$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/00f2bc53-08fc-35cf-9e3d-5b8c4512b225.roa File: 00f2bc53-08fc-35cf-9e3d-5b8c4512b225.roa (raw, json) Hash identifier: 9JIMkuueBsyr1/QRrdPGzJDwG3RBebNYvhlJD3499fs= Subject key identifier: E1:37:F4:2F:96:F9:C5:B1:36:0F:6B:CF:81:76:F6:52:AA:65:9F:1D Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584D09DEF791EA682920F6616420 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/00f2bc53-08fc-35cf-9e3d-5b8c4512b225.roa Signing time: Mon 02 Mar 2026 20:53:06 +0000 ROA not before: Mon 02 Mar 2026 20:53:06 +0000 ROA not after: Sun 31 May 2026 19:53:06 +0000 asID: 3738 IP address blocks: 192.250.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:de:f7:91:ea:68:29:20:f6:61:64:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Mar 2 20:53:06 2026 GMT Not After : May 31 19:53:06 2026 GMT Subject: CN=c764faf1-ecd5-4185-95da-faae1fd4cdc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d2:d7:57:89:c5:c8:89:81:48:5c:f6:17:af: 7f:28:54:73:7d:ec:a1:f1:cd:be:c6:4a:4a:e6:c6: d5:ea:eb:bf:3f:e2:04:dc:f9:d5:6d:1f:91:9d:62: 34:fb:fc:a3:60:1c:4d:d7:89:fb:31:27:a3:56:de: 12:d7:85:b3:ae:4e:d3:22:9b:b4:92:7b:ad:fa:4b: d9:07:de:ac:fb:7d:88:a6:ee:61:9c:3c:af:07:53: 49:32:85:59:8c:55:b4:c2:bb:c9:fb:e0:99:45:57: 36:2e:07:80:23:b4:6c:dc:e3:cd:d4:df:6c:7e:c0: 57:e1:59:77:3a:0d:ea:02:ea:18:43:6d:77:e3:0b: 93:5c:72:2d:73:ce:bb:fd:d9:7c:1d:07:90:44:f9: e5:0a:ff:9e:17:4c:55:b8:0c:9c:30:4b:99:a8:d9: 2f:c7:42:6f:a3:31:24:13:a3:2e:2a:f8:2d:22:68: 9f:9c:42:a4:35:14:df:96:9f:dd:6a:ed:7e:8e:11: 17:bb:0b:87:0e:82:a1:46:a2:31:b1:d0:53:0e:a5: 73:ac:92:59:fc:a4:52:a4:8a:08:5a:04:72:52:d0: 7c:ba:ee:76:ea:e5:4f:ef:28:fc:33:a9:c1:2a:3a: 14:69:e4:49:91:ae:bb:6d:08:32:a0:01:4e:0f:78: dd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:37:F4:2F:96:F9:C5:B1:36:0F:6B:CF:81:76:F6:52:AA:65:9F:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/00f2bc53-08fc-35cf-9e3d-5b8c4512b225.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:0e:b1:43:86:69:e7:df:73:07:7b:ee:4b:bc:d0:48:cd:53: c8:b4:2e:58:79:11:a3:67:10:b5:21:23:87:e6:ba:1e:82:1e: fa:e2:f2:19:36:72:e7:c3:91:e3:ed:b2:70:76:aa:7e:82:0c: fa:65:21:68:5f:16:87:ab:36:80:bd:ec:9a:60:41:71:ee:7b: a8:9d:2c:98:2d:1d:88:5f:e8:1e:4e:17:9f:09:db:58:91:ae: 97:6a:a4:57:cc:d9:24:f9:1a:fd:06:5c:76:09:86:58:34:48: ed:12:8b:05:1c:1a:d5:c1:c6:b8:a9:ba:c3:90:23:1e:7f:48: cb:f7:f1:31:30:e2:6c:67:a3:60:b6:56:4d:1e:da:eb:fd:b3: 27:84:ed:31:b8:63:50:30:ca:d7:54:74:29:ab:02:94:d2:7f: 83:55:a2:5c:81:0f:8d:94:cd:0b:ec:d9:62:1f:e5:7d:13:67: cf:ba:d0:23:44:e8:73:2f:91:82:ae:af:62:40:d4:7e:a4:72: 32:aa:f1:ed:11:34:40:23:0c:ef:df:ef:d3:5f:1f:a7:57:86: d6:2f:2f:6f:b0:27:97:a1:a3:01:ad:76:26:bf:77:b5:3c:46: e2:ff:ca:99:32:23:6a:bd:5d:2f:b0:43:22:34:16:4f:2f:f7: ca:2e:29:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0J3veR6mgpIPZhZCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDMwMjIwNTMwNloXDTI2MDUzMTE5NTMwNlowLzEtMCsGA1UEAxMk Yzc2NGZhZjEtZWNkNS00MTg1LTk1ZGEtZmFhZTFmZDRjZGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntLXV4nFyImBSFz2F69/KFRzfeyh8c2+xkpK 5sbV6uu/P+IE3PnVbR+RnWI0+/yjYBxN14n7MSejVt4S14Wzrk7TIpu0knut+kvZ B96s+32Ipu5hnDyvB1NJMoVZjFW0wrvJ++CZRVc2LgeAI7Rs3OPN1N9sfsBX4Vl3 Og3qAuoYQ2134wuTXHItc867/dl8HQeQRPnlCv+eF0xVuAycMEuZqNkvx0JvozEk E6MuKvgtImifnEKkNRTflp/dau1+jhEXuwuHDoKhRqIxsdBTDqVzrJJZ/KRSpIoI WgRyUtB8uu526uVP7yj8M6nBKjoUaeRJka67bQgyoAFOD3jdJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOE39C+W+cWxNg9rz4F29lKqZZ8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvMDBmMmJjNTMtMDhmYy0z NWNmLTllM2QtNWI4YzQ1MTJiMjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPq5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMYOsUOGaeffcwd77ku80EjNU8i0Llh5EaNnELUhI4fmuh6CHvri8hk2 cufDkePtsnB2qn6CDPplIWhfFoerNoC97JpgQXHue6idLJgtHYhf6B5OF58J21iR rpdqpFfM2ST5Gv0GXHYJhlg0SO0SiwUcGtXBxripusOQIx5/SMv38TEw4mxno2C2 Vk0e2uv9syeE7TG4Y1AwytdUdCmrApTSf4NVolyBD42UzQvs2WIf5X0TZ8+60CNE 6HMvkYKur2JA1H6kcjKq8e0RNEAjDO/f79NfH6dXhtYvL2+wJ5ehowGtdia/d7U8 RuL/ypkyI2q9XS+wQyI0Fk8v98ouKfs= -----END CERTIFICATE-----Generated at Sun Mar 22 09:53:46 2026 by rpki-client