$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/d669328d-af27-3040-b450-2b6cbbadf417.roa File: d669328d-af27-3040-b450-2b6cbbadf417.roa (raw, json) Hash identifier: swOQ3P5L6QKPq+uohFvbi/4Bk6JzSB7I9/y8Vh3gV9g= Subject key identifier: B1:04:EE:71:3F:AF:7F:CA:B2:B4:59:60:A5:85:B3:00:3F:90:98:BE Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584D09DAA8EFB2A336D8D8649C6C Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/d669328d-af27-3040-b450-2b6cbbadf417.roa Signing time: Mon 02 Mar 2026 20:44:25 +0000 ROA not before: Mon 02 Mar 2026 20:44:25 +0000 ROA not after: Sun 31 May 2026 19:44:25 +0000 asID: 3738 IP address blocks: 192.250.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:da:a8:ef:b2:a3:36:d8:d8:64:9c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Mar 2 20:44:25 2026 GMT Not After : May 31 19:44:25 2026 GMT Subject: CN=663c17e2-9ef6-4d39-91c0-4881731b9492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:73:52:80:84:de:0e:04:81:e2:a0:cc:73:34: 2f:73:f9:22:00:ae:cd:ef:9f:c6:f2:67:62:43:c3: 35:61:be:46:73:b9:eb:84:02:19:5b:8c:ae:ad:22: 9e:38:92:ee:d2:0f:28:c1:b5:e4:c9:bd:cc:53:fe: 48:14:04:22:13:40:31:c2:eb:32:b2:8a:2c:ed:36: 18:3d:ec:4f:a1:fd:c5:fe:01:db:b7:88:75:b5:a9: e6:6d:f8:2f:c6:65:1b:17:17:97:ea:f0:b4:fa:70: 42:8b:8d:94:88:ae:dc:31:1a:a7:bb:7a:a2:ef:b6: fd:ab:4c:2c:2e:0f:a8:6d:c2:5f:80:46:4e:33:e6: 55:08:67:8c:d5:ea:ed:c1:a0:95:0e:1c:74:a7:83: 93:62:28:63:5c:06:4b:6f:c6:e9:7c:fe:8d:b3:cb: a1:6e:87:2a:40:33:38:4e:e5:07:78:e2:56:30:52: 83:45:29:20:86:6c:67:d8:f8:f8:31:c9:a5:d8:2b: 9c:e9:ec:95:76:96:36:c3:9a:2c:3b:78:3c:5d:71: 38:3e:ba:99:00:9a:1e:da:fc:91:1b:cf:ef:17:16: 02:f1:33:8e:53:e1:1b:a2:b6:34:66:cb:0a:ab:aa: 9d:b7:74:b6:22:04:3d:e2:d0:ca:e5:77:e2:f8:88: 61:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:04:EE:71:3F:AF:7F:CA:B2:B4:59:60:A5:85:B3:00:3F:90:98:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/d669328d-af27-3040-b450-2b6cbbadf417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:57:c5:71:42:85:0d:a2:48:2f:1d:ed:a0:02:b2:3d:61:dd: e4:aa:88:60:5b:18:9e:d9:dd:48:30:a5:2c:df:d9:d6:0f:f0: 84:5b:59:eb:09:e5:7b:ec:33:73:69:bb:ba:fc:2e:c8:e9:de: 7c:18:e4:b4:bf:ae:0c:a0:14:c3:7f:35:07:e3:96:3e:49:46: 87:84:05:87:f1:60:c4:a3:a8:f1:f1:2c:ee:7c:01:21:a4:54: 02:dd:0d:a3:5e:4a:d8:b6:50:09:27:4f:e4:9c:81:cb:8c:01: 46:0e:ab:18:a1:c0:51:25:0e:7c:38:1b:76:a3:19:43:d1:0c: 93:43:71:ff:3b:c7:af:c2:b8:b0:20:5b:08:33:d8:04:19:54: 9b:54:d4:11:7c:30:8d:06:45:e4:27:a6:29:4a:f9:fd:1f:a6: b1:82:a7:a1:7a:9f:83:01:24:6f:56:84:63:d6:31:8e:8b:f7: 22:3d:ef:5a:63:26:f6:5a:b9:b5:bd:e6:a2:1d:8f:a5:b9:80: f0:2a:aa:4d:96:c4:6d:ea:b2:0a:70:c0:27:31:9b:5d:40:b3: 2e:51:73:1a:77:68:f2:4c:16:ed:c7:f9:c2:ca:2a:7b:ec:bd: 33:87:36:8b:12:27:b5:b7:75:cc:04:5f:a0:67:a7:37:55:43: 4b:2e:93:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0J2qjvsqM22NhknGwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDMwMjIwNDQyNVoXDTI2MDUzMTE5NDQyNVowLzEtMCsGA1UEAxMk NjYzYzE3ZTItOWVmNi00ZDM5LTkxYzAtNDg4MTczMWI5NDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXNSgITeDgSB4qDMczQvc/kiAK7N75/G8mdi Q8M1Yb5Gc7nrhAIZW4yurSKeOJLu0g8owbXkyb3MU/5IFAQiE0Axwusysoos7TYY PexPof3F/gHbt4h1tanmbfgvxmUbFxeX6vC0+nBCi42UiK7cMRqnu3qi77b9q0ws Lg+obcJfgEZOM+ZVCGeM1ertwaCVDhx0p4OTYihjXAZLb8bpfP6Ns8uhbocqQDM4 TuUHeOJWMFKDRSkghmxn2Pj4Mcml2Cuc6eyVdpY2w5osO3g8XXE4PrqZAJoe2vyR G8/vFxYC8TOOU+EborY0ZssKq6qdt3S2IgQ94tDK5Xfi+IhhywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEE7nE/r3/KsrRZYKWFswA/kJi+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvZDY2OTMyOGQtYWYyNy0z MDQwLWI0NTAtMmI2Y2JiYWRmNDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPq1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZXxXFChQ2iSC8d7aACsj1h3eSqiGBbGJ7Z3UgwpSzf2dYP8IRbWesJ 5XvsM3Npu7r8Lsjp3nwY5LS/rgygFMN/NQfjlj5JRoeEBYfxYMSjqPHxLO58ASGk VALdDaNeSti2UAknT+ScgcuMAUYOqxihwFElDnw4G3ajGUPRDJNDcf87x6/CuLAg Wwgz2AQZVJtU1BF8MI0GReQnpilK+f0fprGCp6F6n4MBJG9WhGPWMY6L9yI971pj JvZaubW95qIdj6W5gPAqqk2WxG3qsgpwwCcxm11Asy5Rcxp3aPJMFu3H+cLKKnvs vTOHNosSJ7W3dcwEX6BnpzdVQ0suk74= -----END CERTIFICATE-----Generated at Sun Mar 22 09:53:59 2026 by rpki-client