$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/68a09496-dd1f-37b9-a873-c541d78bb65b.roa File: 68a09496-dd1f-37b9-a873-c541d78bb65b.roa (raw, json) Hash identifier: /cY5GFCjj2+PjJs6d51foz1vN5XSn7TPtEJ4u08xm+s= Subject key identifier: D9:2D:3F:31:B1:B9:0E:A4:00:D1:9A:C1:5A:01:37:4D:84:53:B5:B2 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584D11726A9F1B8A532F3A3C4AB8 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/68a09496-dd1f-37b9-a873-c541d78bb65b.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 3738 IP address blocks: 192.250.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:6a:9f:1b:8a:53:2f:3a:3c:4a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=4f51d4d2-5bc8-444e-968e-7b36df4d8afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5e:59:ed:98:30:66:67:3b:99:57:dc:a2:bf: 3a:24:69:f7:af:e1:4f:d7:f5:18:15:12:48:43:f7: 65:33:e5:fe:17:5f:18:f2:13:9a:9a:f6:c7:9e:4b: 04:be:a9:db:35:21:00:22:e6:c2:87:9c:bf:84:49: 34:4f:1c:54:87:4f:48:26:2a:97:84:11:eb:50:ea: ea:d2:2c:76:96:f9:7c:61:1c:d3:17:66:7b:68:c3: f6:37:c3:a6:bf:7e:b3:8f:db:51:83:df:bf:c7:59: 5b:0b:7c:ae:76:4f:ac:7b:f1:6d:0c:3d:17:53:3e: 51:d6:c1:65:bc:a6:5f:23:d4:94:fd:da:b4:ea:08: 38:ee:fd:9d:6e:e0:4a:6a:bd:ef:7d:b4:e7:88:0e: 33:3b:45:ec:0f:2a:88:9f:9a:21:a8:11:a8:d9:59: f2:3e:59:ed:ff:c3:0f:56:12:fa:4d:30:64:26:c8: 40:ee:f7:d7:02:74:26:75:b0:0b:08:db:5e:70:2a: 08:ae:56:9b:69:60:2d:ea:15:b9:9c:c7:8f:25:e9: a5:35:e8:8a:ce:f5:aa:5c:6a:33:6c:1b:84:3e:5f: db:38:b6:9c:86:2b:11:f6:af:04:aa:19:c3:b7:98: 04:30:57:8a:28:1c:88:bf:51:65:62:37:b9:de:c3: 09:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2D:3F:31:B1:B9:0E:A4:00:D1:9A:C1:5A:01:37:4D:84:53:B5:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/68a09496-dd1f-37b9-a873-c541d78bb65b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:52:41:4e:a5:a3:ac:a5:90:ae:fc:7c:6f:53:a8:05:0e:c4: 05:75:f7:49:65:ac:98:33:b9:cf:03:e9:15:78:a4:c1:c6:c8: 0f:f7:82:2d:b0:89:11:61:8c:38:1b:f7:95:16:53:cb:5b:04: 9b:db:f4:ce:65:3e:c7:91:33:7c:eb:00:f2:d5:52:61:83:02: 35:22:ee:30:ed:18:d2:db:0b:43:07:25:46:15:10:a2:ce:7a: 36:01:16:5e:e3:08:38:fc:e9:d5:44:73:13:77:39:d9:b6:8f: 6f:9e:4a:32:d6:b6:57:a7:2f:58:6d:4a:7d:33:f0:3d:06:1f: 4a:25:05:75:ee:35:44:62:a7:7f:e2:27:4d:a6:fb:1b:8f:8a: 6c:6c:f3:4a:fe:2f:4a:bb:4e:70:3b:c9:cd:26:85:40:87:d7: 58:67:52:7d:5a:ab:7b:04:64:87:ac:47:ea:84:f4:c0:18:93: 4c:92:cd:ca:38:d5:84:31:9f:c6:bd:f0:d5:68:17:b0:c3:35: 7a:87:f7:67:dd:a5:4e:d1:6f:d3:a5:38:ca:04:a0:f2:8e:96: 85:51:39:85:49:aa:45:90:97:33:2f:ea:a9:08:d2:8d:04:aa: 7a:b8:9f:2a:66:2a:f8:ee:46:16:a6:81:fd:9b:1f:3f:99:ee: ff:5d:d4:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcmqfG4pTLzo8SrgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk NGY1MWQ0ZDItNWJjOC00NDRlLTk2OGUtN2IzNmRmNGQ4YWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF5Z7ZgwZmc7mVfcor86JGn3r+FP1/UYFRJI Q/dlM+X+F18Y8hOamvbHnksEvqnbNSEAIubCh5y/hEk0TxxUh09IJiqXhBHrUOrq 0ix2lvl8YRzTF2Z7aMP2N8Omv36zj9tRg9+/x1lbC3yudk+se/FtDD0XUz5R1sFl vKZfI9SU/dq06gg47v2dbuBKar3vfbTniA4zO0XsDyqIn5ohqBGo2VnyPlnt/8MP VhL6TTBkJshA7vfXAnQmdbALCNtecCoIrlabaWAt6hW5nMePJemlNeiKzvWqXGoz bBuEPl/bOLachisR9q8EqhnDt5gEMFeKKByIv1FlYje53sMJjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNktPzGxuQ6kANGawVoBN02EU7WyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvNjhhMDk0OTYtZGQxZi0z N2I5LWE4NzMtYzU0MWQ3OGJiNjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPo/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1SQU6lo6ylkK78fG9TqAUOxAV190llrJgzuc8D6RV4pMHGyA/3gi2w iRFhjDgb95UWU8tbBJvb9M5lPseRM3zrAPLVUmGDAjUi7jDtGNLbC0MHJUYVEKLO ejYBFl7jCDj86dVEcxN3Odm2j2+eSjLWtlenL1htSn0z8D0GH0olBXXuNURip3/i J02m+xuPimxs80r+L0q7TnA7yc0mhUCH11hnUn1aq3sEZIesR+qE9MAYk0ySzco4 1YQxn8a98NVoF7DDNXqH92fdpU7Rb9OlOMoEoPKOloVROYVJqkWQlzMv6qkI0o0E qnq4nypmKvjuRhamgf2bHz+Z7v9d1JU= -----END CERTIFICATE-----Generated at Sun Mar 22 09:55:30 2026 by rpki-client