$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa File: 86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa (raw, json) Hash identifier: Q8c0PNN4RA0fsP6tSmx8CZVQyPYKP3Ma53lKWTYIO1U= Subject key identifier: 82:19:FA:C1:88:E1:A5:7D:41:ED:0A:83:C1:1A:1A:D9:51:4A:F8:C1 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584CF6ECD8CE069895AD4ABD9F80 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 3738 IP address blocks: 192.250.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:d8:ce:06:98:95:ad:4a:bd:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=ace167ee-c78f-4196-9aea-1172032f8bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9a:f6:22:db:0a:60:5b:97:21:a3:34:7d:d2: d8:38:57:df:da:23:fb:ad:50:4e:fa:ac:aa:80:6f: 8b:74:91:19:71:ab:0e:ed:b7:67:ef:cd:d1:c5:06: e2:76:84:19:a6:5c:9e:d3:88:91:d5:3b:87:44:cb: 50:37:6f:c5:1c:e1:06:ef:92:1a:26:cc:c7:c4:14: 32:f5:c7:5c:1e:43:06:af:1f:60:83:fc:9c:7c:91: 92:e4:c9:d2:c0:35:8f:fc:cc:17:93:97:ac:c6:e0: aa:94:f7:96:1f:1f:6e:ef:8b:6e:54:77:30:89:79: 35:1d:d3:c6:95:8d:b7:ce:00:75:6c:08:88:75:12: 57:9a:e4:2d:d7:b3:da:82:82:89:d6:88:80:b7:8a: 50:da:b3:03:a8:8a:92:58:e0:92:eb:e8:4e:94:25: 71:f3:e6:c3:29:ea:72:23:47:10:e8:eb:14:ee:4d: ab:53:5c:80:39:ac:35:84:82:a2:42:c7:6e:34:47: d4:f8:cf:14:1d:ee:22:28:6a:cd:df:92:d1:49:c5: ed:0a:55:f6:28:53:0c:b9:42:55:fa:d9:ac:e9:4b: 5f:e7:2c:75:4e:8f:1c:f5:86:2e:10:84:a7:49:69: d2:14:2c:74:30:09:7b:fb:9d:5e:71:c5:e0:29:c0: 30:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:19:FA:C1:88:E1:A5:7D:41:ED:0A:83:C1:1A:1A:D9:51:4A:F8:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:e0:24:68:71:f1:98:8c:bb:19:a1:81:08:bc:ee:a5:29:ef: ed:2d:3b:4b:93:a8:a7:05:90:95:0d:0e:4a:5f:c9:5e:42:29: f6:04:57:18:3f:f6:57:3a:6c:89:5c:54:86:ac:f1:b8:4b:ec: 8f:da:57:7e:c6:1a:c7:b2:78:0c:a9:3e:8c:b1:14:7f:e5:c2: 0d:47:66:3a:e9:a9:11:d2:c1:70:d9:00:3a:fa:b9:82:58:05: 07:87:37:d4:06:34:93:33:15:d7:19:0b:ce:8c:c1:71:3d:a1: a6:02:89:04:a4:a4:67:06:dc:01:3d:21:58:77:a3:86:4d:51: d2:c5:1b:c3:28:45:81:86:51:e2:ed:d2:1d:c2:fb:2e:bb:bb: 36:7e:18:83:76:7e:c9:48:18:d5:f9:e4:df:5a:03:35:ac:fd: 59:34:a4:71:c2:f1:60:7e:dd:59:25:ff:09:37:f1:44:e8:02: 64:90:b5:3c:31:7f:9d:94:80:f3:bb:db:e9:ff:be:4b:cf:ff: d1:c3:fe:07:37:e4:b5:a1:c5:ee:85:8e:40:4a:35:77:1a:75: fe:59:11:3b:00:80:61:70:d8:2e:8c:80:6f:b9:7e:9b:7b:56: 22:4b:cf:d9:c7:da:f2:60:98:c7:08:58:13:89:3a:b2:a3:4f: 40:b2:4f:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27NjOBpiVrUq9n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk YWNlMTY3ZWUtYzc4Zi00MTk2LTlhZWEtMTE3MjAzMmY4YmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpr2ItsKYFuXIaM0fdLYOFff2iP7rVBO+qyq gG+LdJEZcasO7bdn783RxQbidoQZplye04iR1TuHRMtQN2/FHOEG75IaJszHxBQy 9cdcHkMGrx9gg/ycfJGS5MnSwDWP/MwXk5esxuCqlPeWHx9u74tuVHcwiXk1HdPG lY23zgB1bAiIdRJXmuQt17PagoKJ1oiAt4pQ2rMDqIqSWOCS6+hOlCVx8+bDKepy I0cQ6OsU7k2rU1yAOaw1hIKiQsduNEfU+M8UHe4iKGrN35LRScXtClX2KFMMuUJV +tms6Utf5yx1To8c9YYuEISnSWnSFCx0MAl7+51eccXgKcAwCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIZ+sGI4aV9Qe0Kg8EaGtlRSvjBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvODZkNTMwOTItZDBiNi0z Zjk4LWIyZGEtYTM5N2FiOGViMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPolMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbgJGhx8ZiMuxmhgQi87qUp7+0tO0uTqKcFkJUNDkpfyV5CKfYEVxg/ 9lc6bIlcVIas8bhL7I/aV37GGseyeAypPoyxFH/lwg1HZjrpqRHSwXDZADr6uYJY BQeHN9QGNJMzFdcZC86MwXE9oaYCiQSkpGcG3AE9IVh3o4ZNUdLFG8MoRYGGUeLt 0h3C+y67uzZ+GIN2fslIGNX55N9aAzWs/Vk0pHHC8WB+3Vkl/wk38UToAmSQtTwx f52UgPO72+n/vkvP/9HD/gc35LWhxe6FjkBKNXcadf5ZETsAgGFw2C6MgG+5fpt7 ViJLz9nH2vJgmMcIWBOJOrKjT0CyT3E= -----END CERTIFICATE-----Generated at Mon Mar 2 09:04:04 2026 by rpki-client