$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa File: fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa (raw, json) Hash identifier: ufmkakJbceWX0OThrR+2fLu3z6xgyCG6ymFGkbgNHf8= Subject key identifier: 04:8A:A3:C5:A3:2E:2A:BC:06:23:F5:1A:0A:9F:E3:C8:B2:E4:44:EC Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584DF21088E7356ACC136C485580 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 3738 IP address blocks: 192.250.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:88:e7:35:6a:cc:13:6c:48:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=eff421f2-6453-49cd-b5a2-b52435983f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ec:74:94:bc:86:53:99:45:2d:2d:77:8a:3a: 1b:51:86:ae:39:9d:f5:f7:20:73:04:f9:9c:9b:aa: 41:c0:29:18:2d:c6:73:46:e6:ca:b3:6f:e9:7e:1b: 62:bf:3e:0e:14:72:7f:eb:a5:24:64:ac:d5:3f:e6: 93:f6:e5:e2:09:4c:9f:43:79:35:9e:4a:6f:23:fa: 88:c9:82:f0:b8:d0:c3:48:f9:82:09:46:97:05:e5: 74:41:1f:29:eb:ae:77:ee:f2:7b:5a:4d:b0:94:ea: 9e:aa:4b:a6:3d:86:ac:0a:07:47:aa:5f:06:63:9b: d4:7a:35:36:97:3a:7c:6e:58:1c:55:83:9d:f4:49: d9:f4:0a:8d:e1:3d:cb:e1:2d:b1:a8:10:63:e3:db: 0a:62:76:23:bd:6a:d3:07:5b:d7:07:30:98:2b:7b: d3:93:dc:f7:76:b6:72:b3:59:31:44:7f:dc:83:a2: ac:ce:04:b7:e6:be:ed:6f:ae:8f:2d:f0:22:6d:cb: 03:be:61:64:f1:83:81:3e:24:24:aa:a6:57:b5:d0: e5:41:b6:86:85:fc:f9:00:8d:7b:b1:15:44:8f:2d: 71:c1:06:3f:b2:63:dd:2a:16:fa:2d:69:8e:ef:59: 1d:f3:9e:ae:77:9a:10:c9:69:43:94:ec:ee:43:fc: c0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8A:A3:C5:A3:2E:2A:BC:06:23:F5:1A:0A:9F:E3:C8:B2:E4:44:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:c3:61:61:56:9a:f0:8e:da:62:72:e5:16:1d:1c:ec:44:6e: 14:c6:d7:76:30:64:35:2a:84:b6:60:4f:26:65:81:97:c9:60: 53:7d:52:36:86:43:d8:40:0e:69:75:9b:5e:0b:31:93:9a:12: 83:4b:a5:2f:f9:43:43:a2:75:38:cd:14:bb:1e:c3:27:4a:88: 59:ec:37:95:7b:f7:18:fd:22:77:77:72:c5:d3:d5:49:27:ee: 92:39:03:6c:4e:a8:95:9b:30:42:53:f8:fb:14:06:e7:70:e5: 38:a3:bb:c7:d3:c6:60:50:2f:10:42:e8:36:00:8f:a9:72:3f: ce:c3:1d:44:90:e5:65:e7:00:2a:b8:b6:45:88:fb:18:36:a8: 68:37:a1:33:c5:2f:20:eb:a9:7c:6e:27:e9:10:3c:da:56:53: 67:e4:8c:e1:e5:92:cd:35:d6:fd:f9:af:b8:41:ba:03:86:29: a8:f9:96:e1:de:85:fc:9b:4b:85:7c:06:ad:9e:4c:c9:8e:81: c9:ad:e8:27:bf:74:1f:0b:c3:55:34:f1:26:49:84:44:73:65: e8:8b:03:5f:a0:4d:24:7e:97:12:c4:b2:69:86:24:51:b9:0e: 1e:7a:a6:b6:f2:58:af:84:b3:a1:fd:0e:ae:37:0c:d2:1d:33: e9:c5:ca:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3yEIjnNWrME2xIVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk ZWZmNDIxZjItNjQ1My00OWNkLWI1YTItYjUyNDM1OTgzZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOx0lLyGU5lFLS13ijobUYauOZ319yBzBPmc m6pBwCkYLcZzRubKs2/pfhtivz4OFHJ/66UkZKzVP+aT9uXiCUyfQ3k1nkpvI/qI yYLwuNDDSPmCCUaXBeV0QR8p66537vJ7Wk2wlOqeqkumPYasCgdHql8GY5vUejU2 lzp8blgcVYOd9EnZ9AqN4T3L4S2xqBBj49sKYnYjvWrTB1vXBzCYK3vTk9z3drZy s1kxRH/cg6KszgS35r7tb66PLfAibcsDvmFk8YOBPiQkqqZXtdDlQbaGhfz5AI17 sRVEjy1xwQY/smPdKhb6LWmO71kd856ud5oQyWlDlOzuQ/zApQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASKo8WjLiq8BiP1Ggqf48iy5ETsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvZmE5Y2ViMjYtYWVkYi0z OWRiLThlZmQtM2EzOTgyNTA2YjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnDYWFWmvCO2mJy5RYdHOxEbhTG13YwZDUqhLZgTyZlgZfJYFN9UjaG Q9hADml1m14LMZOaEoNLpS/5Q0OidTjNFLsewydKiFnsN5V79xj9Ind3csXT1Ukn 7pI5A2xOqJWbMEJT+PsUBudw5Tiju8fTxmBQLxBC6DYAj6lyP87DHUSQ5WXnACq4 tkWI+xg2qGg3oTPFLyDrqXxuJ+kQPNpWU2fkjOHlks011v35r7hBugOGKaj5luHe hfybS4V8Bq2eTMmOgcmt6Ce/dB8Lw1U08SZJhERzZeiLA1+gTSR+lxLEsmmGJFG5 Dh56prbyWK+Es6H9Dq43DNIdM+nFyng= -----END CERTIFICATE-----Generated at Sat Jun 13 11:16:08 2026 by rpki-client