$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/a5fba1ee-30dd-3f77-bb59-98ac450d70e3.roa File: a5fba1ee-30dd-3f77-bb59-98ac450d70e3.roa (raw, json) Hash identifier: xqBfrFXkJ0seFaDllc1YyMrvEUug2GCHRK3QH7eWhUk= Subject key identifier: 70:C8:44:6B:CD:0B:9C:FD:FA:3A:9C:92:A4:30:20:CD:28:62:3D:5E Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584D11726A3B660CCC12CE718F00 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/a5fba1ee-30dd-3f77-bb59-98ac450d70e3.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 3738 IP address blocks: 192.250.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:6a:3b:66:0c:cc:12:ce:71:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=7835401c-6277-460c-b994-7d9e6f2bd8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d6:7f:a5:3b:9d:03:58:52:23:da:d0:8c:f5: f7:f8:0b:6a:b2:5d:38:e0:ed:75:39:4e:02:9c:5f: 7b:81:7f:aa:ea:1d:6b:43:4e:4a:25:a2:ab:18:74: e3:95:fb:ac:40:64:98:b3:29:7d:09:53:58:6d:e6: 00:e4:f4:a3:39:c2:cc:4f:62:7a:f4:45:60:f4:fc: d1:80:a2:9a:fc:a7:df:f7:45:f6:6a:8d:f2:b3:27: 92:c7:f4:9a:14:82:9a:c6:b3:73:12:58:b1:b3:34: 3d:6e:b1:d5:e6:72:e6:0e:80:e2:d9:24:97:13:43: 36:89:14:3f:cc:d8:c1:03:59:6f:47:bd:a5:5e:a0: 70:53:8d:87:fc:c7:c8:aa:90:1e:31:dc:4c:08:8a: ed:e3:c4:b7:49:3b:c3:3e:68:90:5e:9f:9c:a8:7f: 9f:d9:f0:38:09:57:dc:5e:61:9e:11:5f:7e:1f:31: e1:8d:fb:9f:fd:5d:93:73:30:94:0e:e8:2b:d7:98: 2d:35:b7:5d:23:26:0b:8c:21:39:3a:e5:20:41:4a: 32:bf:4f:a7:87:26:16:fa:51:20:3a:d8:5e:cb:7c: c2:01:a8:01:cc:a3:17:85:bc:6d:56:25:d1:c9:64: ed:e3:a6:74:bb:7e:50:54:79:77:dc:d9:ca:e1:89: fe:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C8:44:6B:CD:0B:9C:FD:FA:3A:9C:92:A4:30:20:CD:28:62:3D:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/a5fba1ee-30dd-3f77-bb59-98ac450d70e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:87:43:9f:74:69:9b:5f:e8:f7:61:1a:b1:49:98:2b:e0:f4: 48:be:eb:ac:13:7f:df:da:25:83:45:55:bf:40:0a:49:9c:92: e1:1d:bd:e3:79:01:6c:d2:9c:45:7b:3b:0e:22:94:00:3d:3d: c9:aa:7f:d4:36:2d:78:e1:90:ec:c6:94:ba:fe:df:4d:ee:79: ef:72:d1:56:c3:aa:28:3f:81:ba:bc:49:80:26:85:63:b5:02: e7:c0:8e:2a:dc:fd:e1:ec:e4:47:3a:64:09:59:80:6c:69:55: 9e:c2:32:74:91:db:24:a6:46:d4:f7:d9:ce:c9:1f:b9:82:85: e1:6a:83:69:ea:65:fa:8a:7c:14:30:3e:2b:60:03:2b:06:b5: 84:04:df:d6:56:a8:00:07:2d:1f:2b:fc:95:7d:04:c9:59:28: 93:45:7d:de:4c:07:21:57:14:5d:90:e5:c1:0c:4e:7b:70:64: 76:e3:72:6c:53:47:b0:f3:7a:5a:9a:01:ec:97:9a:c2:c9:92: 5c:5f:d6:a6:99:f7:7b:fb:0a:ca:37:52:19:40:23:8c:61:0b: f6:45:ec:ab:ee:19:99:1b:5a:3e:14:d7:1d:17:98:df:8d:52: ab:f7:06:45:3d:c5:cd:f7:ff:64:6a:69:98:79:70:27:e2:64: 2c:36:97:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rcmo7ZgzMEs5xjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk NzgzNTQwMWMtNjI3Ny00NjBjLWI5OTQtN2Q5ZTZmMmJkOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNZ/pTudA1hSI9rQjPX3+Atqsl044O11OU4C nF97gX+q6h1rQ05KJaKrGHTjlfusQGSYsyl9CVNYbeYA5PSjOcLMT2J69EVg9PzR gKKa/Kff90X2ao3ysyeSx/SaFIKaxrNzElixszQ9brHV5nLmDoDi2SSXE0M2iRQ/ zNjBA1lvR72lXqBwU42H/MfIqpAeMdxMCIrt48S3STvDPmiQXp+cqH+f2fA4CVfc XmGeEV9+HzHhjfuf/V2TczCUDugr15gtNbddIyYLjCE5OuUgQUoyv0+nhyYW+lEg Othey3zCAagBzKMXhbxtViXRyWTt46Z0u35QVHl33NnK4Yn+8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDIRGvNC5z9+jqckqQwIM0oYj1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYTVmYmExZWUtMzBkZC0z Zjc3LWJiNTktOThhYzQ1MGQ3MGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGHQ590aZtf6PdhGrFJmCvg9Ei+66wTf9/aJYNFVb9ACkmckuEdveN5 AWzSnEV7Ow4ilAA9Pcmqf9Q2LXjhkOzGlLr+303uee9y0VbDqig/gbq8SYAmhWO1 AufAjirc/eHs5Ec6ZAlZgGxpVZ7CMnSR2ySmRtT32c7JH7mCheFqg2nqZfqKfBQw PitgAysGtYQE39ZWqAAHLR8r/JV9BMlZKJNFfd5MByFXFF2Q5cEMTntwZHbjcmxT R7DzelqaAeyXmsLJklxf1qaZ93v7Cso3UhlAI4xhC/ZF7KvuGZkbWj4U1x0XmN+N Uqv3BkU9xc33/2RqaZh5cCfiZCw2lw8= -----END CERTIFICATE-----Generated at Sun Mar 22 09:55:32 2026 by rpki-client