$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/366115b5-c36e-3002-98be-5414f7a238fe.roa File: 366115b5-c36e-3002-98be-5414f7a238fe.roa (raw, json) Hash identifier: opCrfL/7Ntc7bJHSUHloooRu+EsIbE/vTYXEoLrzKCo= Subject key identifier: C7:3A:45:4A:11:03:D9:1D:D2:23:FA:68:71:22:8A:CA:9B:88:3B:A4 Certificate issuer: /CN=307848a1-01e5-4124-ac5f-8d98a3abaa0d Certificate serial: 010D0C9F4328584D746FC2BC3D4A658B849CD840 Authority key identifier: 56:61:05:E5:78:59:E0:0E:D5:6A:AE:0A:9C:D5:93:9D:BA:35:C8:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/366115b5-c36e-3002-98be-5414f7a238fe.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 14618 IP address blocks: 167.94.127.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:c2:bc:3d:4a:65:8b:84:9c:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307848a1-01e5-4124-ac5f-8d98a3abaa0d Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=afea7803-43e9-4769-bf3d-f0ee8546fbe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:86:36:1a:e8:05:c2:fa:50:04:77:12:60:8d: 44:82:f9:a5:f7:e3:d3:07:d0:89:bb:7a:49:f0:d4: d1:aa:f3:15:48:24:ff:e2:f8:42:5a:1d:e9:64:c8: 12:88:7f:cd:00:c4:b4:0f:6b:c0:a1:0d:12:46:ca: 75:c0:c7:c5:81:77:ec:77:b9:fa:48:17:5a:d7:04: 35:50:56:7c:59:cc:48:9b:60:db:03:5c:44:3f:07: 8c:2a:eb:88:85:f2:46:ef:32:0b:73:d9:5c:03:32: 15:b9:ee:5e:64:28:0e:94:68:d7:b5:56:63:2b:f4: a0:b5:37:98:8b:98:11:6e:db:57:a2:74:e0:59:54: 02:d6:38:b5:59:b7:c4:b4:a9:f1:9d:07:fe:e6:6c: 2e:8f:d7:b2:79:d5:ff:cc:85:20:90:a8:2f:8a:26: 91:f2:fb:0d:1f:e6:bc:b1:7c:cf:92:79:b3:a6:56: b0:b6:5c:a0:e6:8e:ae:91:5b:8a:b2:10:89:a7:b6: 50:44:9e:2e:8f:7d:3c:13:ad:7a:ec:dd:de:db:6f: 5d:64:12:e4:9a:52:4b:b5:59:49:71:e0:83:c2:51: 50:c7:e8:31:5f:77:20:fd:4d:18:69:6c:4c:8f:ac: 7c:e1:9b:bc:ea:97:e1:1d:b6:e5:d3:18:86:ea:e5: 83:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3A:45:4A:11:03:D9:1D:D2:23:FA:68:71:22:8A:CA:9B:88:3B:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/366115b5-c36e-3002-98be-5414f7a238fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.crl X509v3 Authority Key Identifier: keyid:56:61:05:E5:78:59:E0:0E:D5:6A:AE:0A:9C:D5:93:9D:BA:35:C8:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer sbgp-ipAddrBlock: critical IPv4: 167.94.