$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3c42f4d1-9c05-38d4-8804-432f88c01675.roa File: 3c42f4d1-9c05-38d4-8804-432f88c01675.roa (raw, json) Hash identifier: H6AAVP/KtB1MQB2DTBWDIYmxyWBr+WgCNfJORt5e1Vo= Subject key identifier: 2B:52:B5:08:13:72:F4:DF:37:0B:98:4E:2F:70:D7:C3:2F:0C:C7:0F Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584F49767FA509642F1B68796B80 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3c42f4d1-9c05-38d4-8804-432f88c01675.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3738 IP address blocks: 192.250.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:7f:a5:09:64:2f:1b:68:79:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0fa34aef-c458-4fa4-92ae-a5e7626ee1ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0f:e4:f7:60:bb:e5:2d:95:5a:5b:fe:39:9c: ed:76:8c:cc:67:03:98:8f:0e:f8:04:81:6c:f4:94: 2e:6e:2a:1e:83:a2:97:69:63:9e:f0:5f:bc:08:ff: 09:35:26:ef:98:b2:39:7d:31:51:75:f6:59:1a:53: 37:6a:14:71:3a:86:c9:ea:92:76:85:bb:b8:bc:6a: 62:75:d2:5f:87:a8:40:54:61:f5:f8:74:75:98:45: 6a:9e:db:fa:55:8b:89:36:5b:5d:31:cd:e5:6b:05: 1e:f5:c3:a3:aa:6f:ec:25:49:6c:71:65:2c:7b:b6: e0:92:4e:34:d5:3e:a1:3c:24:ed:1d:a9:32:e8:93: f8:5d:a0:ba:a9:30:08:39:d8:07:8c:52:da:9c:0f: 9f:c6:a2:78:e7:d4:c5:3b:c0:18:88:b7:77:f3:79: ef:7e:02:05:96:e8:a7:25:53:66:64:d4:af:24:b0: e7:e0:0a:07:18:00:b9:69:b8:8c:da:4e:f0:00:d7: 26:af:a9:88:f2:62:f3:af:1a:1d:b5:20:80:fe:5f: 8d:a3:54:5d:07:bd:dc:ba:58:f0:7d:e4:c8:43:10: 6a:a2:88:ec:b7:71:6e:4a:c8:a3:e1:5f:19:30:9b: c8:f9:13:66:e4:c9:24:3d:78:d2:13:a4:81:41:20: c4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:52:B5:08:13:72:F4:DF:37:0B:98:4E:2F:70:D7:C3:2F:0C:C7:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3c42f4d1-9c05-38d4-8804-432f88c01675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:9d:50:c8:41:48:ba:8b:2d:48:a7:36:71:d0:e1:e3:6a:d1: be:4e:6a:b3:3c:63:a5:bb:64:b0:1f:44:88:68:05:fb:46:43: 4b:a2:d0:13:3e:13:e1:52:60:cf:4a:df:9f:14:19:18:1a:7d: ea:34:36:ef:57:f4:92:d7:d5:02:dd:10:38:16:dd:73:9c:6d: 8a:12:1a:99:e5:e5:f8:63:57:21:7c:98:9a:e0:d5:9b:4c:16: c4:39:71:a9:77:78:6b:8b:57:67:d4:bd:10:fd:ca:bc:77:7b: cd:45:a9:88:74:6c:6f:61:9c:17:5b:b3:16:4f:28:e0:e7:52: 01:be:10:6a:69:3b:4a:7e:80:ed:56:09:a2:a9:13:aa:39:9a: 99:cb:d0:81:8c:f1:52:54:6f:25:8b:28:ae:28:2e:94:72:6f: 86:4d:1f:26:f5:95:ad:de:75:b8:24:44:63:20:53:6e:63:2c: 6a:c5:27:22:3d:0e:c2:70:18:81:5a:60:e1:29:a1:1e:45:ac: 6f:fb:43:32:e7:0b:60:42:89:89:23:9b:1a:01:63:ac:bf:f5: 39:a0:be:55:f2:b2:93:ed:5f:dc:67:79:33:8b:d7:2b:a3:24: f6:e7:42:6e:f3:0c:b6:15:32:cb:7b:23:62:20:f6:1a:d2:63: 50:71:1d:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdn+lCWQvG2h5a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGZhMzRhZWYtYzQ1OC00ZmE0LTkyYWUtYTVlNzYyNmVlMWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg/k92C75S2VWlv+OZztdozMZwOYjw74BIFs 9JQubioeg6KXaWOe8F+8CP8JNSbvmLI5fTFRdfZZGlM3ahRxOobJ6pJ2hbu4vGpi ddJfh6hAVGH1+HR1mEVqntv6VYuJNltdMc3lawUe9cOjqm/sJUlscWUse7bgkk40 1T6hPCTtHaky6JP4XaC6qTAIOdgHjFLanA+fxqJ459TFO8AYiLd383nvfgIFluin JVNmZNSvJLDn4AoHGAC5abiM2k7wANcmr6mI8mLzrxodtSCA/l+No1RdB73culjw feTIQxBqoojst3FuSsij4V8ZMJvI+RNm5MkkPXjSE6SBQSDE8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtStQgTcvTfNwuYTi9w18MvDMcPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvM2M0MmY0ZDEtOWMwNS0z OGQ0LTg4MDQtNDMyZjg4YzAxNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqdUMhBSLqLLUinNnHQ4eNq0b5OarM8Y6W7ZLAfRIhoBftGQ0ui0BM+ E+FSYM9K358UGRgafeo0Nu9X9JLX1QLdEDgW3XOcbYoSGpnl5fhjVyF8mJrg1ZtM FsQ5cal3eGuLV2fUvRD9yrx3e81FqYh0bG9hnBdbsxZPKODnUgG+EGppO0p+gO1W CaKpE6o5mpnL0IGM8VJUbyWLKK4oLpRyb4ZNHyb1la3edbgkRGMgU25jLGrFJyI9 DsJwGIFaYOEpoR5FrG/7QzLnC2BCiYkjmxoBY6y/9TmgvlXyspPtX9xneTOL1yuj JPbnQm7zDLYVMst7I2Ig9hrSY1BxHUY= -----END CERTIFICATE-----Generated at Sat Sep 26 01:53:42 2026 by rpki-client