$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/9178f256-45dc-3aa7-8211-7a81aaaa7923.roa File: 9178f256-45dc-3aa7-8211-7a81aaaa7923.roa (raw, json) Hash identifier: zVOmocIzYsLcJCziku6CqS9HRNOSkHXQ4Xsm7YXCDZU= Subject key identifier: AA:6E:BF:D5:41:ED:2B:7F:00:F5:14:7F:D7:13:12:FC:06:70:3C:EB Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584CFBD2BE2859BD64ED3EDB8900 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/9178f256-45dc-3aa7-8211-7a81aaaa7923.roa Signing time: Wed 25 Feb 2026 20:07:09 +0000 ROA not before: Wed 25 Feb 2026 20:07:09 +0000 ROA not after: Tue 26 May 2026 19:07:09 +0000 asID: 3738 IP address blocks: 192.250.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:d2:be:28:59:bd:64:ed:3e:db:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Feb 25 20:07:09 2026 GMT Not After : May 26 19:07:09 2026 GMT Subject: CN=d66eb33a-65ef-4001-a656-b7a04f48f49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:35:b2:fa:ea:c8:84:f1:d3:62:20:df:4b:4a: 81:f4:d1:98:4c:26:6d:7d:ad:60:30:c1:e2:60:b4: 8a:79:d2:b7:ab:88:d4:a4:3f:6e:8f:ba:45:27:b2: 93:2f:29:f7:4f:c7:9f:71:ac:50:e2:12:83:6b:d2: ad:7b:d9:65:81:7d:82:a1:40:17:cb:98:ab:3e:1f: d2:a0:28:63:9d:f2:7e:bc:46:d9:e3:2f:75:47:47: 8e:b4:bf:13:c3:96:13:de:c7:df:7b:7f:da:37:52: 45:ec:39:ff:9e:3f:ec:ac:32:cb:93:09:d1:df:90: f7:01:8a:0c:52:6e:9f:45:1e:43:80:cf:41:66:c5: f5:02:d4:73:3f:14:4a:6c:1c:01:fb:61:5c:44:b9: 8f:86:e9:63:f7:ba:49:b7:f6:16:72:7f:c8:65:b8: 24:62:c2:74:cf:f9:2a:9b:1b:d9:71:33:4d:43:63: e1:db:32:80:ba:ae:ab:ec:da:42:ed:ce:2f:ed:00: d7:8f:a7:f4:69:6c:51:77:38:a0:b7:13:c3:83:33: 66:ff:09:5b:9e:1a:b3:fa:ea:3e:4d:a5:63:ad:43: 4f:fa:e8:2f:31:45:b3:93:d0:fa:33:c8:2a:90:34: 50:32:3f:63:b5:6c:c8:8c:c3:d0:01:e5:13:c1:72: 2f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6E:BF:D5:41:ED:2B:7F:00:F5:14:7F:D7:13:12:FC:06:70:3C:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/9178f256-45dc-3aa7-8211-7a81aaaa7923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:60:33:c2:1d:80:00:27:eb:e7:4e:d7:5e:35:06:ac:37:1b: d1:e0:fe:35:c2:1e:1e:ba:e4:4a:71:4e:e3:7a:ca:ac:c0:5b: 9a:ad:4c:8c:9c:a0:7a:3d:24:09:75:bd:1c:e5:fc:e6:c5:7b: 74:c1:a4:b5:ee:b8:e4:c6:84:26:be:72:9b:81:fc:cb:33:26: 3e:04:30:46:43:b5:47:da:c8:2e:24:6d:fb:9f:bd:b5:18:f7: c7:35:fe:0e:76:72:d6:18:51:99:37:f5:1d:0a:0c:ba:45:bf: 7b:a4:ca:6e:3f:b3:b3:49:0e:e8:b5:25:28:33:8e:0c:5b:f5: 35:6e:63:10:12:e0:93:d6:c6:a1:e1:c6:2c:de:60:88:42:16: a9:3a:fb:d4:4f:d6:4e:28:1f:7e:6f:4e:0d:02:40:10:3d:09: a0:2f:f0:3a:f1:56:dd:45:b3:9e:b8:77:f0:20:f2:d9:9b:de: 0f:69:49:4c:d5:a9:23:d6:9e:4b:5f:6c:b8:8b:ae:b5:4b:de: 16:fd:2a:41:1e:cd:c1:76:be:82:6f:06:5d:bb:bd:bd:67:13: d0:19:ea:e0:32:88:c2:db:d1:33:b4:d8:cf:cd:1d:e7:bc:77: 07:70:91:08:e5:3e:5b:ea:2e:70:7c:59:07:29:1d:82:07:3a: e4:cf:fe:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz70r4oWb1k7T7biQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDIyNTIwMDcwOVoXDTI2MDUyNjE5MDcwOVowLzEtMCsGA1UEAxMk ZDY2ZWIzM2EtNjVlZi00MDAxLWE2NTYtYjdhMDRmNDhmNDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDWy+urIhPHTYiDfS0qB9NGYTCZtfa1gMMHi YLSKedK3q4jUpD9uj7pFJ7KTLyn3T8efcaxQ4hKDa9Kte9llgX2CoUAXy5irPh/S oChjnfJ+vEbZ4y91R0eOtL8Tw5YT3sffe3/aN1JF7Dn/nj/srDLLkwnR35D3AYoM Um6fRR5DgM9BZsX1AtRzPxRKbBwB+2FcRLmPhulj97pJt/YWcn/IZbgkYsJ0z/kq mxvZcTNNQ2Ph2zKAuq6r7NpC7c4v7QDXj6f0aWxRdzigtxPDgzNm/wlbnhqz+uo+ TaVjrUNP+ugvMUWzk9D6M8gqkDRQMj9jtWzIjMPQAeUTwXIv6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpuv9VB7St/APUUf9cTEvwGcDzrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvOTE3OGYyNTYtNDVkYy0z YWE3LTgyMTEtN2E4MWFhYWE3OTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9gM8IdgAAn6+dO1141Bqw3G9Hg/jXCHh665EpxTuN6yqzAW5qtTIyc oHo9JAl1vRzl/ObFe3TBpLXuuOTGhCa+cpuB/MszJj4EMEZDtUfayC4kbfufvbUY 98c1/g52ctYYUZk39R0KDLpFv3ukym4/s7NJDui1JSgzjgxb9TVuYxAS4JPWxqHh xizeYIhCFqk6+9RP1k4oH35vTg0CQBA9CaAv8DrxVt1Fs564d/Ag8tmb3g9pSUzV qSPWnktfbLiLrrVL3hb9KkEezcF2voJvBl27vb1nE9AZ6uAyiMLb0TO02M/NHee8 dwdwkQjlPlvqLnB8WQcpHYIHOuTP/nw= -----END CERTIFICATE-----Generated at Mon Mar 2 10:18:23 2026 by rpki-client