$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/853db1af-0c14-3537-afa6-b2429c1a8793.roa File: 853db1af-0c14-3537-afa6-b2429c1a8793.roa (raw, json) Hash identifier: TlGvWJqsRs3Hq8z5hZtr3i2GOEOE02Q1mzi4vIDryOI= Subject key identifier: 61:EB:FD:50:6F:A0:D2:86:5C:A5:F7:1A:28:B6:53:7F:A0:9C:98:5E Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584CF6ECD8EBD97C145F3CFBF800 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/853db1af-0c14-3537-afa6-b2429c1a8793.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 3738 IP address blocks: 192.250.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:d8:eb:d9:7c:14:5f:3c:fb:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=e2b67101-e08f-4154-8d1a-05a6fb73b8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:95:db:e4:b9:71:ac:ed:50:23:95:42:fa:d5: a2:e9:64:5c:8d:93:3c:dd:97:20:fd:41:ce:90:4d: e9:0b:e1:4c:fa:86:7c:5a:78:3c:bd:4b:f8:23:be: 06:eb:72:d4:4e:41:1b:74:f8:67:a4:48:4a:48:89: 73:9d:67:32:13:b3:37:d4:d4:6b:14:ea:db:e7:79: 88:50:22:23:c9:74:ae:92:26:3a:e1:35:52:8a:d1: 3a:3e:c2:74:b5:59:9f:0b:ef:98:1d:e6:12:22:cc: 05:8f:62:fa:73:67:a4:a1:a0:b9:1c:58:00:b1:f7: 17:ab:62:87:63:5a:28:de:fd:de:e9:76:e1:d1:23: 03:eb:1e:54:f1:df:6e:fd:37:59:26:cc:74:6c:62: bc:95:0a:c3:e7:6c:d5:11:ce:15:cc:e4:f3:7f:f5: 36:b2:10:97:81:5d:f6:57:ad:c7:1a:e1:9a:51:15: 82:e3:a6:25:5a:84:03:a3:26:55:18:47:8b:48:27: 7b:96:a3:96:d0:c1:03:30:78:87:36:5a:a0:3c:4d: 7f:9b:c4:e5:ed:ec:7b:1d:66:16:67:3f:80:68:fb: db:de:ce:cf:3e:d1:81:31:7e:36:57:61:82:0d:5b: 15:d1:03:f9:73:46:c5:6e:a3:14:f2:ba:4f:52:e4: e7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EB:FD:50:6F:A0:D2:86:5C:A5:F7:1A:28:B6:53:7F:A0:9C:98:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/853db1af-0c14-3537-afa6-b2429c1a8793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:17:36:4c:8b:f2:bc:de:13:b8:95:7c:93:15:aa:aa:1f:34: ec:41:0a:be:f7:44:98:72:75:51:47:ea:7b:18:2c:e4:b1:d3: 2c:b6:4b:ed:3f:a2:16:dd:eb:3e:72:62:a7:65:4a:86:f5:94: 3a:ec:2d:d4:fa:d9:79:74:2f:16:62:60:95:48:67:7b:de:ef: 09:e9:cf:e4:a8:72:15:65:87:ce:88:85:99:18:4a:b7:10:a0: 0c:65:88:84:84:d2:0a:61:a9:d1:c0:79:fb:6c:28:74:98:7f: 9d:58:0a:b0:e3:12:d0:e7:ea:99:26:b3:3f:70:14:84:e1:d1: 7a:de:33:46:b5:b8:1b:65:70:63:d2:ea:88:ae:ba:3f:ac:a2: 44:b1:1b:5e:b8:5f:7f:16:c8:f0:16:1f:d9:07:38:46:bc:b9: 13:2f:cf:48:22:39:3f:34:e1:eb:b5:f9:ad:03:9d:4b:e3:88: 9f:71:55:df:27:42:84:b7:7f:44:8c:51:13:99:e4:ca:e0:06: 83:00:30:07:d5:8a:94:d1:8b:c8:58:8a:0c:13:76:a9:f5:9e: 09:c2:03:2d:be:ec:fa:27:6b:b5:63:2c:52:64:c9:f7:4b:22: 12:c8:f9:0a:7d:e0:cd:0d:46:65:fd:e9:cd:2f:cf:3e:60:74: be:8d:af:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27Njr2XwUXzz7+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZTJiNjcxMDEtZTA4Zi00MTU0LThkMWEtMDVhNmZiNzNiOGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Xb5LlxrO1QI5VC+tWi6WRcjZM83Zcg/UHO kE3pC+FM+oZ8Wng8vUv4I74G63LUTkEbdPhnpEhKSIlznWcyE7M31NRrFOrb53mI UCIjyXSukiY64TVSitE6PsJ0tVmfC++YHeYSIswFj2L6c2ekoaC5HFgAsfcXq2KH Y1oo3v3e6Xbh0SMD6x5U8d9u/TdZJsx0bGK8lQrD52zVEc4VzOTzf/U2shCXgV32 V63HGuGaURWC46YlWoQDoyZVGEeLSCd7lqOW0MEDMHiHNlqgPE1/m8Tl7ex7HWYW Zz+AaPvb3s7PPtGBMX42V2GCDVsV0QP5c0bFbqMU8rpPUuTnPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHr/VBvoNKGXKX3Gii2U3+gnJheMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvODUzZGIxYWYtMGMxNC0z NTM3LWFmYTYtYjI0MjljMWE4NzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIXNkyL8rzeE7iVfJMVqqofNOxBCr73RJhydVFH6nsYLOSx0yy2S+0/ ohbd6z5yYqdlSob1lDrsLdT62Xl0LxZiYJVIZ3ve7wnpz+SochVlh86IhZkYSrcQ oAxliISE0gphqdHAeftsKHSYf51YCrDjEtDn6pkmsz9wFITh0XreM0a1uBtlcGPS 6oiuuj+sokSxG164X38WyPAWH9kHOEa8uRMvz0giOT804eu1+a0DnUvjiJ9xVd8n QoS3f0SMUROZ5MrgBoMAMAfVipTRi8hYigwTdqn1ngnCAy2+7Pona7VjLFJkyfdL IhLI+Qp94M0NRmX96c0vzz5gdL6NrxU= -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:47 2026 by rpki-client