51:c4:25:0e:6a:1b:9b:77:88:8d:de:14: 10:31:40:d1:05:87:07:96:35:0d:2c:21:c2:a4:ee: d0:8e:2e:f9:41:e2:d5:98:32:b4:ae:4e:cf:3c:46: 58:54:9a:3a:e1:af:c7:a0:06:79:e1:b8:55:4b:12: 24:4d:7c:11:53:ee:87:10:d5:af:73:f7:fe:56:f8: 67:cf:fe:8e:a6:47:52:dd:8a:77:31:7b:f5:56:34: 0a:94:96:5f:08:81:08:cf:1b:e7:b1:d7:71:bf:27: 2e:4a:f6:42:04:9d:2c:30:99:f8:ec:c3:0b:93:e6: a3:50:54:51:28:12:f8:c9:46:a7:17:3a:46:6d:a4: f2:2d:64:e3:7f:39:e7:2e:ef:d9:7e:b5:1d:e5:86: a3:10:ec:6e:08:9e:d3:37:55:2c:49:85:00:3f:a0: 40:bd:1c:2a:7b:c9:ec:10:20:5f:32:e5:a1:4b:3c: 33:33:f5:4f:0c:b2:d8:be:5d:b1:b1:45:81:3b:4a: 98:54:d4:85:73:05:70:5b:b1:a4:60:1f:6e:be:42: 4b:b4:25:20:e2:ca:68:39:df:a8:9e:52:d5:4f:4c: 1a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B8:8F:11:12:1A:BD:AB:6A:41:25:57:88:33:41:97:7A:34:E3:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 192.161.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:e6:e2:23:4d:7e:69:04:32:43:a5:b6:f2:f4:32:2f:f3:50: 0f:5f:b7:eb:18:3c:4e:b8:08:52:c2:6c:4f:46:a3:f4:02:db: 39:29:2f:9d:a6:8c:27:2d:2d:35:db:0a:54:99:c3:2c:e5:69: f1:3a:47:91:48:3d:6b:d7:1c:c5:87:ba:30:06:4f:58:e3:23: 2a:2d:c3:ea:a0:c9:aa:14:1c:ec:4f:a7:f8:c9:e6:eb:0e:96: 00:5a:ec:bc:f5:1b:1d:04:11:aa:70:6d:76:a5:c8:81:ca:e4: de:da:43:59:56:6a:79:4f:04:59:cc:8e:33:4f:be:ea:36:d8: 51:23:97:72:4a:e1:52:cb:7b:3e:8e:7d:62:d2:69:a4:dd:d8: aa:3b:10:eb:13:6c:6b:7a:b8:ed:61:7b:33:b4:21:9a:cf:ab: 7a:79:91:3a:76:31:58:cd:6a:10:e7:c1:44:ab:66:7f:bd:56: 55:fb:a8:b8:f6:ec:c8:40:be:79:85:61:c8:a0:2f:50:43:ae: 63:27:12:78:85:6b:9f:74:54:41:62:69:89:88:8f:1f:59:1a: 16:d9:72:69:10:37:3d:be:6b:74:c3:16:3e:ea:cb:f1:ba:b0: 4a:dd:71:f0:19:92:04:0c:dd:be:b8:29:87:4e:b6:44:b8:f4: 60:89:c7:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Podj3ZG/4uNIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk ODhiMDZlZjItMmFmZC00NzY2LWIyYzAtNmRiMzM4ZDQ5MjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZcQ2hz75zjdVz8/hbUyJPcPukspALs8fKls 34mFsytRxCUOahubd4iN3hQQMUDRBYcHljUNLCHCpO7Qji75QeLVmDK0rk7PPEZY VJo64a/HoAZ54bhVSxIkTXwRU+6HENWvc/f+Vvhnz/6OpkdS3Yp3MXv1VjQKlJZf CIEIzxvnsddxvycuSvZCBJ0sMJn47MMLk+ajUFRRKBL4yUanFzpGbaTyLWTjfznn Lu/ZfrUd5YajEOxuCJ7TN1UsSYUAP6BAvRwqe8nsECBfMuWhSzwzM/VPDLLYvl2x sUWBO0qYVNSFcwVwW7GkYB9uvkJLtCUg4spoOd+onlLVT0waPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK64jxESGr2rakElV4gzQZd6NOMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvY2QwOWIwNzYtZjBhNy0z OWRhLTkyZGItMWVjYTdmNzRlM2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXm4iNNfmkEMkOltvL0Mi/zUA9ft+sYPE64CFLCbE9Go/QC2zkpL52m jCctLTXbClSZwyzlafE6R5FIPWvXHMWHujAGT1jjIyotw+qgyaoUHOxPp/jJ5usO lgBa7Lz1Gx0EEapwbXalyIHK5N7aQ1lWanlPBFnMjjNPvuo22FEjl3JK4VLLez6O fWLSaaTd2Ko7EOsTbGt6uO1hezO0IZrPq3p5kTp2MVjNahDnwUSrZn+9VlX7qLj2 7MhAvnmFYcigL1BDrmMnEniFa590VEFiaYmIjx9ZGhbZcmkQNz2+a3TDFj7qy/G6 sErdcfAZkgQM3b64KYdOtkS49GCJxxQ= -----END CERTIFICATE-----Generated at Fri Apr 17 16:43:13 2026 by rpki-client