$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/11201fd6-3297-3fa0-9993-7151b5002998.roa File: 11201fd6-3297-3fa0-9993-7151b5002998.roa (raw, json) Hash identifier: LTrPFPoBO3ITXTZ+RK4IMcIBjS7eEBSwJDeE8xD2R5w= Subject key identifier: 75:D0:57:E5:D6:61:E1:CC:DC:34:D9:47:A6:4F:87:C9:1E:93:E0:8C Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584F49767FAFDAA45298A05C9DC0 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/11201fd6-3297-3fa0-9993-7151b5002998.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3738 IP address blocks: 192.250.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:7f:af:da:a4:52:98:a0:5c:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=95d6cb03-022b-41ce-b72f-0b9f84403f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:74:48:97:2e:0a:fd:a8:a7:04:b6:2f:81:d5: 2a:c2:2f:a3:8f:7c:19:e7:62:47:c0:54:f1:9d:48: a3:1c:9e:4a:0e:27:ce:87:09:2a:27:84:2c:d9:a5: a8:df:2d:e8:69:d0:13:0e:a8:1e:cd:ad:56:46:39: 9e:0f:35:5d:c1:0d:52:6f:d3:65:e2:6a:7b:50:9a: 19:55:23:9a:3b:03:9f:29:48:34:a7:e1:6d:d2:27: 22:ce:f7:45:cc:ae:c9:47:30:6d:dd:c1:9f:89:89: 3a:b7:c0:57:48:ff:f0:27:42:72:d2:f5:69:26:16: 80:b9:bf:66:77:c7:d3:03:32:43:23:6c:4d:89:16: 77:ab:06:19:c4:68:81:50:8f:98:14:c1:7f:25:86: 41:b9:51:ad:2a:5d:c1:89:b3:d5:06:cf:bd:b8:08: 72:08:f1:ad:7d:72:77:e4:c4:43:d4:91:c2:85:16: df:b4:bc:33:c6:4d:d0:2f:21:57:7f:f8:b5:bb:77: 7d:e1:c6:cf:ef:08:31:0d:75:b8:81:99:42:be:77: 88:d8:f2:24:6e:a9:18:89:ce:8e:a5:27:2c:1a:a3: df:0a:38:76:c4:84:49:85:75:90:c3:23:62:ad:c6: 29:0f:65:60:17:27:1e:68:ef:25:d0:4d:33:46:0a: dd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D0:57:E5:D6:61:E1:CC:DC:34:D9:47:A6:4F:87:C9:1E:93:E0:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/11201fd6-3297-3fa0-9993-7151b5002998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:e9:4a:01:42:4d:c2:06:a4:24:e0:07:d5:d4:e7:d6:c5:1f: 43:85:8f:ee:3c:ce:3f:3a:38:c1:bd:f1:82:26:b7:e8:ca:c6: 27:46:a3:4b:00:b1:24:c7:f8:24:58:f7:0c:a1:91:5d:4d:cc: 4f:1d:f0:19:ad:7c:e6:a0:c8:c1:07:bb:b2:54:7d:cd:e9:d6: b2:ba:8e:43:03:ef:f5:73:be:7d:92:2c:3f:95:65:af:13:e7: 8b:be:0d:5e:47:28:22:bb:dc:64:19:4c:d6:87:e1:40:d8:3a: 76:95:88:e4:02:95:78:bd:67:09:66:f6:3b:d0:2f:46:74:b8: 7a:1f:9b:3e:10:63:b5:2e:b3:2d:01:72:e7:49:30:43:ea:53: d9:53:d2:bc:f7:eb:82:f3:6a:0a:7c:88:e0:fd:70:d3:53:8a: f5:0a:66:2b:7b:37:32:ce:36:4c:67:50:f5:af:14:16:e5:84: f4:80:1b:a9:4f:30:eb:e8:15:7a:f3:ea:4e:0e:c9:a2:c5:29: 8d:bb:b8:49:d0:d3:29:cb:48:1b:25:03:3b:30:89:be:bc:5a: f1:44:4f:d7:67:e5:dc:33:9d:10:d2:a5:83:8e:75:98:71:6e: f8:f6:57:4d:e3:1d:6c:5c:cc:a4:a1:22:c2:7d:fd:06:6f:c9: 7f:b5:3e:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdn+v2qRSmKBcncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTVkNmNiMDMtMDIyYi00MWNlLWI3MmYtMGI5Zjg0NDAzZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnRIly4K/ainBLYvgdUqwi+jj3wZ52JHwFTx nUijHJ5KDifOhwkqJ4Qs2aWo3y3oadATDqgeza1WRjmeDzVdwQ1Sb9Nl4mp7UJoZ VSOaOwOfKUg0p+Ft0icizvdFzK7JRzBt3cGfiYk6t8BXSP/wJ0Jy0vVpJhaAub9m d8fTAzJDI2xNiRZ3qwYZxGiBUI+YFMF/JYZBuVGtKl3BibPVBs+9uAhyCPGtfXJ3 5MRD1JHChRbftLwzxk3QLyFXf/i1u3d94cbP7wgxDXW4gZlCvneI2PIkbqkYic6O pScsGqPfCjh2xIRJhXWQwyNircYpD2VgFyceaO8l0E0zRgrduwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXQV+XWYeHM3DTZR6ZPh8kek+CMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvMTEyMDFmZDYtMzI5Ny0z ZmEwLTk5OTMtNzE1MWI1MDAyOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPp3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMDpSgFCTcIGpCTgB9XU59bFH0OFj+48zj86OMG98YImt+jKxidGo0sA sSTH+CRY9wyhkV1NzE8d8BmtfOagyMEHu7JUfc3p1rK6jkMD7/Vzvn2SLD+VZa8T 54u+DV5HKCK73GQZTNaH4UDYOnaViOQClXi9Zwlm9jvQL0Z0uHofmz4QY7Uusy0B cudJMEPqU9lT0rz364Lzagp8iOD9cNNTivUKZit7NzLONkxnUPWvFBblhPSAG6lP MOvoFXrz6k4OyaLFKY27uEnQ0ynLSBslAzswib68WvFET9dn5dwznRDSpYOOdZhx bvj2V03jHWxczKShIsJ9/QZvyX+1Psc= -----END CERTIFICATE-----Generated at Tue Sep 29 06:38:13 2026 by rpki-client