$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa File: fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa (raw, json) Hash identifier: 9qW0EZqo5NPiCVkQkxe3pT3CMP5vNyEngF/3hJ8OIgY= Subject key identifier: B2:CD:B0:A5:21:E6:79:72:52:FA:E1:85:52:C1:CF:B1:04:BA:FA:20 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584EA795367466F7CC01C642EC40 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3738 IP address blocks: 192.250.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:36:74:66:f7:cc:01:c6:42:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e8800770-8373-456b-af5c-3cb8baa26001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:00:46:56:1f:54:ef:26:8d:56:ed:93:e3: 72:b6:5e:31:e4:59:39:0b:df:03:a1:ca:54:e0:f3: 51:fb:c0:c8:55:8c:8b:4e:56:31:f2:1d:09:d0:df: 55:9c:1a:8c:a2:62:27:b4:86:8f:5d:bd:71:bc:4d: 2f:f6:4a:0f:0b:d5:e0:45:df:79:ac:8e:01:c1:e4: 9d:96:32:ce:9d:53:81:52:6d:b0:e1:dd:79:f6:d4: 2c:d7:34:76:1b:8b:a2:9d:52:11:49:f0:1a:a4:85: 68:a3:7d:4e:9d:f4:f2:24:30:81:75:92:e2:f5:78: 10:e3:18:81:c1:8e:1f:88:37:8b:fe:37:2f:dc:93: 0a:76:ac:71:ef:af:6a:4d:ca:88:5e:69:40:ac:e7: ce:d3:92:01:dc:4c:73:90:27:6b:ad:7c:06:3c:06: 4b:8e:75:5d:e1:8f:62:e6:ed:5b:14:c1:01:5b:d5: 6b:90:55:4b:3f:ed:67:73:4a:59:62:e4:89:4c:9c: 4e:70:b5:c0:3c:4f:c8:47:85:84:56:d8:1b:9b:33: 9d:c4:69:7a:d2:f6:f9:66:40:5f:95:f9:67:6b:38: dc:5a:29:e8:30:04:73:b5:68:dd:d7:b4:1f:4f:cd: bf:9c:bc:fb:db:67:fc:9a:93:f2:a3:09:f1:f5:f3: 8e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CD:B0:A5:21:E6:79:72:52:FA:E1:85:52:C1:CF:B1:04:BA:FA:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ce:5e:33:b1:d1:e2:48:27:3e:3c:c6:e3:5c:78:70:1f:d8: 94:6f:f1:e0:3d:c2:9b:07:06:8d:86:4f:cc:d4:fb:75:66:2d: e1:b6:1d:7c:74:99:26:b8:5b:83:aa:20:10:b2:5f:03:bd:c3: bc:a1:44:23:2b:d9:ed:b4:21:13:91:e4:80:1e:50:2d:21:d6: 60:29:46:cb:6f:11:1d:a7:17:cb:66:56:8b:8b:ae:42:56:4f: 47:81:ab:bb:de:0a:29:63:9c:2f:b1:02:d1:73:01:3c:64:79: 05:ee:a1:13:b9:0d:a8:27:7c:34:b8:68:6e:92:c4:cd:74:db: 4e:cf:f5:cf:c9:57:2a:bb:fd:b3:4b:01:5e:92:aa:b0:a4:51: 09:d4:48:1c:1f:42:c4:fd:36:f1:5c:8d:b1:36:bd:4f:30:49: da:c3:2a:82:0f:71:dd:76:cf:4a:16:22:48:8f:a4:47:2e:9e: 03:54:a3:d1:b4:78:b2:71:ba:2b:79:07:61:c9:25:49:89:e9: 10:19:5f:c8:04:20:85:0a:d0:2d:94:33:80:ea:27:cc:91:07: 7e:6e:02:70:59:89:12:b5:65:3c:7f:3d:07:c3:93:49:4e:40: 3b:f7:a8:51:ef:17:22:ad:4e:f7:21:41:86:1c:7d:9c:b3:16: ab:50:ba:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlTZ0ZvfMAcZC7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTg4MDA3NzAtODM3My00NTZiLWFmNWMtM2NiOGJhYTI2MDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzAARlYfVO8mjVbtk+Nytl4x5Fk5C98DocpU 4PNR+8DIVYyLTlYx8h0J0N9VnBqMomIntIaPXb1xvE0v9koPC9XgRd95rI4BweSd ljLOnVOBUm2w4d159tQs1zR2G4uinVIRSfAapIVoo31OnfTyJDCBdZLi9XgQ4xiB wY4fiDeL/jcv3JMKdqxx769qTcqIXmlArOfO05IB3ExzkCdrrXwGPAZLjnVd4Y9i 5u1bFMEBW9VrkFVLP+1nc0pZYuSJTJxOcLXAPE/IR4WEVtgbmzOdxGl60vb5ZkBf lflnazjcWinoMARztWjd17QfT82/nLz722f8mpPyownx9fOOOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLNsKUh5nlyUvrhhVLBz7EEuvogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvZmE5Y2ViMjYtYWVkYi0z OWRiLThlZmQtM2EzOTgyNTA2YjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvOXjOx0eJIJz48xuNceHAf2JRv8eA9wpsHBo2GT8zU+3VmLeG2HXx0 mSa4W4OqIBCyXwO9w7yhRCMr2e20IROR5IAeUC0h1mApRstvER2nF8tmVouLrkJW T0eBq7veCiljnC+xAtFzATxkeQXuoRO5DagnfDS4aG6SxM10207P9c/JVyq7/bNL AV6SqrCkUQnUSBwfQsT9NvFcjbE2vU8wSdrDKoIPcd12z0oWIkiPpEcungNUo9G0 eLJxuit5B2HJJUmJ6RAZX8gEIIUK0C2UM4DqJ8yRB35uAnBZiRK1ZTx/PQfDk0lO QDv3qFHvFyKtTvchQYYcfZyzFqtQulk= -----END CERTIFICATE-----Generated at Wed Aug 19 23:57:35 2026 by rpki-client