$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/67376c8e-267d-36f2-814a-f2c489f44f6e.roa File: 67376c8e-267d-36f2-814a-f2c489f44f6e.roa (raw, json) Hash identifier: AmNtFErf73ReDjNfcUvo5w0Nk798wyMLJMrpmIKRlpo= Subject key identifier: AB:2F:BC:1A:CD:C7:F4:F6:69:88:1C:A8:D0:34:06:73:E1:AB:21:6F Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584DF210892027CD1D6017741E80 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/67376c8e-267d-36f2-814a-f2c489f44f6e.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 3738 IP address blocks: 192.250.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:89:20:27:cd:1d:60:17:74:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=1c533157-dbcd-4058-afc9-cfc598af804f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2f:7f:e0:f2:34:db:ca:84:a1:a5:fc:5f:cd: 83:dc:1f:c7:92:22:f3:9e:d0:f0:93:a5:cf:2e:ac: d3:9c:b2:9c:28:fb:59:c5:cb:39:3e:72:3f:39:04: 7e:aa:ab:d2:1b:47:98:e9:d7:57:c3:4f:30:41:c5: 9b:68:0d:dd:28:3d:b6:0b:58:ef:a6:8f:8e:58:4d: e4:30:4d:09:2e:b7:ba:1e:e4:47:1e:94:61:a0:e5: 70:2e:9b:a7:bb:d8:74:e4:91:c5:35:69:f1:15:56: 14:86:25:ba:a3:9a:93:ff:17:1f:2a:fb:fd:8b:26: 08:0b:72:68:cf:4a:48:f8:d5:84:dd:02:27:18:79: 34:49:d3:ab:73:b0:ed:90:0e:8e:cc:d1:cd:ca:0a: 1c:75:b6:c0:ed:f4:e6:4d:e8:36:9b:45:c2:15:d1: ec:27:43:c5:f9:a2:b1:c7:58:4a:38:78:01:38:02: 28:51:6e:e8:b8:b4:25:ad:a5:1d:ea:ab:89:e9:ac: e8:7c:ee:a8:e9:74:75:0b:27:d5:a0:88:f6:95:7b: a4:d7:cc:ae:f7:c4:c7:52:d5:60:b9:67:56:64:8c: b4:9f:07:61:26:54:77:d5:a0:22:73:08:ca:db:64: c0:7d:7a:11:2d:11:b5:5d:6f:86:aa:67:53:01:5e: b3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2F:BC:1A:CD:C7:F4:F6:69:88:1C:A8:D0:34:06:73:E1:AB:21:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/67376c8e-267d-36f2-814a-f2c489f44f6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b7:01:5b:9c:28:2f:3a:64:3f:25:34:22:43:e1:ba:83:12: 7f:ef:c1:25:e1:31:9d:23:89:e7:fc:9d:03:8e:7b:b3:27:15: ac:db:ca:c2:3b:9d:9f:81:cc:55:51:cc:bf:83:31:53:ac:9f: 5d:7f:89:e2:3a:2c:aa:5c:b6:2c:86:11:f2:e3:6b:2b:71:a6: 23:7c:d0:40:3f:20:4e:65:44:fb:32:d8:d2:ed:64:e3:e3:7c: a7:f2:09:52:a3:53:f0:b8:c9:7e:0d:62:ef:2b:9d:0c:9b:6c: f2:12:ed:4e:0e:d5:65:a0:9d:e3:29:39:22:7b:cf:13:d0:d0: f4:68:5b:be:5e:2c:c0:45:be:9b:80:0b:32:e7:10:ab:bd:ec: ef:bb:57:26:bf:07:e4:af:cc:93:b2:70:00:fe:ff:21:80:a0: 71:17:65:0f:72:fa:51:a0:89:56:ae:78:6e:ad:8b:d8:e3:a1: 14:a8:12:f4:25:43:22:b0:7b:15:75:e9:1a:2c:94:f0:fb:56: 4f:f1:1c:a4:30:5e:03:07:e4:9d:3a:ae:01:ba:2a:74:82:32: 6f:d7:04:b1:e3:7b:e3:28:ed:26:1b:19:eb:b4:c3:4c:52:30: 94:08:98:f5:ed:e9:84:bb:5b:b6:37:b7:c7:fc:05:52:03:f2: 33:4e:25:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yEIkgJ80dYBd0HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk MWM1MzMxNTctZGJjZC00MDU4LWFmYzktY2ZjNTk4YWY4MDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii9/4PI028qEoaX8X82D3B/HkiLzntDwk6XP LqzTnLKcKPtZxcs5PnI/OQR+qqvSG0eY6ddXw08wQcWbaA3dKD22C1jvpo+OWE3k ME0JLre6HuRHHpRhoOVwLpunu9h05JHFNWnxFVYUhiW6o5qT/xcfKvv9iyYIC3Jo z0pI+NWE3QInGHk0SdOrc7DtkA6OzNHNygocdbbA7fTmTeg2m0XCFdHsJ0PF+aKx x1hKOHgBOAIoUW7ouLQlraUd6quJ6azofO6o6XR1CyfVoIj2lXuk18yu98THUtVg uWdWZIy0nwdhJlR31aAicwjK22TAfXoRLRG1XW+GqmdTAV6zNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsvvBrNx/T2aYgcqNA0BnPhqyFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvNjczNzZjOGUtMjY3ZC0z NmYyLTgxNGEtZjJjNDg5ZjQ0ZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW3AVucKC86ZD8lNCJD4bqDEn/vwSXhMZ0jief8nQOOe7MnFazbysI7 nZ+BzFVRzL+DMVOsn11/ieI6LKpctiyGEfLjaytxpiN80EA/IE5lRPsy2NLtZOPj fKfyCVKjU/C4yX4NYu8rnQybbPIS7U4O1WWgneMpOSJ7zxPQ0PRoW75eLMBFvpuA CzLnEKu97O+7Vya/B+SvzJOycAD+/yGAoHEXZQ9y+lGgiVaueG6ti9jjoRSoEvQl QyKwexV16RoslPD7Vk/xHKQwXgMH5J06rgG6KnSCMm/XBLHje+Mo7SYbGeu0w0xS MJQImPXt6YS7W7Y3t8f8BVID8jNOJSM= -----END CERTIFICATE-----Generated at Sat Jun 13 13:17:58 2026 by rpki-client