$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/18be9d53-2126-3b32-bb14-95983399a677.roa File: 18be9d53-2126-3b32-bb14-95983399a677.roa (raw, json) Hash identifier: QkU8eDRqC31jiFicOh4ur9bbzF0L885UmuPDrHOgagw= Subject key identifier: A2:B3:FE:57:0A:7E:D2:32:DA:04:03:E5:67:9A:8A:4B:14:24:0B:74 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584D11726674CF648C1D2D60D6C0 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/18be9d53-2126-3b32-bb14-95983399a677.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 3738 IP address blocks: 192.250.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:66:74:cf:64:8c:1d:2d:60:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=4b84ebad-01c1-4b55-bee8-4b3b4a762783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cb:63:2c:d8:63:0b:c0:c1:61:c7:eb:40:e4: 86:d0:de:07:cf:51:8a:1e:b2:90:5c:be:f9:b6:fa: 79:61:72:28:1f:7f:28:99:63:fb:d1:94:ef:3e:14: 9c:47:a7:2b:36:ac:60:3a:81:3f:17:f9:da:bd:5a: 63:65:05:69:79:c5:99:a5:2b:5c:44:5b:a9:80:84: 11:0a:27:c3:f2:59:e3:bd:0e:28:e4:eb:8b:c6:e8: cb:48:4a:a0:1e:16:e3:51:1e:90:17:e4:c5:a2:e6: 3a:1d:13:71:f9:9d:0a:b0:36:2c:f5:89:e8:8c:de: f3:b7:dd:0b:9f:4d:3b:25:0b:b2:02:f8:71:02:51: c8:42:3c:9b:a9:4f:a8:c6:65:77:0a:e5:84:a8:96: ba:df:d7:e6:8d:ac:aa:23:07:57:3d:7c:f4:92:17: e9:2c:fb:73:1c:66:05:b9:1b:86:99:a8:08:70:ea: 94:33:6d:fc:74:bb:24:ed:f6:d5:02:97:32:c7:b3: 9e:dc:8d:77:a4:14:33:c2:68:23:d2:b0:48:a6:0d: d9:92:f5:d0:c6:34:11:c1:f2:40:dd:ed:8a:16:51: d5:31:de:c2:72:d2:40:4f:13:57:a3:ae:71:2f:ca: b0:02:26:59:cc:89:2b:1f:9a:1b:86:97:de:da:b5: 96:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B3:FE:57:0A:7E:D2:32:DA:04:03:E5:67:9A:8A:4B:14:24:0B:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/18be9d53-2126-3b32-bb14-95983399a677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:05:2e:4b:f0:b6:2c:b8:be:76:ef:d3:0f:5d:80:fb:df:54: ad:cd:01:46:c0:9c:6b:d4:9a:0b:b8:37:37:80:fa:69:52:6a: 1b:1b:6b:13:ec:ac:4c:eb:22:a7:9d:f5:f1:01:90:41:ab:7d: f7:f1:fb:2d:7c:e8:14:ea:fe:09:6c:59:57:a5:03:2a:e0:18: d7:68:77:57:40:2d:78:77:e3:9a:e3:ca:87:37:d4:3f:05:44: c6:a3:e8:54:5a:7e:8b:e3:38:21:36:79:99:fc:2a:2f:ca:0b: f1:cd:18:64:ad:78:31:2b:ad:3a:c7:5c:c0:87:33:3c:cf:67: d2:50:98:75:c5:60:1c:67:4d:31:eb:ae:a4:95:7b:81:68:27: 66:9b:98:4e:9e:c0:0d:e2:5e:33:d7:84:08:51:c4:32:76:5c: 34:92:21:3b:d7:9b:b8:6d:97:65:f7:78:d6:07:26:e5:fd:eb: c4:a2:73:28:a7:4f:fa:8d:32:7f:6b:2f:9f:9b:a9:06:aa:5b: 12:bb:77:8b:82:c9:23:10:7f:db:46:fc:32:32:43:9b:1c:29: e3:26:14:3c:98:1a:92:85:9b:9b:72:d9:f9:97:9a:43:36:22: 7d:84:97:1d:83:4b:ae:ed:9d:2a:54:2a:f8:8e:12:e6:e0:f7: 07:1a:58:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcmZ0z2SMHS1g1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk NGI4NGViYWQtMDFjMS00YjU1LWJlZTgtNGIzYjRhNzYyNzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMtjLNhjC8DBYcfrQOSG0N4Hz1GKHrKQXL75 tvp5YXIoH38omWP70ZTvPhScR6crNqxgOoE/F/navVpjZQVpecWZpStcRFupgIQR CifD8lnjvQ4o5OuLxujLSEqgHhbjUR6QF+TFouY6HRNx+Z0KsDYs9YnojN7zt90L n007JQuyAvhxAlHIQjybqU+oxmV3CuWEqJa639fmjayqIwdXPXz0khfpLPtzHGYF uRuGmagIcOqUM238dLsk7fbVApcyx7Oe3I13pBQzwmgj0rBIpg3ZkvXQxjQRwfJA 3e2KFlHVMd7CctJATxNXo65xL8qwAiZZzIkrH5obhpfe2rWWyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKz/lcKftIy2gQD5WeaiksUJAt0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvMThiZTlkNTMtMjEyNi0z YjMyLWJiMTQtOTU5ODMzOTlhNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkFLkvwtiy4vnbv0w9dgPvfVK3NAUbAnGvUmgu4NzeA+mlSahsbaxPs rEzrIqed9fEBkEGrfffx+y186BTq/glsWVelAyrgGNdod1dALXh345rjyoc31D8F RMaj6FRafovjOCE2eZn8Ki/KC/HNGGSteDErrTrHXMCHMzzPZ9JQmHXFYBxnTTHr rqSVe4FoJ2abmE6ewA3iXjPXhAhRxDJ2XDSSITvXm7htl2X3eNYHJuX968Sicyin T/qNMn9rL5+bqQaqWxK7d4uCySMQf9tG/DIyQ5scKeMmFDyYGpKFm5ty2fmXmkM2 In2Elx2DS67tnSpUKviOEubg9wcaWMg= -----END CERTIFICATE-----Generated at Sun Mar 22 09:56:44 2026 by rpki-client