$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/a3a4c9e4-4669-3492-a9f2-d7ab008c3a3d.roa File: a3a4c9e4-4669-3492-a9f2-d7ab008c3a3d.roa (raw, json) Hash identifier: RkKpQxbL69an2vIWk6K3Kat83sjBc5F0xLJYHLfH7zM= Subject key identifier: D7:09:36:FE:14:98:E8:88:92:66:93:C5:7E:F4:C6:D3:86:67:16:B4 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584D87FA9978017B1DF1E950D200 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/a3a4c9e4-4669-3492-a9f2-d7ab008c3a3d.roa Signing time: Fri 17 Apr 2026 01:00:27 +0000 ROA not before: Fri 17 Apr 2026 01:00:27 +0000 ROA not after: Thu 16 Jul 2026 01:00:27 +0000 asID: 3738 IP address blocks: 192.250.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:fa:99:78:01:7b:1d:f1:e9:50:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Apr 17 01:00:27 2026 GMT Not After : Jul 16 01:00:27 2026 GMT Subject: CN=80eca33e-d699-4069-ab43-5cd60744aa52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8b:40:90:45:c8:f9:de:c5:b4:78:f5:53:66: 94:eb:10:65:7d:82:7c:df:19:73:e0:4d:15:d9:66: 29:12:f6:00:2f:30:a8:81:ce:3b:3d:b2:2f:53:ff: 08:93:1a:76:57:1b:e3:56:39:ad:e7:e2:6a:dd:a7: 7c:b8:be:10:c0:ff:e1:42:76:a1:80:55:1e:0a:cc: 3b:18:1f:f8:27:de:8e:83:80:57:fb:72:03:b2:ac: 61:f6:50:6f:da:c4:78:2c:56:12:1b:7e:99:8d:7d: 8a:dc:7a:59:84:29:54:fd:c5:72:8e:fd:f2:82:a7: d9:9b:7d:10:45:ae:e6:95:48:47:ef:db:cc:ce:72: 42:0b:1c:00:c7:d9:29:03:66:c9:3f:17:27:18:02: d3:e9:48:8d:44:02:11:02:3c:d2:6a:ae:ea:d3:38: 93:67:09:66:9b:c7:58:2e:60:3a:0d:08:b8:08:c9: 29:0d:85:34:06:3d:45:12:d8:58:08:85:8f:9b:60: 82:bb:01:02:e9:f4:18:ad:8a:61:ed:d3:7b:44:08: cc:6e:d3:75:0a:d0:ed:29:6e:48:79:27:9a:0e:ba: 7f:d8:dd:dc:2a:ff:dc:58:4b:74:6b:0d:fd:46:2f: 9d:0b:23:e9:24:fb:2a:04:3e:4c:4f:a1:d6:70:ae: fd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:09:36:FE:14:98:E8:88:92:66:93:C5:7E:F4:C6:D3:86:67:16:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/a3a4c9e4-4669-3492-a9f2-d7ab008c3a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:16:05:32:38:56:b4:72:35:f2:f6:74:c5:d5:56:af:da:1f: 65:36:73:32:63:7f:c8:80:03:60:71:1b:61:db:8e:7c:4a:1e: ba:4c:82:56:c6:ab:fa:72:51:79:6a:d5:4f:f3:04:58:ea:bd: e6:93:cc:07:81:ef:b4:6d:a3:88:e9:5c:ab:ae:42:8c:0c:7d: e6:88:6f:02:84:80:51:9c:8d:ca:a5:ec:5c:b7:24:03:d4:c6: 34:f3:a6:8a:a6:ee:31:d1:1d:00:0c:f6:ab:a8:3e:74:fb:92: 2d:8f:22:01:e8:4b:f7:06:4d:d6:cc:00:6e:d6:eb:11:25:86: 3c:e2:6a:5f:8a:f4:00:31:ab:c3:b8:e0:e7:ce:3d:f1:18:4d: d1:82:4c:10:a0:12:c4:9c:46:c4:81:42:81:4e:5a:8e:7a:dd: 5f:a3:39:8e:cc:c0:a2:67:15:12:52:92:4a:11:2c:fc:8d:79: 6d:03:8d:16:c9:41:45:c6:3f:bb:cf:03:92:0e:e9:b6:e7:f8: fc:2e:c5:29:8f:d1:75:df:c8:9e:55:72:65:f0:b8:e1:29:8c: 6e:36:91:7a:41:a6:e3:f7:1c:5b:2f:02:0e:b6:31:e0:c4:5c: 69:75:57:f1:50:e6:7d:a9:73:0c:bc:e6:4e:2d:40:5a:39:fc: fa:60:48:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2H+pl4AXsd8elQ0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk ODBlY2EzM2UtZDY5OS00MDY5LWFiNDMtNWNkNjA3NDRhYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4tAkEXI+d7FtHj1U2aU6xBlfYJ83xlz4E0V 2WYpEvYALzCogc47PbIvU/8Ikxp2VxvjVjmt5+Jq3ad8uL4QwP/hQnahgFUeCsw7 GB/4J96Og4BX+3IDsqxh9lBv2sR4LFYSG36ZjX2K3HpZhClU/cVyjv3ygqfZm30Q Ra7mlUhH79vMznJCCxwAx9kpA2bJPxcnGALT6UiNRAIRAjzSaq7q0ziTZwlmm8dY LmA6DQi4CMkpDYU0Bj1FEthYCIWPm2CCuwEC6fQYrYph7dN7RAjMbtN1CtDtKW5I eSeaDrp/2N3cKv/cWEt0aw39Ri+dCyPpJPsqBD5MT6HWcK79GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcJNv4UmOiIkmaTxX70xtOGZxa0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYTNhNGM5ZTQtNDY2OS0z NDkyLWE5ZjItZDdhYjAwOGMzYTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIWBTI4VrRyNfL2dMXVVq/aH2U2czJjf8iAA2BxG2HbjnxKHrpMglbG q/pyUXlq1U/zBFjqveaTzAeB77Rto4jpXKuuQowMfeaIbwKEgFGcjcql7Fy3JAPU xjTzpoqm7jHRHQAM9quoPnT7ki2PIgHoS/cGTdbMAG7W6xElhjzial+K9AAxq8O4 4OfOPfEYTdGCTBCgEsScRsSBQoFOWo563V+jOY7MwKJnFRJSkkoRLPyNeW0DjRbJ QUXGP7vPA5IO6bbn+PwuxSmP0XXfyJ5VcmXwuOEpjG42kXpBpuP3HFsvAg62MeDE XGl1V/FQ5n2pcwy85k4tQFo5/PpgSGc= -----END CERTIFICATE-----Generated at Fri Apr 17 20:12:42 2026 by rpki-client