$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa File: 5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa (raw, json) Hash identifier: T1aUbVgoeHIhkg2ECZoTBEqRyLmMYanWiM8t1lYKWAQ= Subject key identifier: BF:7C:EC:C2:4C:C3:3A:F5:DC:97:85:97:28:66:13:95:F0:36:2E:F4 Certificate issuer: /CN=c0094aab-7ad1-4889-853f-ce946552206b Certificate serial: 010D0C9F4328584D15A266AB1F5F5F6EB7982600 Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 198949 IP address blocks: 192.135.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:66:ab:1f:5f:5f:6e:b7:98:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=06baa185-c2a0-48a9-8c71-2752df38d927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e7:ff:ed:e4:c1:43:cd:57:c4:ce:a4:b6:a5: 43:a5:57:c9:a2:6d:83:98:7d:ee:d9:b9:4b:70:96: 82:fa:bb:5f:ee:12:dd:7a:d6:d1:c2:51:74:0a:a1: 55:d8:05:32:eb:18:aa:2f:ef:27:0f:a1:d3:3c:79: f9:dd:bf:0b:c2:37:b9:fe:6a:58:5c:0b:13:1c:ff: 4c:66:e3:6b:13:52:58:f6:76:e1:0e:a5:41:65:95: 6f:29:aa:a2:43:10:19:0f:d2:d3:20:89:e4:e4:1a: f1:64:54:06:c2:68:8c:2f:37:34:6a:00:20:e7:3e: d6:52:d4:45:8c:fb:cf:9e:09:1d:b2:d4:42:e5:c3: af:c0:dc:f7:87:2e:6b:54:0b:3b:7f:7d:cb:7b:81: 1b:c7:35:71:70:40:c3:cd:72:31:9e:97:ba:cd:55: c4:78:cb:db:a0:eb:34:0c:88:18:30:c0:e8:e1:d6: f3:86:11:b2:8a:52:0f:49:99:28:15:45:93:0b:0b: 82:0f:69:eb:61:1d:12:7b:8a:e4:bc:7e:72:fd:f2: fe:67:e0:b7:c8:84:9b:e8:66:a2:18:cf:bd:d1:19: 9f:a2:33:df:b7:5e:ad:1f:1c:45:65:12:0d:7d:dc: e1:2f:86:6e:b2:78:74:7c:bd:22:16:c5:f4:5e:47: 3e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7C:EC:C2:4C:C3:3A:F5:DC:97:85:97:28:66:13:95:F0:36:2E:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/5bad4206-f2b2-3080-b8dc-a27db07cbfae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl X509v3 Authority Key Identifier: keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer sbgp-ipAddrBlock: critical IPv4: 192.135.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:03:1f:b5:13:d9:c1:45:44:1f:e6:3d:6c:80:7e:e2:01:33: 8a:70:24:0f:5d:9a:87:55:21:12:97:6a:37:86:74:cf:87:f0: 40:70:72:46:22:ec:7e:aa:ad:2d:ff:91:28:d9:87:52:87:ff: 55:8d:8c:5f:57:f0:34:2e:4a:fc:bd:85:ca:da:95:9a:20:a9: 44:79:fb:63:18:42:de:a2:87:72:a7:8e:54:df:d5:5b:2e:1e: 25:38:de:54:fb:b6:e1:c9:a9:cc:65:73:96:10:f6:f4:f5:6b: 99:14:3f:0c:d6:5f:42:ed:f9:fd:bb:69:4f:1f:97:cc:96:46: 72:9d:4c:f5:e2:45:1b:66:fd:89:97:24:eb:61:86:39:a6:18: 4e:b9:77:d0:42:1e:67:f8:7b:94:33:17:1c:ef:c9:09:60:8e: 87:db:cd:4c:b5:dc:67:22:ed:db:6a:a6:e6:f9:2e:f8:32:81: 00:9d:24:75:3f:73:cc:01:fb:54:75:ae:83:83:f2:79:14:1c: 31:82:b1:04:7d:c1:39:0a:75:58:07:3e:9f:e2:3f:23:57:c7: cc:52:41:e0:0e:6c:57:80:fc:b5:af:3e:dc:c8:3c:53:28:47: f0:2c:9e:e3:00:96:c2:1c:b3:65:d4:08:4b:8b:f3:96:4a:d1: 66:08:53:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VomarH19fbreYJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy MDZiMB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk MDZiYWExODUtYzJhMC00OGE5LThjNzEtMjc1MmRmMzhkOTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOf/7eTBQ81XxM6ktqVDpVfJom2DmH3u2blL cJaC+rtf7hLdetbRwlF0CqFV2AUy6xiqL+8nD6HTPHn53b8Lwje5/mpYXAsTHP9M ZuNrE1JY9nbhDqVBZZVvKaqiQxAZD9LTIInk5BrxZFQGwmiMLzc0agAg5z7WUtRF jPvPngkdstRC5cOvwNz3hy5rVAs7f33Le4EbxzVxcEDDzXIxnpe6zVXEeMvboOs0 DIgYMMDo4dbzhhGyilIPSZkoFUWTCwuCD2nrYR0Se4rkvH5y/fL+Z+C3yISb6Gai GM+90RmfojPft16tHxxFZRINfdzhL4Zusnh0fL0iFsX0Xkc+lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL987MJMwzr13JeFlyhmE5XwNi70MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5 NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvNWJhZDQyMDYtZjJiMi0z MDgwLWI4ZGMtYTI3ZGIwN2NiZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1 M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0 NjU1MjIwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIf6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEDH7UT2cFFRB/mPWyAfuIBM4pwJA9dmodVIRKXajeGdM+H8EBwckYi 7H6qrS3/kSjZh1KH/1WNjF9X8DQuSvy9hcralZogqUR5+2MYQt6ih3KnjlTf1Vsu HiU43lT7tuHJqcxlc5YQ9vT1a5kUPwzWX0Lt+f27aU8fl8yWRnKdTPXiRRtm/YmX JOthhjmmGE65d9BCHmf4e5QzFxzvyQlgjofbzUy13Gci7dtqpub5LvgygQCdJHU/ c8wB+1R1roOD8nkUHDGCsQR9wTkKdVgHPp/iPyNXx8xSQeAObFeA/LWvPtzIPFMo R/AsnuMAlsIcs2XUCEuL85ZK0WYIU7E= -----END CERTIFICATE-----Generated at Thu Mar 19 15:42:03 2026 by rpki-client