$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa File: acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa (raw, json) Hash identifier: yTnSAddRNI9yiLB4G+7IPZc+5Pz849kmRB/GSfhQ7AM= Subject key identifier: EE:D4:44:B7:6F:FB:B3:B9:69:E5:9A:D2:F0:86:C5:8E:C8:A0:5E:CD Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584D40CA50576E4C4E8654513471 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 192.161.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:50:57:6e:4c:4e:86:54:51:34:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=ed704b7b-2533-4237-95f9-35abf5e8d329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cf:70:b5:bb:24:78:0b:3a:53:d7:b4:6e:92: dd:c3:66:6d:8f:11:ef:5e:17:33:97:f4:6d:51:4b: 2b:61:ed:8a:aa:66:72:dd:4f:1d:48:35:1d:10:5a: 14:3e:85:a7:0d:b9:b3:8b:91:42:ce:11:b1:51:fd: 83:0b:a9:f5:be:7a:8d:ed:66:79:b0:27:e1:8a:46: 8c:d3:3c:d5:a4:d3:60:d6:6a:28:a8:12:bc:dc:dd: 38:69:cb:dd:ba:0a:bd:c9:89:7d:ae:6c:d3:44:d1: ed:95:6b:96:a5:67:46:8a:74:47:be:09:3d:a3:aa: 4f:b3:01:e1:f9:47:93:5a:7c:c0:17:95:e9:81:5a: da:42:cd:9e:90:d3:81:f0:1c:6d:77:99:dc:24:50: c9:1c:f7:38:a3:62:0f:2b:e8:62:42:47:99:18:9b: 9e:a2:2b:36:b2:bf:f0:98:e8:ee:35:e2:55:7b:26: 68:ef:13:63:81:84:4c:00:77:c1:1b:61:b2:62:28: 99:80:e6:5e:bf:bd:26:cf:a8:0e:81:13:e4:fc:ea: 3c:e0:b3:d3:8a:f6:9c:7b:29:27:68:b0:f6:39:64: 25:be:c3:f9:00:c9:dc:f4:dd:45:75:58:5e:7e:c8: 8a:34:45:a9:5c:85:cf:e3:1e:c2:8d:56:a7:ca:64: 16:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D4:44:B7:6F:FB:B3:B9:69:E5:9A:D2:F0:86:C5:8E:C8:A0:5E:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/acec6a28-33d3-32a8-aa3a-9fe216c09f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 192.161.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:d2:84:40:ed:3d:ad:0c:04:fe:e8:95:63:47:44:46:3e:f5: e5:d2:98:37:c5:a0:6a:9c:42:49:e2:cb:ef:0b:d7:98:9e:62: 08:f9:a9:0c:9a:c1:6d:f9:12:52:65:f2:d9:19:b4:f4:0b:b9: 1b:02:14:ee:03:e0:ec:9a:78:fa:d0:22:6b:05:fd:fb:f9:5f: dc:9d:9e:84:c0:a3:3d:b0:1d:2f:0d:0d:53:ec:a4:5b:d6:5c: 80:a6:7f:3f:ba:a7:f9:8a:6b:6d:90:08:c2:fc:69:00:43:97: 2b:80:4f:bf:70:7c:10:76:5f:7f:74:66:cb:13:aa:10:3f:84: d5:47:1b:ca:22:80:1b:60:0e:f2:96:05:6e:f0:9a:90:c3:81: 68:c4:cf:14:6c:e3:fd:9d:29:3c:17:19:b5:b0:9f:02:52:0b: fd:34:5f:35:a1:4a:b2:e9:86:9c:04:01:ec:12:85:48:45:1c: b5:da:cc:ec:1f:47:80:ea:9b:fd:83:6b:e3:4d:34:44:d5:7b: 98:16:ec:18:a3:40:83:da:e0:54:45:41:67:51:38:d0:55:88: 6a:03:23:f3:00:10:b1:49:41:88:a0:5d:18:6e:3d:c1:9b:0f: d4:8d:ac:7e:ae:53:9e:6e:b1:8f:66:eb:b2:60:98:9b:f1:fd: b2:66:d0:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AylBXbkxOhlRRNHEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZWQ3MDRiN2ItMjUzMy00MjM3LTk1ZjktMzVhYmY1ZThkMzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM9wtbskeAs6U9e0bpLdw2ZtjxHvXhczl/Rt UUsrYe2KqmZy3U8dSDUdEFoUPoWnDbmzi5FCzhGxUf2DC6n1vnqN7WZ5sCfhikaM 0zzVpNNg1mooqBK83N04acvdugq9yYl9rmzTRNHtlWuWpWdGinRHvgk9o6pPswHh +UeTWnzAF5XpgVraQs2ekNOB8Bxtd5ncJFDJHPc4o2IPK+hiQkeZGJueois2sr/w mOjuNeJVeyZo7xNjgYRMAHfBG2GyYiiZgOZev70mz6gOgRPk/Oo84LPTivaceykn aLD2OWQlvsP5AMnc9N1FdVhefsiKNEWpXIXP4x7CjVanymQWPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7URLdv+7O5aeWa0vCGxY7IoF7NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvYWNlYzZhMjgtMzNkMy0z MmE4LWFhM2EtOWZlMjE2YzA5ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzShEDtPa0MBP7olWNHREY+9eXSmDfFoGqcQkniy+8L15ieYgj5qQya wW35ElJl8tkZtPQLuRsCFO4D4OyaePrQImsF/fv5X9ydnoTAoz2wHS8NDVPspFvW XICmfz+6p/mKa22QCML8aQBDlyuAT79wfBB2X390ZssTqhA/hNVHG8oigBtgDvKW BW7wmpDDgWjEzxRs4/2dKTwXGbWwnwJSC/00XzWhSrLphpwEAewShUhFHLXazOwf R4Dqm/2Da+NNNETVe5gW7BijQIPa4FRFQWdRONBViGoDI/MAELFJQYigXRhuPcGb D9SNrH6uU55usY9m67JgmJvx/bJm0Is= -----END CERTIFICATE-----Generated at Thu Mar 26 03:46:08 2026 by rpki-client