$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/f8aa35bb-cf9d-34a9-8c94-31f612698d12.roa File: f8aa35bb-cf9d-34a9-8c94-31f612698d12.roa (raw, json) Hash identifier: QpvKdnKQ5AiwjkIHjNVKc9rPr/AlDMK3EltLyzQlbMc= Subject key identifier: 24:0E:74:58:2F:81:F4:11:83:F6:4A:81:7F:04:FB:D3:51:4E:3A:A8 Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584D40CA4EAAA8022F103AD54000 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/f8aa35bb-cf9d-34a9-8c94-31f612698d12.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 16509 IP address blocks: 192.161.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:4e:aa:a8:02:2f:10:3a:d5:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=2c0be4a9-dc07-4b8f-bc40-fdf883bc6b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:86:03:75:15:a0:bc:75:a9:7b:d8:25:d3: 80:ed:3f:7c:09:0e:c4:2a:2b:02:24:8d:93:f5:8f: 03:31:7f:fa:70:7e:80:93:19:da:e0:77:29:38:9a: 25:15:3f:93:5e:97:62:0a:7f:8c:cb:df:00:2c:15: fc:e6:ff:42:84:2d:fd:7c:ae:ed:09:9e:43:e7:cc: dc:46:90:d2:96:5c:a3:bd:36:0c:c4:e2:50:cf:21: 43:d8:9d:c9:d4:05:85:c3:7d:a4:5c:6f:07:b8:fa: 9e:1d:12:37:3a:f2:94:96:53:fe:fe:e4:3f:05:d6: 68:c2:cb:49:48:84:a2:07:bc:32:84:cb:64:0e:2f: 53:96:d7:1e:ed:a7:dc:12:3f:23:cc:ee:1b:47:d0: 41:f2:b3:ca:87:fc:90:d4:bf:1e:a5:b6:7d:b5:a1: 0e:08:e8:79:4b:2e:2a:4d:2c:7a:b0:e9:b4:64:1c: e3:f0:82:5d:14:aa:aa:63:4d:e1:8e:e7:01:6a:af: a0:90:32:21:0a:30:75:49:61:5f:3b:96:7c:ae:08: 9d:22:e2:c6:52:72:49:8b:cc:c9:50:b8:42:7f:a8: ee:6b:3a:65:d2:2e:ce:7d:ad:12:dd:43:9a:59:1e: 8c:a1:c3:68:88:45:e0:85:b8:94:d6:00:af:59:ab: f4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0E:74:58:2F:81:F4:11:83:F6:4A:81:7F:04:FB:D3:51:4E:3A:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/f8aa35bb-cf9d-34a9-8c94-31f612698d12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 192.161.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d2:75:b0:ac:0a:37:7e:e0:b8:15:60:88:7c:42:3f:eb:b6: 53:e0:e0:9b:11:47:ad:4a:35:8b:09:df:15:32:2b:f5:8e:27: f0:63:95:3e:e2:41:be:18:d5:1d:31:b5:fd:f1:cc:6d:5d:42: a5:4f:e6:d1:5f:b4:f1:74:f5:a4:35:8e:ab:26:a2:4c:5b:90: bd:1b:40:c6:c3:6d:55:95:b0:de:b8:f7:c4:a2:6e:d3:9e:9a: 2b:17:d9:d2:44:16:76:a8:eb:ce:59:4f:5d:b3:14:0f:a9:78: 5d:99:da:6d:e4:e8:b5:1d:e3:24:de:1c:0c:2f:6f:5a:d2:d3: 4e:f1:a4:00:e8:ec:d3:68:0d:21:67:73:93:c0:12:59:85:8e: 00:f4:42:05:9c:fe:df:59:97:b5:75:69:b4:bd:cc:f4:7f:8a: 26:3c:b0:0f:2f:28:9f:ce:74:0e:d9:73:49:e3:95:3e:c1:37: a2:b5:2e:06:2c:b5:cb:f5:2e:9d:37:f9:06:a0:c7:67:00:fa: 7e:d2:f3:12:b6:3f:41:17:34:af:7c:b6:10:da:8e:a4:e1:de: 27:4c:59:05:22:fb:2b:70:d9:aa:83:a9:33:bf:3b:0d:77:42: ac:2d:8d:07:73:38:78:84:39:5b:37:0c:6c:70:98:ac:f4:74: b4:27:a0:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayk6qqAIvEDrVQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MmMwYmU0YTktZGMwNy00YjhmLWJjNDAtZmRmODgzYmM2YjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAGGA3UVoLx1qXvYJdOA7T98CQ7EKisCJI2T 9Y8DMX/6cH6Akxna4HcpOJolFT+TXpdiCn+My98ALBX85v9ChC39fK7tCZ5D58zc RpDSllyjvTYMxOJQzyFD2J3J1AWFw32kXG8HuPqeHRI3OvKUllP+/uQ/BdZowstJ SISiB7wyhMtkDi9Tltce7afcEj8jzO4bR9BB8rPKh/yQ1L8epbZ9taEOCOh5Sy4q TSx6sOm0ZBzj8IJdFKqqY03hjucBaq+gkDIhCjB1SWFfO5Z8rgidIuLGUnJJi8zJ ULhCf6juazpl0i7Ofa0S3UOaWR6MocNoiEXghbiU1gCvWav0qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQOdFgvgfQRg/ZKgX8E+9NRTjqoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvZjhhYTM1YmItY2Y5ZC0z NGE5LThjOTQtMzFmNjEyNjk4ZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrSdbCsCjd+4LgVYIh8Qj/rtlPg4JsRR61KNYsJ3xUyK/WOJ/BjlT7i Qb4Y1R0xtf3xzG1dQqVP5tFftPF09aQ1jqsmokxbkL0bQMbDbVWVsN6498SibtOe misX2dJEFnao685ZT12zFA+peF2Z2m3k6LUd4yTeHAwvb1rS007xpADo7NNoDSFn c5PAElmFjgD0QgWc/t9Zl7V1abS9zPR/iiY8sA8vKJ/OdA7Zc0njlT7BN6K1LgYs tcv1Lp03+Qagx2cA+n7S8xK2P0EXNK98thDajqTh3idMWQUi+ytw2aqDqTO/Ow13 QqwtjQdzOHiEOVs3DGxwmKz0dLQnoHM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:51:16 2026 by rpki-client