$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa File: cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa (raw, json) Hash identifier: 2+mV9I4UlUilxgKfO1/Vbb6oJlfQRcSs/j6MJ2afNDM= Subject key identifier: 87:A6:71:5A:8A:A0:88:0B:C1:F1:D5:24:F6:6D:A1:BC:DE:EE:C3:BE Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584EE38C994F7BF1D39A4C572300 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 14618 IP address blocks: 192.161.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:99:4f:7b:f1:d3:9a:4c:57:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=45107a0c-e3ca-4420-875f-7ab5a4f808fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:be:3c:49:f2:5f:dd:e8:4a:96:19:c5:fd:be: dc:5e:f7:59:13:a9:ec:bb:fa:f6:07:ac:0b:d9:18: 68:2d:dd:b9:e8:bc:0d:df:1e:07:9a:ff:21:4b:96: c5:c6:9f:da:75:94:7d:50:77:a7:93:33:48:e1:6b: d8:f1:e3:0f:5d:09:9e:42:5b:7f:01:b6:14:51:64: ba:0d:fe:8c:bb:05:16:a5:93:92:57:e3:c5:ee:5a: ae:7b:20:cb:bd:e6:65:78:3e:77:29:53:c9:19:8f: 82:fa:82:c9:6e:05:46:b6:d0:c4:df:97:73:75:38: d6:e7:bc:1a:06:96:5e:16:69:fd:69:86:fd:63:3a: 2a:32:7f:1a:e8:50:3e:93:2f:9f:9b:8f:7e:0d:ce: 2c:4f:72:ad:d1:cb:d7:80:80:1b:ee:b9:d1:5c:fc: 3f:2b:82:ba:ba:97:f3:3b:3c:79:8d:e2:2a:48:e1: d4:99:c5:0d:72:65:de:cd:6a:6f:5f:ab:82:cb:a3: 19:1c:83:13:b4:8b:16:5d:e1:eb:9c:a2:67:c5:2a: 6f:1e:50:80:ce:22:11:f5:30:3b:0f:b1:20:15:72: 20:fc:50:d0:14:4e:17:6b:9e:9c:dc:08:29:f3:e9: d6:da:7e:34:7b:5a:fe:3f:5d:90:1f:45:5b:f7:ed: df:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A6:71:5A:8A:A0:88:0B:C1:F1:D5:24:F6:6D:A1:BC:DE:EE:C3:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/cd09b076-f0a7-39da-92db-1eca7f74e3b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 192.161.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:3a:17:48:70:44:2d:6f:15:18:e7:2e:3d:37:39:e1:4a:10: 15:fe:4b:bb:89:63:4d:22:9e:55:c5:21:35:34:be:92:68:00: b6:dc:af:59:40:ac:71:55:af:44:5d:17:93:3c:16:c0:cd:50: c6:af:f4:77:f1:1f:b9:c9:1b:11:b1:50:3a:e5:82:3c:a8:b8: 5d:3e:e2:4e:6f:f2:37:3a:d3:4a:2a:f9:93:37:3f:b2:c7:7b: a9:55:df:b6:46:6e:c4:1f:d9:54:89:28:cf:7a:85:f3:1e:40: e6:c6:7b:c7:21:2a:72:db:f6:48:f3:9a:4d:cc:16:6e:b8:76: 51:b0:48:43:11:8a:2c:30:9b:52:99:72:6a:95:d3:9c:d3:58: c1:fd:6c:17:92:e7:81:13:ad:09:55:e0:4c:1c:46:c6:38:b6: eb:e0:23:09:97:d1:fa:fb:54:48:11:49:1f:45:0a:c5:8a:43: b0:41:cd:f3:47:19:30:df:19:df:fe:5b:c6:af:cb:c6:28:03: f7:06:d3:6e:e2:3e:fa:8d:4b:23:a6:e0:eb:a6:f0:f6:f9:ef: ee:fd:1c:dc:c1:bc:09:69:74:c3:04:db:2c:dd:78:2b:3d:33: 90:3d:69:d1:9c:a9:5d:60:7b:10:9e:c4:4e:05:52:76:73:2b: db:0c:5a:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjJlPe/HTmkxXIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk NDUxMDdhMGMtZTNjYS00NDIwLTg3NWYtN2FiNWE0ZjgwOGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr48SfJf3ehKlhnF/b7cXvdZE6nsu/r2B6wL 2RhoLd256LwN3x4Hmv8hS5bFxp/adZR9UHenkzNI4WvY8eMPXQmeQlt/AbYUUWS6 Df6MuwUWpZOSV+PF7lqueyDLveZleD53KVPJGY+C+oLJbgVGttDE35dzdTjW57wa BpZeFmn9aYb9YzoqMn8a6FA+ky+fm49+Dc4sT3Kt0cvXgIAb7rnRXPw/K4K6upfz Ozx5jeIqSOHUmcUNcmXezWpvX6uCy6MZHIMTtIsWXeHrnKJnxSpvHlCAziIR9TA7 D7EgFXIg/FDQFE4Xa56c3Agp8+nW2n40e1r+P12QH0Vb9+3ftwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIemcVqKoIgLwfHVJPZtobze7sO+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvY2QwOWIwNzYtZjBhNy0z OWRhLTkyZGItMWVjYTdmNzRlM2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG06F0hwRC1vFRjnLj03OeFKEBX+S7uJY00inlXFITU0vpJoALbcr1lA rHFVr0RdF5M8FsDNUMav9HfxH7nJGxGxUDrlgjyouF0+4k5v8jc600oq+ZM3P7LH e6lV37ZGbsQf2VSJKM96hfMeQObGe8chKnLb9kjzmk3MFm64dlGwSEMRiiwwm1KZ cmqV05zTWMH9bBeS54ETrQlV4EwcRsY4tuvgIwmX0fr7VEgRSR9FCsWKQ7BBzfNH GTDfGd/+W8avy8YoA/cG027iPvqNSyOm4Oum8Pb57+79HNzBvAlpdMME2yzdeCs9 M5A9adGcqV1gexCexE4FUnZzK9sMWtc= -----END CERTIFICATE-----Generated at Thu Aug 20 21:57:49 2026 by rpki-client