$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa File: fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa (raw, json) Hash identifier: oxwiDOaXMqsIxQ6S3/ZuDKynAiP8oo/HZF6Epombpx0= Subject key identifier: 80:2B:D9:09:05:2C:11:FB:AC:63:F8:2B:6B:B4:2B:EA:E8:A8:E0:2F Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584D11726646C133F324BCB0C780 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 3738 IP address blocks: 192.250.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:66:46:c1:33:f3:24:bc:b0:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=04358e2d-6322-460f-beab-acda957c39a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c6:43:53:08:70:51:52:cc:f7:22:e4:41:c9: 0f:b9:d0:1e:64:a0:86:47:6f:77:6b:2e:56:44:f3: 38:6c:97:26:7c:ba:76:c1:57:10:39:66:d2:5e:3e: 67:3a:db:f4:0c:e4:62:e1:55:4a:c9:c8:91:27:62: e4:1d:b7:3a:f1:c0:cf:ac:4c:34:ae:2a:ba:e3:37: 36:b9:8c:85:f0:71:e5:05:22:d6:7b:db:2e:c9:9a: e8:f3:82:08:39:13:ca:ae:62:b4:db:b5:c0:12:c8: a9:8b:c3:22:45:e5:90:ff:0c:75:2e:fb:9a:cc:b0: f6:c6:63:50:6d:10:4a:46:57:0a:f5:b4:d4:4a:bf: e7:b7:8e:e3:34:a6:78:d2:87:a6:aa:42:b5:ef:46: 4f:9e:e2:48:7d:b8:80:3c:bc:7f:3e:78:c0:55:b1: bd:0f:fa:cd:63:aa:22:8f:fc:09:cd:86:f6:75:63: a4:f7:ea:94:da:cf:f4:a8:e1:75:61:9c:13:3b:58: 7a:0e:5d:ad:79:75:55:9c:d6:c4:d2:31:f3:6d:4d: 19:79:d9:67:c5:08:8e:6b:16:ea:79:fc:cc:ab:39: 3b:06:79:5b:da:51:7e:13:ca:2e:a9:35:a5:c2:d3: 41:c4:74:f2:94:d3:25:d1:84:77:a5:43:80:24:0a: 9b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2B:D9:09:05:2C:11:FB:AC:63:F8:2B:6B:B4:2B:EA:E8:A8:E0:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:54:64:0e:22:47:18:4e:8a:18:43:8f:b9:b7:33:c2:2b:bb: b2:8f:9a:59:96:3a:28:76:95:ae:b6:45:aa:c2:3e:83:83:6f: 98:1d:42:47:fc:9f:84:e1:b5:1c:5e:7d:f2:12:64:b4:b2:a8: 2f:88:2d:e8:6b:ca:08:08:7e:e6:7c:85:85:f5:a6:ef:d5:cf: b9:1e:e0:a1:7a:8b:d9:9c:2e:6f:ed:67:f8:06:8d:7d:3d:36: 94:6f:de:84:8f:a2:13:b7:71:de:0e:cd:58:51:1a:b9:22:b8: a3:9f:7c:6c:d8:92:02:ba:cf:c9:99:77:d7:3f:da:5d:89:57: 42:ff:eb:32:1d:f8:2e:58:6f:27:51:46:19:ef:00:e6:5f:62: b8:49:59:de:f3:69:66:03:54:dc:61:ff:6e:f3:ca:dd:62:03: 51:f4:2e:cb:21:95:42:3d:5e:80:52:3a:3d:14:03:4e:9d:18: 9a:46:6d:44:04:18:49:7c:f0:36:b4:a5:2d:62:97:d8:c5:68: 79:55:05:7a:f6:1a:73:b8:3b:2e:ab:b3:e0:6f:6e:8e:b0:b2: 86:f4:2c:f6:59:39:12:22:41:ca:21:cf:2f:55:0e:82:6c:b1: 25:e9:72:5a:25:99:45:d3:dc:a3:76:6e:e9:3d:7c:b2:a6:04: 42:a0:36:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RcmZGwTPzJLywx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk MDQzNThlMmQtNjMyMi00NjBmLWJlYWItYWNkYTk1N2MzOWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MZDUwhwUVLM9yLkQckPudAeZKCGR293ay5W RPM4bJcmfLp2wVcQOWbSXj5nOtv0DORi4VVKyciRJ2LkHbc68cDPrEw0riq64zc2 uYyF8HHlBSLWe9suyZro84IIORPKrmK027XAEsipi8MiReWQ/wx1LvuazLD2xmNQ bRBKRlcK9bTUSr/nt47jNKZ40oemqkK170ZPnuJIfbiAPLx/PnjAVbG9D/rNY6oi j/wJzYb2dWOk9+qU2s/0qOF1YZwTO1h6Dl2teXVVnNbE0jHzbU0ZedlnxQiOaxbq efzMqzk7Bnlb2lF+E8ouqTWlwtNBxHTylNMl0YR3pUOAJAqbtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAr2QkFLBH7rGP4K2u0K+roqOAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvZmE5Y2ViMjYtYWVkYi0z OWRiLThlZmQtM2EzOTgyNTA2YjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFUZA4iRxhOihhDj7m3M8Iru7KPmlmWOih2la62RarCPoODb5gdQkf8 n4ThtRxeffISZLSyqC+ILehryggIfuZ8hYX1pu/Vz7ke4KF6i9mcLm/tZ/gGjX09 NpRv3oSPohO3cd4OzVhRGrkiuKOffGzYkgK6z8mZd9c/2l2JV0L/6zId+C5YbydR RhnvAOZfYrhJWd7zaWYDVNxh/27zyt1iA1H0LsshlUI9XoBSOj0UA06dGJpGbUQE GEl88Da0pS1il9jFaHlVBXr2GnO4Oy6rs+Bvbo6wsob0LPZZORIiQcohzy9VDoJs sSXpclolmUXT3KN2buk9fLKmBEKgNms= -----END CERTIFICATE-----Generated at Sun Mar 22 09:55:20 2026 by rpki-client