$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fb6b3a8a-6e2d-30e7-9449-7592c3f6ef0d.roa File: fb6b3a8a-6e2d-30e7-9449-7592c3f6ef0d.roa (raw, json) Hash identifier: UXem39zeedGd/h0iEanYe9YwJH81ols/lAVQkOSQlDo= Subject key identifier: 42:CA:47:C7:E0:71:39:F4:1E:2D:7A:59:95:91:3C:51:84:6E:5B:C4 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584CDA46A0496AA7AC98D12AC500 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fb6b3a8a-6e2d-30e7-9449-7592c3f6ef0d.roa Signing time: Fri 13 Feb 2026 19:43:10 +0000 ROA not before: Fri 13 Feb 2026 19:43:10 +0000 ROA not after: Thu 14 May 2026 18:43:10 +0000 asID: 3738 IP address blocks: 192.250.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:da:46:a0:49:6a:a7:ac:98:d1:2a:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Feb 13 19:43:10 2026 GMT Not After : May 14 18:43:10 2026 GMT Subject: CN=91a1bea9-f3e3-48a4-9c65-006a253a7a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:64:55:a4:c6:fe:dd:b4:60:50:8e:2b:2c:32: 27:b5:1f:95:f3:1c:6f:e3:25:f9:61:54:0f:cd:b1: f2:8a:92:1e:6e:49:62:17:ce:67:3d:e0:b2:12:2b: 31:e4:f0:b8:44:0a:f0:20:da:51:f7:bb:f0:1a:55: 20:b3:8c:14:16:c3:1c:4a:69:c7:78:80:12:77:99: a7:f7:dc:e9:db:d0:82:45:35:66:12:d6:a1:04:90: 39:1a:49:61:20:0f:50:0d:c5:cd:55:34:46:11:bc: bc:1f:94:c2:f8:81:4b:27:ce:94:69:d8:58:f8:a8: 81:1d:9a:e3:c3:93:da:5a:1a:77:25:6d:98:cc:cc: 62:34:fe:2d:09:12:6a:b9:f2:f9:45:7a:f1:df:47: d5:d3:72:0b:76:9f:03:25:26:2c:79:94:2d:fb:cb: 5c:6c:4a:ad:20:0f:7c:26:10:d0:15:ae:bc:ab:21: ab:f6:d7:40:21:8f:f9:46:1a:7a:f0:c1:4f:5a:e6: 7f:78:37:63:c1:a4:6b:d9:f5:8e:eb:34:4e:07:68: 88:5a:a0:c0:4d:3a:48:03:53:a8:0a:49:9c:6a:be: fe:1f:f9:80:c7:b4:47:37:32:bc:66:42:d4:5b:44: 64:1d:8b:32:91:81:bf:ba:ed:cb:bf:d9:f0:b8:ed: 2e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CA:47:C7:E0:71:39:F4:1E:2D:7A:59:95:91:3C:51:84:6E:5B:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fb6b3a8a-6e2d-30e7-9449-7592c3f6ef0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:42:d6:ec:6e:d1:c3:08:60:8d:4d:fb:de:9d:44:48:25:ad: d6:41:8b:80:42:d1:d1:5b:a6:5d:e4:2f:26:77:36:4f:22:cf: 81:bf:ae:e6:ec:46:44:8c:71:00:b4:76:77:ca:cb:ab:2b:02: 04:29:2a:4a:5b:ff:0a:29:73:74:5d:6a:c5:b6:9f:f6:37:9a: e7:c8:f7:fd:d0:a3:91:8b:22:61:5b:d2:ce:05:c2:10:20:5c: d5:b2:2e:fa:63:dd:42:a3:29:13:7b:89:e8:13:f9:c1:a8:d9: 79:72:48:b4:7d:74:b0:c8:fa:43:42:4f:5f:44:7f:9e:98:c8: b0:9e:9a:c7:cb:6f:a4:19:00:eb:31:1f:90:78:18:75:02:7d: 93:3c:0a:fe:c6:13:e7:66:92:4b:4d:88:49:60:3d:ee:f0:4b: b2:cf:47:34:82:93:1b:ed:90:23:3b:73:6f:1f:e2:b5:67:a1: bb:68:91:b5:f5:19:dc:6e:5d:89:9d:7a:88:bb:70:41:d9:ed: 20:69:88:61:c4:03:55:5e:ff:88:01:16:5e:04:70:93:f3:a4: 48:38:9f:06:7d:7a:f7:24:ca:4b:10:a1:0b:3a:bd:d6:e7:a3: cb:d2:74:5c:ab:d7:a8:b4:84:b6:0d:31:76:2b:4c:29:91:cf: ff:62:81:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzaRqBJaqesmNEqxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDIxMzE5NDMxMFoXDTI2MDUxNDE4NDMxMFowLzEtMCsGA1UEAxMk OTFhMWJlYTktZjNlMy00OGE0LTljNjUtMDA2YTI1M2E3YTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGRVpMb+3bRgUI4rLDIntR+V8xxv4yX5YVQP zbHyipIebkliF85nPeCyEisx5PC4RArwINpR97vwGlUgs4wUFsMcSmnHeIASd5mn 99zp29CCRTVmEtahBJA5GklhIA9QDcXNVTRGEby8H5TC+IFLJ86UadhY+KiBHZrj w5PaWhp3JW2YzMxiNP4tCRJqufL5RXrx30fV03ILdp8DJSYseZQt+8tcbEqtIA98 JhDQFa68qyGr9tdAIY/5Rhp68MFPWuZ/eDdjwaRr2fWO6zROB2iIWqDATTpIA1Oo Ckmcar7+H/mAx7RHNzK8ZkLUW0RkHYsykYG/uu3Lv9nwuO0uowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELKR8fgcTn0Hi16WZWRPFGEblvEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvZmI2YjNhOGEtNmUyZC0z MGU3LTk0NDktNzU5MmMzZjZlZjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwPp4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBC1uxu0cMIYI1N+96dREglrdZBi4BC0dFbpl3kLyZ3Nk8iz4G/rubs RkSMcQC0dnfKy6srAgQpKkpb/wopc3RdasW2n/Y3mufI9/3Qo5GLImFb0s4FwhAg XNWyLvpj3UKjKRN7iegT+cGo2XlySLR9dLDI+kNCT19Ef56YyLCemsfLb6QZAOsx H5B4GHUCfZM8Cv7GE+dmkktNiElgPe7wS7LPRzSCkxvtkCM7c28f4rVnobtokbX1 GdxuXYmdeoi7cEHZ7SBpiGHEA1Ve/4gBFl4EcJPzpEg4nwZ9evckyksQoQs6vdbn o8vSdFyr16i0hLYNMXYrTCmRz/9igVs= -----END CERTIFICATE-----Generated at Mon Mar 2 10:04:39 2026 by rpki-client