$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa File: c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa (raw, json) Hash identifier: PQ6EczPgn9tAorCV8F8xV7c5N+b9Jy978pTaE+UX1s4= Subject key identifier: 81:71:C0:A3:76:73:9B:B8:A1:57:04:79:14:7F:90:1E:B8:40:3E:C8 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584D117266A73EB64C4364E3D100 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 3738 IP address blocks: 192.250.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:66:a7:3e:b6:4c:43:64:e3:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=edb7db18-4b79-4525-832b-919f8a9b6d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:35:44:9d:d1:cc:af:28:67:4c:53:61:19:c5: 85:b2:78:10:79:19:da:c5:b8:14:5a:3d:b8:18:54: ff:07:d4:a8:ed:b1:03:2e:5e:71:09:78:e2:99:a1: 4f:83:85:b8:c7:d8:08:4f:bc:78:85:d3:de:4d:b3: 16:8a:2a:df:54:4f:ad:c5:52:2c:ba:31:04:6b:3e: b7:67:90:08:ff:95:6a:ca:fc:81:c1:62:33:44:ea: d1:6f:78:ac:e2:f3:ed:9d:69:64:78:c9:bd:d9:5e: c0:2e:1b:29:c0:6d:30:51:25:6e:fe:11:c1:e8:7e: e4:6f:a5:c5:13:9e:ae:a7:77:3b:18:d4:3c:4c:cd: 37:38:42:fe:40:cd:76:9e:d7:ad:6c:d9:d3:96:8f: 1c:97:01:9c:9c:e4:e6:b6:e2:96:f4:b0:cc:e8:30: a0:46:74:6d:0b:35:68:1d:da:2d:25:0c:fc:95:2f: dd:0f:4e:4e:5b:bc:21:c3:ea:3a:e8:87:3b:f8:e8: f3:04:fb:0e:bd:07:03:5a:31:69:36:6a:bc:b0:0d: 42:e5:f6:67:eb:b9:ae:20:0a:02:72:95:d8:e2:e1: 98:01:ff:48:2b:9b:f7:ef:8d:26:1d:b3:51:c0:30: 10:15:51:1e:65:3c:fb:d8:d3:d8:50:46:dc:6c:90: 66:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:71:C0:A3:76:73:9B:B8:A1:57:04:79:14:7F:90:1E:B8:40:3E:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:3b:2e:20:4d:5c:81:4d:2f:dc:32:54:32:39:ce:05:b8:37: f5:e1:6a:50:84:24:ca:6d:de:24:5b:4c:e3:21:d9:f1:6b:31: 1a:96:e8:46:49:7f:00:df:f3:79:16:f5:51:eb:d8:0a:11:5a: 57:5a:02:d3:45:3c:13:bd:13:39:ca:89:d8:14:dd:ca:90:d4: 60:ad:db:17:f9:7f:75:b7:8f:b4:27:e5:d8:d9:4b:02:04:bf: 32:84:36:d7:d2:de:28:1e:4c:2e:6a:62:a2:f1:cd:e9:9c:7b: 7d:17:c5:ca:39:4a:f0:a9:2d:6b:e2:c9:55:e1:64:a4:1c:c8: ea:25:00:b4:97:6d:a9:25:f2:f3:1c:6a:31:f5:09:5d:75:4f: 80:99:ac:3a:80:5f:e2:ff:a0:c2:12:56:d1:25:a7:3a:35:8b: 83:e3:32:b0:ac:ac:7b:e2:a5:16:93:0f:e6:00:07:bd:98:dd: b0:36:b5:a0:cd:cc:01:bb:03:02:31:f3:fc:80:1d:cd:34:17: 89:0d:2a:14:31:cb:81:2f:33:44:c6:72:66:eb:55:25:e7:c2: 52:34:86:c7:f2:ce:9d:99:56:ae:49:62:76:06:37:52:72:3f: 12:e6:96:28:29:d9:65:0e:de:de:8e:29:06:10:1c:f8:a5:e0: 4d:82:b3:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcmanPrZMQ2Tj0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk ZWRiN2RiMTgtNGI3OS00NTI1LTgzMmItOTE5ZjhhOWI2ZDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTVEndHMryhnTFNhGcWFsngQeRnaxbgUWj24 GFT/B9So7bEDLl5xCXjimaFPg4W4x9gIT7x4hdPeTbMWiirfVE+txVIsujEEaz63 Z5AI/5VqyvyBwWIzROrRb3is4vPtnWlkeMm92V7ALhspwG0wUSVu/hHB6H7kb6XF E56up3c7GNQ8TM03OEL+QM12ntetbNnTlo8clwGcnOTmtuKW9LDM6DCgRnRtCzVo HdotJQz8lS/dD05OW7whw+o66Ic7+OjzBPsOvQcDWjFpNmq8sA1C5fZn67muIAoC cpXY4uGYAf9IK5v3740mHbNRwDAQFVEeZTz72NPYUEbcbJBmUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFxwKN2c5u4oVcEeRR/kB64QD7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYzg5NWMyMzAtOGZlMS0z ZDkzLWFkNGItMzg1ZTc3ZTJiMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE7LiBNXIFNL9wyVDI5zgW4N/XhalCEJMpt3iRbTOMh2fFrMRqW6EZJ fwDf83kW9VHr2AoRWldaAtNFPBO9EznKidgU3cqQ1GCt2xf5f3W3j7Qn5djZSwIE vzKENtfS3igeTC5qYqLxzemce30Xxco5SvCpLWviyVXhZKQcyOolALSXbakl8vMc ajH1CV11T4CZrDqAX+L/oMISVtElpzo1i4PjMrCsrHvipRaTD+YAB72Y3bA2taDN zAG7AwIx8/yAHc00F4kNKhQxy4EvM0TGcmbrVSXnwlI0hsfyzp2ZVq5JYnYGN1Jy PxLmligp2WUO3t6OKQYQHPil4E2CsyM= -----END CERTIFICATE-----Generated at Sun Mar 22 09:55:20 2026 by rpki-client