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:a0:00:89:f4:5d:74:4a:9f:64:f3:d9:14:ca:9d:97:28:53: 9d:c5:dd:07:9b:5f:d1:3e:e9:f9:f3:24:12:08:67:34:18:0a: f8:d4:1d:a9:d4:3d:b6:7d:7b:c7:39:f2:b2:51:cd:c4:23:df: 07:e7:cf:6b:8f:a6:42:bf:ef:78:fb:8e:2a:27:23:e9:73:39: e1:6f:5e:0c:a0:70:be:4e:59:bf:cc:89:2c:ba:a5:95:9f:d3: 2d:48:25:f1:2c:37:6d:d5:ef:0f:07:1c:22:61:f5:bd:e5:60: d5:11:ab:c0:b4:90:35:65:28:4d:9a:7c:66:50:db:79:67:b9: 9e:9e:56:3d:d6:77:83:ea:a0:c6:a0:de:d7:b0:81:a5:07:fc: e3:4d:3c:92:02:45:a7:fc:75:a0:49:0d:71:1f:72:37:ec:00: 5c:44:e2:17:a6:8d:15:ab:67:4d:8b:9a:fb:25:32:6f:70:aa: 43:95:9e:d2:74:39:ba:25:3d:48:21:22:10:28:99:10:30:6f: 23:44:62:d8:ab:45:8d:e3:f6:d9:97:f5:6a:c5:fe:3f:ba:73: 9e:12:0b:28:10:d0:35:14:9f:c5:a6:98:ed:fe:0f:44:7c:7c: 3b:ed:1b:90:14:e0:80:91:6d:d9:35:fc:4c:99:9b:5d:6b:05: 15:32:3c:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8K8PUpli4Sc2EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzA3ODQ4YTEtMDFlNS00MTI0LWFjNWYtOGQ5OGEzYWJh YTBkMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk YWZlYTc4MDMtNDNlOS00NzY5LWJmM2QtZjBlZTg1NDZmYmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIY2GugFwvpQBHcSYI1Egvml9+PTB9CJu3pJ 8NTRqvMVSCT/4vhCWh3pZMgSiH/NAMS0D2vAoQ0SRsp1wMfFgXfsd7n6SBda1wQ1 UFZ8WcxIm2DbA1xEPweMKuuIhfJG7zILc9lcAzIVue5eZCgOlGjXtVZjK/SgtTeY i5gRbttXonTgWVQC1ji1WbfEtKnxnQf+5mwuj9eyedX/zIUgkKgviiaR8vsNH+a8 sXzPknmzplawtlyg5o6ukVuKshCJp7ZQRJ4uj308E6167N3e229dZBLkmlJLtVlJ ceCDwlFQx+gxX3cg/U0YaWxMj6x84Zu86pfhHbbl0xiG6uWD8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMc6RUoRA9kd0iP6aHEiisqbiDukMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMDc4 NDhhMS0wMWU1LTQxMjQtYWM1Zi04ZDk4YTNhYmFhMGQvMzY2MTE1YjUtYzM2ZS0z MDAyLTk4YmUtNTQxNGY3YTIzOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzA3ODQ4YTEtMDFlNS00MTI0LWFj NWYtOGQ5OGEzYWJhYTBkLzMwNzg0OGExLTAxZTUtNDEyNC1hYzVmLThkOThhM2Fi YWEwZC5jcmwwHwYDVR0jBBgwFoAUVmEF5XhZ4A7Vaq4KnNWTnbo1yEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMDc4NDhhMS0wMWU1LTQxMjQtYWM1Zi04ZDk4 YTNhYmFhMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp15/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCgAIn0XXRKn2Tz2RTKnZcoU53F3QebX9E+6fnzJBIIZzQYCvjUHanU PbZ9e8c58rJRzcQj3wfnz2uPpkK/73j7jionI+lzOeFvXgygcL5OWb/MiSy6pZWf 0y1IJfEsN23V7w8HHCJh9b3lYNURq8C0kDVlKE2afGZQ23lnuZ6eVj3Wd4PqoMag 3tewgaUH/ONNPJICRaf8daBJDXEfcjfsAFxE4hemjRWrZ02LmvslMm9wqkOVntJ0 ObolPUghIhAomRAwbyNEYtirRY3j9tmX9WrF/j+6c54SCygQ0DUUn8WmmO3+D0R8 fDvtG5AU4ICRbdk1/EyZm11rBRUyPEM= -----END CERTIFICATE-----Generated at Fri Apr 17 17:23:56 2026 by rpki-client