$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/1c3acf03-bb1a-3986-907e-36fa7bf9ab0d.roa File: 1c3acf03-bb1a-3986-907e-36fa7bf9ab0d.roa (raw, json) Hash identifier: AwpVhKDbCX9iZQO/+9UdBZbQDCywszIN8EKQi7KsiGA= Subject key identifier: 20:2B:2E:97:39:4B:12:58:30:9B:86:2C:CC:F4:BB:F8:71:48:81:78 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584DBA3B1D017FA51F7FD6936CA0 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/1c3acf03-bb1a-3986-907e-36fa7bf9ab0d.roa Signing time: Tue 05 May 2026 01:00:23 +0000 ROA not before: Tue 05 May 2026 01:00:23 +0000 ROA not after: Mon 03 Aug 2026 01:00:23 +0000 asID: 3738 IP address blocks: 192.250.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ba:3b:1d:01:7f:a5:1f:7f:d6:93:6c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: May 5 01:00:23 2026 GMT Not After : Aug 3 01:00:23 2026 GMT Subject: CN=9df98e8b-889d-4a4c-a6e6-a68e8a1cb4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:fc:04:2d:cf:1f:b3:49:ac:66:84:c9:36:c8: 82:78:16:e2:18:1e:a3:5d:14:57:18:19:0f:7a:30: 78:5e:3f:41:27:7e:bc:79:c3:d8:b6:93:22:aa:56: 0e:90:de:5b:4c:e7:f4:a1:58:81:34:43:c1:6d:17: 73:ec:4b:09:05:19:a2:36:21:58:57:be:39:ee:7d: 0d:49:7f:c8:8e:f9:84:5c:63:8d:ea:e3:44:a1:81: 01:73:5b:31:53:3c:fc:f2:27:a1:64:2c:45:ac:9f: f2:b0:8e:50:5e:f6:ab:e0:0e:16:db:c7:37:93:32: 32:9e:5a:94:d2:ab:07:62:a4:74:fc:7a:f2:82:90: 6f:1d:cc:1f:a2:02:ac:b1:76:a0:79:ae:dc:9c:6d: 02:ea:c1:4a:73:7f:f6:e9:1a:64:09:c8:54:55:18: 91:b3:f3:ab:47:2c:5f:ac:bd:45:05:ca:49:eb:f8: 24:2e:f1:99:af:f3:7e:1a:d5:25:6d:3c:d0:ea:5b: 8e:d2:0a:72:69:d0:64:60:77:6a:08:bd:e2:37:40: 6a:2b:ef:55:22:82:72:e3:d4:18:da:c0:1c:a0:4a: a1:94:8c:73:74:40:9a:39:a9:2a:3b:66:55:73:40: 1e:28:46:e2:0e:00:5f:58:57:ef:3e:2c:9c:6b:56: 69:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2B:2E:97:39:4B:12:58:30:9B:86:2C:CC:F4:BB:F8:71:48:81:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/1c3acf03-bb1a-3986-907e-36fa7bf9ab0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:05:9e:ea:17:47:69:1b:df:c7:7f:77:65:ee:ce:30:46:67: 29:88:4d:b8:41:83:79:ab:80:9a:72:ba:2a:3b:51:aa:ae:bc: 9b:6a:e9:b6:6e:67:fd:61:30:82:d1:0c:c3:5b:45:f6:91:99: c0:fd:70:d1:8c:1b:8c:4b:42:34:28:29:4b:2c:92:8a:de:4c: 30:7f:38:d4:d8:26:25:fe:d9:b4:61:02:1a:08:ac:bd:77:e4: 3e:de:a3:db:fd:26:d5:71:fc:9a:e6:3e:99:93:14:49:f0:61: 1c:43:d3:e7:89:99:f5:d5:7e:d7:6f:81:0b:b0:87:5d:1f:fd: 50:01:3b:21:60:fe:19:d7:87:09:15:a0:14:af:43:92:e0:d2: 6f:bb:a7:59:71:33:10:4b:17:1e:95:9f:f7:2f:4e:59:0e:a3: aa:39:cd:92:07:72:38:f3:cf:17:d6:42:18:6c:a6:d5:99:31: de:3c:fa:9c:9e:39:cd:61:f0:8a:40:cf:01:6f:db:a4:d5:95: 07:54:2e:80:3c:9a:ae:cb:cc:4f:e2:40:a8:33:6e:8f:14:2d: 10:fd:33:c2:07:ae:4a:03:5b:20:f5:60:88:16:33:24:32:2d: 90:e3:a2:4c:7a:69:76:a8:0a:36:84:9b:19:a7:c0:67:61:8b: 06:fa:f5:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE26Ox0Bf6Uff9aTbKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk OWRmOThlOGItODg5ZC00YTRjLWE2ZTYtYTY4ZThhMWNiNGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/wELc8fs0msZoTJNsiCeBbiGB6jXRRXGBkP ejB4Xj9BJ368ecPYtpMiqlYOkN5bTOf0oViBNEPBbRdz7EsJBRmiNiFYV7457n0N SX/IjvmEXGON6uNEoYEBc1sxUzz88iehZCxFrJ/ysI5QXvar4A4W28c3kzIynlqU 0qsHYqR0/HrygpBvHcwfogKssXagea7cnG0C6sFKc3/26RpkCchUVRiRs/OrRyxf rL1FBcpJ6/gkLvGZr/N+GtUlbTzQ6luO0gpyadBkYHdqCL3iN0BqK+9VIoJy49QY 2sAcoEqhlIxzdECaOakqO2ZVc0AeKEbiDgBfWFfvPiyca1ZpBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCArLpc5SxJYMJuGLMz0u/hxSIF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvMWMzYWNmMDMtYmIxYS0z OTg2LTkwN2UtMzZmYTdiZjlhYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQFnuoXR2kb38d/d2XuzjBGZymITbhBg3mrgJpyuio7UaquvJtq6bZu Z/1hMILRDMNbRfaRmcD9cNGMG4xLQjQoKUsskoreTDB/ONTYJiX+2bRhAhoIrL13 5D7eo9v9JtVx/JrmPpmTFEnwYRxD0+eJmfXVftdvgQuwh10f/VABOyFg/hnXhwkV oBSvQ5Lg0m+7p1lxMxBLFx6Vn/cvTlkOo6o5zZIHcjjzzxfWQhhsptWZMd48+pye Oc1h8IpAzwFv26TVlQdULoA8mq7LzE/iQKgzbo8ULRD9M8IHrkoDWyD1YIgWMyQy LZDjokx6aXaoCjaEmxmnwGdhiwb69ZE= -----END CERTIFICATE-----Generated at Thu May 7 01:12:34 2026 by rpki-client