$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa File: c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa (raw, json) Hash identifier: lcX3bc4j53rRxd/ujcNRV9smZWpCdVf2GEYlGjjK6Ls= Subject key identifier: 07:83:75:39:4B:E6:2F:B0:5B:B1:69:57:B0:50:17:D0:7C:FD:E0:7E Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584DF210892F49FC6DFDECE87580 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 3738 IP address blocks: 192.250.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:89:2f:49:fc:6d:fd:ec:e8:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=6cfc1933-d6e8-477b-bc47-2ab394a25252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:65:c6:3f:1c:74:8f:ef:f8:bd:b1:91:33:26: 4c:54:58:fe:2c:ae:e5:b2:db:dc:5b:1e:14:31:52: a8:85:a0:eb:b0:ca:61:d3:74:55:2b:48:6a:96:e7: 39:21:57:9a:a0:10:34:27:46:d0:bd:31:cb:43:bc: d6:99:47:ac:a8:f5:a0:26:36:44:70:9f:8c:8d:cf: cc:94:17:e2:29:e1:ad:1f:02:b6:fc:35:09:9b:2f: d2:b4:05:73:3d:25:89:b9:34:29:c4:2b:74:b3:0e: f8:e0:da:ed:b0:7f:81:a4:1e:81:00:fd:58:8b:44: 4f:20:7f:02:7c:bd:2a:a6:b3:92:76:0f:ab:10:80: 3c:62:41:88:bb:25:78:ad:f6:17:73:2e:47:63:1b: c7:d7:6b:78:8c:c2:01:19:88:8b:67:bd:af:ce:b2: ef:a7:39:37:74:19:cb:61:70:ed:d5:a6:45:05:67: 1e:fc:cc:a9:4e:c8:9d:34:5c:be:ce:67:26:46:1b: dc:85:2f:e3:bf:fb:da:30:07:64:8c:0b:4b:e3:01: 8d:b3:6a:7b:19:c4:62:3b:21:f1:10:17:1f:21:13: 1e:c1:d0:ea:79:f6:a6:12:cc:bb:ad:50:74:48:98: 75:19:30:71:f6:41:5b:8a:d0:a8:8e:cb:d9:31:5d: 79:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:83:75:39:4B:E6:2F:B0:5B:B1:69:57:B0:50:17:D0:7C:FD:E0:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:54:79:9f:82:85:0c:13:23:ca:58:ec:08:76:a8:5e:47:c1: 98:da:3b:ce:a4:92:db:9b:00:c4:47:47:ae:38:49:c7:d3:1b: 6b:53:4d:b9:03:8d:21:62:69:08:03:2b:15:bd:a9:2a:e0:4a: 0d:b9:50:7b:71:26:8f:fb:92:79:bb:c1:a2:ac:fc:4f:53:8c: ef:5a:bf:b2:c3:58:47:bb:d1:da:cf:0d:6a:d8:cd:dd:ab:2b: 1c:26:7d:8b:a8:d5:b7:18:d9:30:39:df:6c:e3:c3:31:47:38: 85:3d:97:a3:43:a8:0a:05:af:83:81:c2:a0:e8:1c:c2:0b:17: 01:bf:4f:53:67:d7:cb:08:05:a2:0c:ad:eb:5f:47:b0:a6:2d: 06:76:07:ad:2f:0e:ff:f5:67:ad:c1:75:46:04:52:4c:84:36: ed:6b:0d:02:bf:95:01:9b:b4:72:10:bf:01:4b:a8:68:2c:e0: 3e:fe:66:f4:70:88:36:65:b1:f6:d7:22:87:d5:33:71:0f:a4: b0:28:3f:0d:ef:c6:26:d4:a5:81:ea:07:ea:0f:63:5a:e2:d9: 8a:ae:a0:c0:2e:ce:0e:0e:fa:a3:f6:46:ee:56:0e:61:ae:ab: 53:ef:e5:bf:30:9c:14:39:55:27:e9:4a:8b:09:dc:5c:e8:13: 7e:15:7a:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yEIkvSfxt/ezodYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk NmNmYzE5MzMtZDZlOC00NzdiLWJjNDctMmFiMzk0YTI1MjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomXGPxx0j+/4vbGRMyZMVFj+LK7lstvcWx4U MVKohaDrsMph03RVK0hqluc5IVeaoBA0J0bQvTHLQ7zWmUesqPWgJjZEcJ+Mjc/M lBfiKeGtHwK2/DUJmy/StAVzPSWJuTQpxCt0sw744NrtsH+BpB6BAP1Yi0RPIH8C fL0qprOSdg+rEIA8YkGIuyV4rfYXcy5HYxvH12t4jMIBGYiLZ72vzrLvpzk3dBnL YXDt1aZFBWce/MypTsidNFy+zmcmRhvchS/jv/vaMAdkjAtL4wGNs2p7GcRiOyHx EBcfIRMewdDqefamEsy7rVB0SJh1GTBx9kFbitCojsvZMV154wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeDdTlL5i+wW7FpV7BQF9B8/eB+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYzg5NWMyMzAtOGZlMS0z ZDkzLWFkNGItMzg1ZTc3ZTJiMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZUeZ+ChQwTI8pY7Ah2qF5HwZjaO86kktubAMRHR644ScfTG2tTTbkD jSFiaQgDKxW9qSrgSg25UHtxJo/7knm7waKs/E9TjO9av7LDWEe70drPDWrYzd2r KxwmfYuo1bcY2TA532zjwzFHOIU9l6NDqAoFr4OBwqDoHMILFwG/T1Nn18sIBaIM retfR7CmLQZ2B60vDv/1Z63BdUYEUkyENu1rDQK/lQGbtHIQvwFLqGgs4D7+ZvRw iDZlsfbXIofVM3EPpLAoPw3vxibUpYHqB+oPY1ri2YquoMAuzg4O+qP2Ru5WDmGu q1Pv5b8wnBQ5VSfpSosJ3FzoE34Vem0= -----END CERTIFICATE-----Generated at Sat Jun 13 09:33:45 2026 by rpki-client