$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/6bff204f-baf3-3c15-a992-3135c46aad0b.roa File: 6bff204f-baf3-3c15-a992-3135c46aad0b.roa (raw, json) Hash identifier: 3ZsXg5eVUEcS/3mtFeygdRE0J8ApP2uu6MvSD5kAR3I= Subject key identifier: B8:28:8B:00:20:6D:80:3F:58:71:0B:83:C1:0E:19:74:76:2F:C5:FC Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584D0D426FE67F4A6490BDDE1850 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/6bff204f-baf3-3c15-a992-3135c46aad0b.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 40244 IP address blocks: 192.154.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:6f:e6:7f:4a:64:90:bd:de:18:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=c8036f33-70a4-4715-bef0-61fd19b3729d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:46:59:5c:94:cb:f9:c1:9a:86:af:88:5b:b4: 11:51:22:38:ee:c2:f6:e6:2b:24:c2:cc:3f:b4:00: 89:42:a3:75:3e:47:0d:ba:1f:06:cc:ff:62:e1:3b: 1d:3a:8d:74:97:c0:d3:b2:47:43:3f:13:cf:9e:df: 2e:57:7f:8f:fd:f3:4f:60:86:f8:b2:bc:fc:88:2f: 01:89:54:a4:64:75:a7:e0:da:6f:21:d1:50:bd:58: e7:a1:84:27:1c:e6:2b:93:42:c0:57:7f:74:73:33: 40:8c:44:d5:27:2f:0d:2f:94:0c:f4:cf:4a:8f:d0: ff:37:df:22:40:73:3c:8c:be:53:2a:f5:45:1b:01: db:12:72:bd:a5:77:4b:e0:68:c0:3c:4a:92:48:ea: 0d:df:1b:5f:90:ce:3d:9a:df:bc:ef:5d:10:ac:e5: dd:62:f2:1e:c1:ac:42:d7:72:e7:0f:72:55:5e:5a: 7b:1e:d2:d7:46:4f:01:fc:68:9e:49:6f:d7:48:c7: 32:14:5d:6b:f1:21:4a:d8:a4:ae:90:1e:6c:2c:c5: 7b:ef:04:71:e8:e1:93:69:1d:57:30:1d:3d:e2:9d: 0f:c8:6c:1f:fd:04:a7:f2:8e:91:41:10:6f:06:21: e6:e4:c5:f4:28:40:bd:a1:9e:28:59:e3:45:56:b8: b0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:28:8B:00:20:6D:80:3F:58:71:0B:83:C1:0E:19:74:76:2F:C5:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/6bff204f-baf3-3c15-a992-3135c46aad0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 192.154.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:8e:00:42:06:6d:04:a1:a9:0a:5a:3b:d5:8b:83:45:0a:04: 78:33:80:aa:1f:2d:25:bf:fe:da:ce:29:2c:d5:13:d2:83:00: 71:f8:f7:ce:e8:49:80:c8:96:7d:f3:32:32:1f:b5:3d:07:e2: 0c:17:9d:a2:3f:37:b2:d5:cd:b9:b1:29:88:8a:a2:71:38:54: 4b:91:a9:47:e0:e4:24:0b:db:b2:c7:5e:ff:e3:9c:1f:e6:47: f8:a7:da:7d:f9:de:fe:7d:34:07:d6:cb:51:a1:62:f3:7e:11: 82:58:bc:fa:38:ff:57:33:db:48:de:9a:89:28:92:5f:2a:e7: 24:f2:45:78:47:db:b9:d0:d1:42:08:38:20:54:8c:f9:d4:76: 90:72:b8:cb:df:cf:14:46:4a:6d:ac:70:43:e6:e1:7b:c6:1c: 8b:c2:c0:c3:e7:20:fe:09:aa:53:99:51:1a:97:a9:c0:f5:ed: 7d:1b:bc:18:06:64:32:07:af:3a:45:24:0e:fd:86:f7:7e:f0: 0e:61:6c:44:30:03:f5:d6:fb:83:f2:b9:8e:8e:29:62:bc:0c: ea:ca:2d:6b:f7:d7:04:b0:41:ba:99:51:7c:7e:7d:a8:5c:69: 37:3d:07:e5:0b:0f:9a:aa:6a:00:3e:40:f5:bb:a7:54:aa:63: 73:68:c9:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQm/mf0pkkL3eGFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk YzgwMzZmMzMtNzBhNC00NzE1LWJlZjAtNjFmZDE5YjM3MjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0ZZXJTL+cGahq+IW7QRUSI47sL25iskwsw/ tACJQqN1PkcNuh8GzP9i4TsdOo10l8DTskdDPxPPnt8uV3+P/fNPYIb4srz8iC8B iVSkZHWn4NpvIdFQvVjnoYQnHOYrk0LAV390czNAjETVJy8NL5QM9M9Kj9D/N98i QHM8jL5TKvVFGwHbEnK9pXdL4GjAPEqSSOoN3xtfkM49mt+8710QrOXdYvIewaxC 13LnD3JVXlp7HtLXRk8B/GieSW/XSMcyFF1r8SFK2KSukB5sLMV77wRx6OGTaR1X MB094p0PyGwf/QSn8o6RQRBvBiHm5MX0KEC9oZ4oWeNFVriw7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgoiwAgbYA/WHELg8EOGXR2L8X8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvNmJmZjIwNGYtYmFmMy0z YzE1LWE5OTItMzEzNWM0NmFhZDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJeOAEIGbQShqQpaO9WLg0UKBHgzgKofLSW//trOKSzVE9KDAHH4987o SYDIln3zMjIftT0H4gwXnaI/N7LVzbmxKYiKonE4VEuRqUfg5CQL27LHXv/jnB/m R/in2n353v59NAfWy1GhYvN+EYJYvPo4/1cz20jemokokl8q5yTyRXhH27nQ0UII OCBUjPnUdpByuMvfzxRGSm2scEPm4XvGHIvCwMPnIP4JqlOZURqXqcD17X0bvBgG ZDIHrzpFJA79hvd+8A5hbEQwA/XW+4PyuY6OKWK8DOrKLWv31wSwQbqZUXx+fahc aTc9B+ULD5qqagA+QPW7p1SqY3NoyV0= -----END CERTIFICATE-----Generated at Fri Mar 13 10:40:11 2026 by rpki-client