$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/761dfbdd-a173-3ad2-bd21-feaed029fe6a.roa File: 761dfbdd-a173-3ad2-bd21-feaed029fe6a.roa (raw, json) Hash identifier: Ky+ffFcf5dCS2MtoUbg7+VLK9UR/lg1AzRlU7/YJKKw= Subject key identifier: 34:F4:B8:F1:88:F4:82:AC:2E:8F:73:CD:A1:19:CD:62:7B:5B:7B:7F Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584D117266B9ACA52148749C8B00 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/761dfbdd-a173-3ad2-bd21-feaed029fe6a.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 3738 IP address blocks: 192.250.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:66:b9:ac:a5:21:48:74:9c:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=c5f73d8c-9080-4c02-92ac-8f2bd61849dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:58:ee:0d:a8:5e:f1:cb:b7:be:46:2e:ff: 08:f4:5f:bc:ba:7f:a5:d2:97:cd:8e:1e:27:f0:95: e4:fe:5e:93:2c:fe:8f:5b:6c:63:ba:e9:ba:94:79: 49:a0:c5:47:5d:69:4d:71:2d:15:27:fb:d1:3d:d4: 02:db:a6:e1:00:b3:80:37:22:fa:9d:3d:79:1b:cd: 47:2b:99:56:be:4a:73:61:67:05:ea:aa:3c:08:77: c5:f2:22:12:7a:f4:b5:23:98:ca:cb:a0:f0:fe:b4: 7f:73:58:2d:27:a9:2d:a7:49:9e:5c:44:d7:3e:1b: 09:17:fd:e1:71:60:9d:4b:b4:2f:d5:b3:03:2f:7d: f6:10:33:3e:6b:78:1b:85:a0:92:1b:87:dd:a5:9e: 8d:76:24:08:d3:38:83:d8:23:8e:01:b4:b5:94:d6: 4a:9b:e0:34:c1:ab:78:49:35:45:eb:e8:f0:b1:ae: 6f:6e:81:78:77:af:d5:9a:e7:e1:22:8b:7a:de:06: 54:86:76:5c:e9:3b:8a:af:8a:e3:20:ad:25:51:7e: 3d:81:25:ad:f0:4f:18:e7:be:74:ca:9c:fb:7d:db: 12:e0:ca:6e:4c:f2:7c:20:1b:ac:27:34:9a:03:79: 3a:98:8a:ec:19:e9:4b:0b:db:df:17:f4:1a:b4:b1: 9c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F4:B8:F1:88:F4:82:AC:2E:8F:73:CD:A1:19:CD:62:7B:5B:7B:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/761dfbdd-a173-3ad2-bd21-feaed029fe6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ad:76:75:f9:a1:68:30:ff:2b:e5:cd:81:bc:6d:0e:2a:c9: d7:3b:4c:93:39:a9:77:0a:e7:5e:2b:73:6d:c9:f7:61:0c:ca: fe:c4:2b:c7:2b:9b:a4:95:8b:1a:85:6d:4a:29:b5:ee:07:09: d1:c5:8a:91:6a:10:9b:50:91:8a:f3:e3:01:27:34:70:cf:43: 9c:cc:20:ca:4a:23:cb:f1:02:5f:5e:8a:c8:4c:9e:98:03:b1: 37:46:e3:34:cc:0a:99:d2:4b:cf:f7:1a:4d:57:c6:9f:47:ec: 97:6c:c4:d7:83:3e:1c:2e:f3:f6:56:bb:84:b9:5b:c9:17:14: 58:ed:a1:b9:33:36:d4:86:55:d2:ec:7e:2a:1b:91:f9:08:3e: 91:7e:cd:7d:ea:62:dd:fe:ac:14:9e:ab:c6:f5:35:65:bf:63: bc:57:2f:28:90:e4:ca:0d:2d:f3:89:55:06:cb:ea:46:0d:8d: fd:57:21:42:65:a6:05:83:e9:ab:e4:fc:e5:1a:10:21:3c:03: 12:27:ce:2b:10:f3:12:8e:5f:59:da:ac:56:16:87:b7:17:22: 07:44:e3:b1:12:ca:05:02:55:72:94:a0:30:23:e6:75:96:b0: f8:03:22:17:1f:c9:d0:d7:2a:1d:0d:a1:22:d0:8b:e5:81:99: a8:4e:e1:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rcma5rKUhSHSciwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk YzVmNzNkOGMtOTA4MC00YzAyLTkyYWMtOGYyYmQ2MTg0OWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdFY7g2oXvHLt75GLv8I9F+8un+l0pfNjh4n 8JXk/l6TLP6PW2xjuum6lHlJoMVHXWlNcS0VJ/vRPdQC26bhALOANyL6nT15G81H K5lWvkpzYWcF6qo8CHfF8iISevS1I5jKy6Dw/rR/c1gtJ6ktp0meXETXPhsJF/3h cWCdS7Qv1bMDL332EDM+a3gbhaCSG4fdpZ6NdiQI0ziD2COOAbS1lNZKm+A0wat4 STVF6+jwsa5vboF4d6/VmufhIot63gZUhnZc6TuKr4rjIK0lUX49gSWt8E8Y5750 ypz7fdsS4MpuTPJ8IBusJzSaA3k6mIrsGelLC9vfF/QatLGcoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT0uPGI9IKsLo9zzaEZzWJ7W3t/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvNzYxZGZiZGQtYTE3My0z YWQyLWJkMjEtZmVhZWQwMjlmZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIitdnX5oWgw/yvlzYG8bQ4qydc7TJM5qXcK514rc23J92EMyv7EK8cr m6SVixqFbUopte4HCdHFipFqEJtQkYrz4wEnNHDPQ5zMIMpKI8vxAl9eishMnpgD sTdG4zTMCpnSS8/3Gk1Xxp9H7JdsxNeDPhwu8/ZWu4S5W8kXFFjtobkzNtSGVdLs fiobkfkIPpF+zX3qYt3+rBSeq8b1NWW/Y7xXLyiQ5MoNLfOJVQbL6kYNjf1XIUJl pgWD6avk/OUaECE8AxInzisQ8xKOX1narFYWh7cXIgdE47ESygUCVXKUoDAj5nWW sPgDIhcfydDXKh0NoSLQi+WBmahO4dw= -----END CERTIFICATE-----Generated at Sun Mar 22 09:55:31 2026 by rpki-client