$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa File: cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa (raw, json) Hash identifier: 9M3NySk+a1Vsi1WFOsNat3nPJkZlGRFMXdMWV+9Eeqk= Subject key identifier: 83:97:86:6E:03:65:EC:D3:E3:B0:08:30:A1:E7:4A:4D:9F:0E:FC:E7 Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584BA0D24DC182B4F38E2CAFAB80 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 192.161.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:4d:c1:82:b4:f3:8e:2c:af:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=306b8fdc-4a00-4dda-9d84-4990076e8853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:86:7c:d6:95:16:23:6a:2d:f9:37:e9:ec:66: 26:54:a3:11:e0:b9:4d:92:df:23:dd:5a:fa:94:23: 9b:1e:33:5d:80:81:dc:a5:eb:12:f4:43:9c:53:07: 0a:d5:ad:91:16:b9:1b:2b:a2:c8:b9:87:e5:52:9e: 3f:a0:65:7a:6c:14:b4:82:7d:12:40:20:4a:79:7f: 32:f2:c9:a0:0c:52:85:20:eb:7c:68:dc:f5:5c:8b: eb:ef:10:80:6b:26:a5:32:7d:2e:59:e8:78:3e:cd: cc:fe:c1:58:93:be:9d:99:97:a4:9d:bf:84:33:43: 88:f4:ae:5c:a9:a8:43:6e:9f:9b:ac:33:49:d3:1e: e9:1d:9e:37:0a:0d:93:89:67:ee:3b:fa:9b:3e:9f: a7:80:be:ae:ef:1b:68:69:1d:cb:a7:5b:bd:e1:b5: 13:33:e9:11:80:2c:63:90:60:11:d1:34:2e:34:85: 2e:50:c7:f2:c9:d7:b4:b5:d4:c5:a8:22:e6:c5:0e: 30:f8:78:3a:f0:94:ef:1f:1f:ae:dd:ec:6a:e8:8e: fa:ce:5f:06:98:36:b1:64:6a:8c:2a:8a:2f:13:46: 6f:50:3b:4f:1d:00:65:27:fd:a9:ed:ac:c5:c3:15: 14:4a:c0:32:77:f7:0b:06:fb:4a:e7:99:6d:94:7e: f9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:97:86:6E:03:65:EC:D3:E3:B0:08:30:A1:E7:4A:4D:9F:0E:FC:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 192.161.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:d2:e3:a6:1e:a4:8b:44:82:0e:ed:25:84:c3:cf:82:02:24: 8f:d5:a7:37:36:26:26:78:86:81:ff:88:16:c3:ee:ee:43:ef: ac:2d:b9:89:55:e9:f2:35:95:28:0c:1e:b7:49:c6:28:96:d4: d9:4b:7f:7d:c6:30:66:17:cf:42:65:ef:5d:61:fb:89:8e:04: 6f:ed:a1:fd:a0:41:6d:d8:62:08:54:ff:03:5e:36:e5:0d:dd: 4e:94:8f:4c:24:61:6a:81:a6:56:cd:e1:13:2f:0a:f5:77:62: 38:17:5b:fe:48:8c:8c:15:ca:b5:49:d7:27:ab:59:f0:af:4c: 3e:5c:93:c0:10:d3:4f:49:0a:04:6c:1c:d7:2f:26:96:70:0b: f7:23:7e:72:d6:a1:d2:0e:73:d3:4c:70:9e:50:9d:7c:3e:62: 90:7f:a2:fc:c1:db:7b:89:bc:df:a9:bb:cb:92:f7:1d:bb:59: 1c:e5:94:21:1a:bc:ef:c1:c3:e6:92:53:fc:13:74:c1:3d:ad: d5:d1:59:e9:13:2e:59:a7:55:86:e8:7e:e4:79:d1:1a:08:bd: a1:97:44:a1:60:67:84:c8:63:98:99:b3:02:79:93:e9:90:69: 92:87:66:52:d1:fa:94:36:7c:95:b0:97:39:45:3e:da:c5:42: 43:a3:3c:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0k3BgrTzjiyvq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MzA2YjhmZGMtNGEwMC00ZGRhLTlkODQtNDk5MDA3NmU4ODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7oZ81pUWI2ot+Tfp7GYmVKMR4LlNkt8j3Vr6 lCObHjNdgIHcpesS9EOcUwcK1a2RFrkbK6LIuYflUp4/oGV6bBS0gn0SQCBKeX8y 8smgDFKFIOt8aNz1XIvr7xCAayalMn0uWeh4Ps3M/sFYk76dmZeknb+EM0OI9K5c qahDbp+brDNJ0x7pHZ43Cg2TiWfuO/qbPp+ngL6u7xtoaR3Lp1u94bUTM+kRgCxj kGAR0TQuNIUuUMfyyde0tdTFqCLmxQ4w+Hg68JTvHx+u3exq6I76zl8GmDaxZGqM KoovE0ZvUDtPHQBlJ/2p7azFwxUUSsAyd/cLBvtK55ltlH75fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOXhm4DZezT47AIMKHnSk2fDvznMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvY2QwOWIwNzYtZjBhNy0z OWRhLTkyZGItMWVjYTdmNzRlM2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzS46YepItEgg7tJYTDz4ICJI/Vpzc2JiZ4hoH/iBbD7u5D76wtuYlV 6fI1lSgMHrdJxiiW1NlLf33GMGYXz0Jl711h+4mOBG/tof2gQW3YYghU/wNeNuUN 3U6Uj0wkYWqBplbN4RMvCvV3YjgXW/5IjIwVyrVJ1yerWfCvTD5ck8AQ009JCgRs HNcvJpZwC/cjfnLWodIOc9NMcJ5QnXw+YpB/ovzB23uJvN+pu8uS9x27WRzllCEa vO/Bw+aSU/wTdME9rdXRWekTLlmnVYbofuR50RoIvaGXRKFgZ4TIY5iZswJ5k+mQ aZKHZlLR+pQ2fJWwlzlFPtrFQkOjPE0= -----END CERTIFICATE-----Generated at Tue Oct 28 09:48:00 2025 by rpki-client