$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa File: dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa (raw, json) Hash identifier: e+czRW63NXKj05bh6PKHn3JDfMSSqBmCJg3a3hkPYHg= Subject key identifier: E3:F2:E0:29:59:72:96:EC:54:73:98:63:0B:89:F2:70:61:B9:99:71 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584CF6ECD8DCA35FD46F02E657A0 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 3738 IP address blocks: 192.250.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:d8:dc:a3:5f:d4:6f:02:e6:57:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=21b14bcb-4d6e-4f4d-a067-54c478120f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ae:b9:1c:b2:58:dc:ed:2b:cc:dc:03:db:8c: b8:5a:83:77:94:4d:32:ae:75:7c:32:35:b4:0a:58: 32:83:3d:cd:fc:07:39:ef:c2:59:09:b9:31:16:ca: ee:84:b1:cb:10:75:c7:c9:f3:57:68:e2:30:3c:91: 20:27:61:6f:ac:63:5a:c1:97:0b:51:b2:0a:64:06: 34:2d:f9:c4:a2:27:c7:8b:8f:82:de:3e:50:08:72: 7b:a4:03:c9:fc:63:b1:da:c5:68:b2:99:50:91:5d: 75:f8:31:c6:e5:09:9b:0c:a9:0a:21:53:ab:51:73: 14:24:0a:f5:8e:70:db:1b:53:f8:1f:8a:6d:7d:36: 5b:9f:1f:b4:1e:8d:c6:1d:1d:f6:fb:4a:1f:5b:98: 04:e9:91:ac:a1:0e:8d:ff:4a:2c:60:3f:69:b0:aa: f3:85:d2:3a:3b:1f:09:ed:0c:80:ca:e5:86:e6:b7: 26:b8:6a:e4:f9:f7:84:48:65:06:0e:ad:ba:6f:1c: c1:a5:03:c8:28:87:41:a3:93:4d:c5:8b:0d:ad:74: 10:ea:ea:39:57:0f:be:91:1e:8c:4b:68:fe:0a:27: 4f:ff:1c:c5:e8:a1:ae:c5:d2:24:d1:7d:87:bc:e9: fb:98:15:98:39:00:05:93:a4:6b:6d:82:f1:dc:19: dd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F2:E0:29:59:72:96:EC:54:73:98:63:0B:89:F2:70:61:B9:99:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:e2:74:87:5d:68:ac:be:d4:0f:be:5f:51:78:55:f9:61:34: e8:2b:95:6c:98:b6:c4:00:38:31:f6:6b:04:c8:50:f4:70:e9: 26:1e:40:30:ae:66:23:cb:94:90:7d:c7:54:1d:f3:3f:96:d6: 59:05:e3:2b:aa:99:dc:d8:cd:29:8d:53:1c:78:43:c5:2a:99: e6:42:ee:71:55:3f:0e:2c:5a:6c:69:18:9a:a2:e2:3d:fa:78: 2a:4b:d2:bb:3c:b9:59:a1:16:41:9f:28:9d:93:16:b3:f5:f4: db:57:be:57:22:e1:f8:55:62:d6:77:da:a6:6d:df:2a:ad:e5: 63:42:12:c8:e0:7e:a8:a4:10:7c:e9:e7:11:95:80:91:3d:9d: e2:7e:e6:67:07:11:5c:b8:af:15:80:ec:a9:16:18:a4:28:25: a5:2c:c1:48:e3:c5:b9:99:4a:69:d1:ac:13:26:3d:e2:b7:c2: e6:60:30:3c:c8:02:10:a0:14:75:e0:24:5b:d6:9c:bb:34:d9: ab:a1:db:de:82:b6:a1:a4:81:11:42:7c:87:e0:43:9c:41:06: bb:1c:99:44:a8:5a:c5:41:a1:60:bf:a4:0c:43:67:52:6b:dc: f4:4d:c7:b9:64:8b:b8:aa:f1:e0:ce:c8:21:7b:84:26:6f:8e: 3a:9b:a4:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27Njco1/UbwLmV6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk MjFiMTRiY2ItNGQ2ZS00ZjRkLWEwNjctNTRjNDc4MTIwZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw665HLJY3O0rzNwD24y4WoN3lE0yrnV8MjW0 Clgygz3N/Ac578JZCbkxFsruhLHLEHXHyfNXaOIwPJEgJ2FvrGNawZcLUbIKZAY0 LfnEoifHi4+C3j5QCHJ7pAPJ/GOx2sVosplQkV11+DHG5QmbDKkKIVOrUXMUJAr1 jnDbG1P4H4ptfTZbnx+0Ho3GHR32+0ofW5gE6ZGsoQ6N/0osYD9psKrzhdI6Ox8J 7QyAyuWG5rcmuGrk+feESGUGDq26bxzBpQPIKIdBo5NNxYsNrXQQ6uo5Vw++kR6M S2j+CidP/xzF6KGuxdIk0X2HvOn7mBWYOQAFk6RrbYLx3BndbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPy4ClZcpbsVHOYYwuJ8nBhuZlxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvZGQzZTA4NDQtMzNmOS0z YWRkLWI0ZmUtMTA2MjMyZmE0YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALvidIddaKy+1A++X1F4VflhNOgrlWyYtsQAODH2awTIUPRw6SYeQDCu ZiPLlJB9x1Qd8z+W1lkF4yuqmdzYzSmNUxx4Q8UqmeZC7nFVPw4sWmxpGJqi4j36 eCpL0rs8uVmhFkGfKJ2TFrP19NtXvlci4fhVYtZ32qZt3yqt5WNCEsjgfqikEHzp 5xGVgJE9neJ+5mcHEVy4rxWA7KkWGKQoJaUswUjjxbmZSmnRrBMmPeK3wuZgMDzI AhCgFHXgJFvWnLs02auh296CtqGkgRFCfIfgQ5xBBrscmUSoWsVBoWC/pAxDZ1Jr 3PRNx7lki7iq8eDOyCF7hCZvjjqbpMc= -----END CERTIFICATE-----Generated at Mon Mar 2 14:01:40 2026 by rpki-client