$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/366115b5-c36e-3002-98be-5414f7a238fe.roa File: 366115b5-c36e-3002-98be-5414f7a238fe.roa (raw, json) Hash identifier: TUOPVBEgo7+uBrBNsC9m28QuCY2vL37o9wsC0q+jldE= Subject key identifier: 2F:06:7C:BF:7B:34:D1:DB:D9:8E:BD:F3:CE:06:2C:5F:D6:7A:BE:4C Certificate issuer: /CN=307848a1-01e5-4124-ac5f-8d98a3abaa0d Certificate serial: 010D0C9F4328584EF717637C9D1C935566E39780 Authority key identifier: 56:61:05:E5:78:59:E0:0E:D5:6A:AE:0A:9C:D5:93:9D:BA:35:C8:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/366115b5-c36e-3002-98be-5414f7a238fe.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 14618 IP address blocks: 167.94.127.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:63:7c:9d:1c:93:55:66:e3:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307848a1-01e5-4124-ac5f-8d98a3abaa0d Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=1b4de8e2-e0f9-4085-bba8-cb97ad40b209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:13:bd:31:04:70:6c:59:1e:03:af:49:4a:89: fc:5b:b4:33:58:22:c8:0d:93:67:0f:98:80:ff:f9: 23:5b:7e:a9:f2:c2:fa:2d:82:c4:5b:08:75:97:6f: 33:e5:a2:75:49:95:95:46:88:a2:80:11:e7:82:6b: 62:91:38:95:29:ea:53:6a:21:a5:f2:c3:ec:c5:6e: c7:f2:ab:92:75:c7:86:3d:13:dd:4c:48:33:4b:02: 72:27:9b:ad:77:17:c9:98:70:84:dc:eb:02:d9:f1: 3d:55:93:9b:b9:99:5d:c2:e6:b3:04:a3:86:fd:97: 31:30:d1:dc:e9:10:35:3f:21:20:27:41:5e:f6:8a: de:5b:1d:c9:48:bd:5c:52:6b:04:29:6d:60:7d:18: e7:19:a4:1b:15:c4:01:4e:0e:80:72:6d:d7:ad:fd: e7:e1:da:cc:fb:9e:b9:d9:8a:37:94:97:72:d1:92: e0:a1:d1:3f:c7:19:ba:c2:47:fe:49:43:16:73:94: d0:5c:f4:d9:4f:4f:48:03:e0:b8:ac:88:d0:1f:98: df:27:58:50:3a:e4:96:22:9b:4e:20:af:91:80:c4: e9:d4:47:61:39:c3:a1:ab:49:ce:a6:cb:b2:84:7d: d3:05:55:9e:84:8a:c2:a2:0a:50:d7:e9:b8:89:b2: 1c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:06:7C:BF:7B:34:D1:DB:D9:8E:BD:F3:CE:06:2C:5F:D6:7A:BE:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/366115b5-c36e-3002-98be-5414f7a238fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.crl X509v3 Authority Key Identifier: keyid:56:61:05:E5:78:59:E0:0E:D5:6A:AE:0A:9C:D5:93:9D:BA:35:C8:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer sbgp-ipAddrBlock: critical IPv4: 167.94.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:08:12:e7:b0:95:87:33:c3:4f:02:1c:a8:81:c3:2d:43:04: 0d:a1:ae:4a:e8:ef:2e:3d:98:e1:08:d0:97:f4:be:53:65:b3: d1:da:c5:8f:18:4a:36:1b:99:18:f5:32:83:f5:96:29:50:a0: c1:9d:7c:09:77:29:f1:2b:5b:e6:63:f1:8d:1f:d9:b3:bd:ed: 40:bf:c9:e0:e7:93:09:c5:1d:9d:fd:1e:8e:34:d1:50:a6:28: c3:ce:c3:f9:ca:c6:9c:75:ce:3b:02:c2:a3:43:0b:d6:bf:4a: f8:0a:e1:fe:b1:f0:b8:03:4e:cd:c9:93:33:50:e0:87:09:d2: 85:08:f0:5b:f2:5a:26:09:5f:ff:04:18:39:29:d6:f2:ad:0c: f6:c3:98:e4:b3:e4:d7:e4:98:81:12:00:bc:a6:81:fc:8b:ce: 3d:23:73:33:25:12:b6:2d:a5:dc:90:96:57:71:e1:08:1b:cc: 1d:11:f7:97:5f:6b:c6:30:fe:50:85:a1:11:c4:c3:24:70:6f: 23:f9:5d:c6:ec:3b:d0:f7:b4:1e:a3:18:06:5f:6a:08:43:14: f1:00:26:97:79:9b:76:f6:a7:5d:d6:44:15:d2:c5:a9:6d:51: 01:d2:14:2b:30:fb:f5:90:c4:e3:1d:28:7e:46:6e:15:59:d5: b1:56:29:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2N8nRyTVWbjl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzA3ODQ4YTEtMDFlNS00MTI0LWFjNWYtOGQ5OGEzYWJh YTBkMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MWI0ZGU4ZTItZTBmOS00MDg1LWJiYTgtY2I5N2FkNDBiMjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRO9MQRwbFkeA69JSon8W7QzWCLIDZNnD5iA //kjW36p8sL6LYLEWwh1l28z5aJ1SZWVRoiigBHngmtikTiVKepTaiGl8sPsxW7H 8quSdceGPRPdTEgzSwJyJ5utdxfJmHCE3OsC2fE9VZObuZldwuazBKOG/ZcxMNHc 6RA1PyEgJ0Fe9oreWx3JSL1cUmsEKW1gfRjnGaQbFcQBTg6Acm3Xrf3n4drM+565 2Yo3lJdy0ZLgodE/xxm6wkf+SUMWc5TQXPTZT09IA+C4rIjQH5jfJ1hQOuSWIptO IK+RgMTp1EdhOcOhq0nOpsuyhH3TBVWehIrCogpQ1+m4ibIcGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8GfL97NNHb2Y69884GLF/Wer5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMDc4 NDhhMS0wMWU1LTQxMjQtYWM1Zi04ZDk4YTNhYmFhMGQvMzY2MTE1YjUtYzM2ZS0z MDAyLTk4YmUtNTQxNGY3YTIzOGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzA3ODQ4YTEtMDFlNS00MTI0LWFj NWYtOGQ5OGEzYWJhYTBkLzMwNzg0OGExLTAxZTUtNDEyNC1hYzVmLThkOThhM2Fi YWEwZC5jcmwwHwYDVR0jBBgwFoAUVmEF5XhZ4A7Vaq4KnNWTnbo1yEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMDc4NDhhMS0wMWU1LTQxMjQtYWM1Zi04ZDk4 YTNhYmFhMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp15/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkIEuewlYczw08CHKiBwy1DBA2hrkro7y49mOEI0Jf0vlNls9HaxY8Y SjYbmRj1MoP1lilQoMGdfAl3KfErW+Zj8Y0f2bO97UC/yeDnkwnFHZ39Ho400VCm KMPOw/nKxpx1zjsCwqNDC9a/SvgK4f6x8LgDTs3JkzNQ4IcJ0oUI8FvyWiYJX/8E GDkp1vKtDPbDmOSz5NfkmIESALymgfyLzj0jczMlErYtpdyQlldx4QgbzB0R95df a8Yw/lCFoRHEwyRwbyP5XcbsO9D3tB6jGAZfaghDFPEAJpd5m3b2p13WRBXSxalt UQHSFCsw+/WQxOMdKH5GbhVZ1bFWKdw= -----END CERTIFICATE-----Generated at Sat Sep 26 05:50:17 2026 by rpki-client