$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa File: 3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa (raw, json) Hash identifier: sZQkqVn4UQBQ3QBZtr2C9PNMjaBxEdeU4lssvlsKufg= Subject key identifier: DC:9C:9B:82:E1:87:F1:70:6E:84:A1:EC:41:1A:C1:39:D9:7A:55:FF Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584D11726A064105C4AD7389C7C0 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 3738 IP address blocks: 192.250.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:6a:06:41:05:c4:ad:73:89:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=534548e8-7059-4cf5-8c55-1edca428b188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:76:af:0c:71:dc:8c:93:2f:66:ef:da:05:e3: 71:71:6a:47:57:49:4f:5e:9b:b9:a6:25:bb:d1:23: d9:98:0e:a4:f3:6f:85:58:bf:68:b0:35:f6:aa:a4: 4d:ae:52:98:d2:72:a3:90:6c:b5:65:a8:6b:16:55: fb:37:d0:7c:9e:40:ca:df:12:b0:eb:da:b7:24:9b: 68:7b:89:3e:c9:6a:2a:92:a1:64:8b:9b:77:96:2a: b8:b5:56:a8:14:51:1c:e0:8d:a4:13:8e:ee:ed:0f: 47:19:e2:1b:10:4a:db:f6:9b:92:cd:75:e4:de:f0: 1e:46:6a:3d:5d:93:65:ed:eb:e4:48:83:f9:be:51: a1:e0:e7:88:a2:93:b4:21:df:c9:1f:9c:3b:25:48: 93:64:a7:6a:f6:e0:f9:46:9f:57:f7:81:35:97:26: ac:6c:84:b2:cd:64:4f:11:7f:6d:d9:6e:5f:90:2e: 72:56:85:fe:e8:5b:1d:0d:c0:48:60:f2:f5:9e:cb: 45:d5:93:a1:48:83:58:e2:d9:a1:6d:8e:5c:bc:18: 9d:e7:28:69:4e:1b:db:1d:7c:80:7f:2a:21:95:60: 34:68:50:b5:c3:4d:5b:26:19:45:5d:f3:64:43:81: 22:ea:6f:4a:25:c4:7e:33:3d:6e:03:48:2f:82:87: 27:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9C:9B:82:E1:87:F1:70:6E:84:A1:EC:41:1A:C1:39:D9:7A:55:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:1f:1e:68:b4:1f:ae:1e:cf:98:0a:32:dd:2e:d6:74:9f:eb: e4:65:52:b2:a5:36:45:ec:c5:04:21:8a:7d:a7:e7:25:01:be: a4:a4:75:76:6d:3b:60:be:02:e1:03:bd:26:72:6f:8e:68:05: 94:ae:05:8f:d9:33:cb:f5:50:b4:f5:1b:7f:78:5c:8e:38:72: bc:d7:6b:7e:dc:6d:4d:fc:91:ca:5e:3f:35:ed:58:57:8f:d2: f2:3b:e6:49:8b:9a:e3:76:ca:d4:bd:ef:a5:72:0a:4b:d2:c0: cc:4e:5a:17:69:7d:02:81:fe:3f:03:84:fd:12:d8:6c:c2:0e: fa:75:c2:3d:4b:de:95:78:17:a7:26:5e:ab:14:75:3b:fd:ae: 07:26:06:c3:8c:a2:a7:19:30:be:5f:26:e2:72:73:01:7f:d9: 4b:fb:21:68:a8:5d:76:21:c5:33:83:61:c3:cf:df:3d:29:fa: 46:c3:38:a1:14:e3:07:18:e1:2e:b1:e0:07:92:02:75:c4:1c: a2:96:77:99:40:75:53:b1:c2:8d:ac:4e:4b:87:d7:91:cd:50: b2:7a:87:8d:c0:3a:50:11:10:1d:fd:92:35:43:0f:a8:cd:74: dd:6b:06:94:78:7e:62:39:35:de:3d:1b:0f:13:89:cc:a8:25: 8f:9f:35:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcmoGQQXErXOJx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk NTM0NTQ4ZTgtNzA1OS00Y2Y1LThjNTUtMWVkY2E0MjhiMTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XavDHHcjJMvZu/aBeNxcWpHV0lPXpu5piW7 0SPZmA6k82+FWL9osDX2qqRNrlKY0nKjkGy1ZahrFlX7N9B8nkDK3xKw69q3JJto e4k+yWoqkqFki5t3liq4tVaoFFEc4I2kE47u7Q9HGeIbEErb9puSzXXk3vAeRmo9 XZNl7evkSIP5vlGh4OeIopO0Id/JH5w7JUiTZKdq9uD5Rp9X94E1lyasbISyzWRP EX9t2W5fkC5yVoX+6FsdDcBIYPL1nstF1ZOhSINY4tmhbY5cvBid5yhpThvbHXyA fyohlWA0aFC1w01bJhlFXfNkQ4Ei6m9KJcR+Mz1uA0gvgocnewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNycm4Lhh/FwboSh7EEawTnZelX/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvM2UwODY5ZjItOTc5Yi0z YTM0LTliYjEtZGJmMGI0N2FjNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4fHmi0H64ez5gKMt0u1nSf6+RlUrKlNkXsxQQhin2n5yUBvqSkdXZt O2C+AuEDvSZyb45oBZSuBY/ZM8v1ULT1G394XI44crzXa37cbU38kcpePzXtWFeP 0vI75kmLmuN2ytS976VyCkvSwMxOWhdpfQKB/j8DhP0S2GzCDvp1wj1L3pV4F6cm XqsUdTv9rgcmBsOMoqcZML5fJuJycwF/2Uv7IWioXXYhxTODYcPP3z0p+kbDOKEU 4wcY4S6x4AeSAnXEHKKWd5lAdVOxwo2sTkuH15HNULJ6h43AOlAREB39kjVDD6jN dN1rBpR4fmI5Nd49Gw8TicyoJY+fNW8= -----END CERTIFICATE-----Generated at Sun Mar 22 09:56:39 2026 by rpki-client