$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/68a09496-dd1f-37b9-a873-c541d78bb65b.roa File: 68a09496-dd1f-37b9-a873-c541d78bb65b.roa (raw, json) Hash identifier: FIippC7TH0r4aha4Ktk6oWpgahxstqEQYYBdPpMidEE= Subject key identifier: FD:76:65:53:65:CB:C2:55:A1:05:38:D0:B7:AE:AC:78:F5:92:DC:29 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584F497687EECA4170A604B80440 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/68a09496-dd1f-37b9-a873-c541d78bb65b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3738 IP address blocks: 192.250.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:87:ee:ca:41:70:a6:04:b8:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=af6a13b9-ead4-49c5-ba39-66876b6dc6a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:91:96:ba:34:0e:f0:b1:f1:61:a7:9c:07:5d: b4:0f:d0:91:b4:05:37:8c:8c:c4:64:99:8f:21:8f: be:5d:5f:01:b4:5c:5e:58:ae:b9:1e:4a:2e:a1:53: 2b:45:b3:de:93:9e:ce:cf:71:32:a9:13:a3:fa:34: 9f:be:08:15:ec:0e:cb:cc:b8:d4:2c:bd:82:bb:30: 96:c7:3e:d8:4d:05:02:06:be:6e:3f:27:c7:f3:a7: a8:8d:31:9a:f6:72:f4:28:6f:29:c3:b2:1a:5c:e7: ff:e6:ec:f9:92:8b:ec:e9:d3:7b:1d:39:43:ac:c8: 45:cf:87:d6:f8:89:f0:a8:bc:4a:3a:6c:30:55:09: a5:ee:18:41:89:cb:32:65:25:13:8d:04:33:70:3a: c2:22:94:20:d2:28:f6:a2:ed:1b:dd:f7:84:7a:90: db:0a:e1:c6:9c:08:ae:d8:7e:ce:97:8e:2a:33:67: 82:b2:8d:4c:34:27:c7:4f:52:f4:80:91:54:37:80: 02:f9:b1:de:d2:b5:3a:e2:b5:c8:bc:bf:6e:48:ba: 72:a8:a2:63:01:d0:ea:b9:bf:1a:0e:ea:5e:4a:fe: e2:01:11:15:1d:7f:7a:67:e4:5b:30:3e:5d:99:fc: 27:ff:e7:89:a6:bf:a8:b9:6e:86:1b:23:05:67:29: 94:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:76:65:53:65:CB:C2:55:A1:05:38:D0:B7:AE:AC:78:F5:92:DC:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/68a09496-dd1f-37b9-a873-c541d78bb65b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:9c:4e:dd:37:73:32:ef:96:e1:d2:a0:9f:49:de:f1:ed:d2: cc:09:f8:21:83:8c:2c:23:b4:4d:94:da:73:a1:79:3e:f1:14: 82:cc:14:41:2f:66:d1:b1:1d:68:58:b6:79:c8:3b:89:42:4e: 08:88:79:b7:4a:0b:48:51:5b:ac:d7:95:10:80:d3:af:50:ad: 74:ca:a9:e5:d2:d6:24:b4:e9:b7:48:1a:e5:53:6e:2d:6f:48: 71:2a:44:ef:2a:49:80:cd:44:34:49:9d:c3:b9:12:21:82:f1: 58:93:22:c5:e2:b2:b7:49:83:da:68:03:da:7d:90:55:21:38: 04:ea:f1:50:60:be:ca:d2:20:04:c7:74:cd:18:27:6d:51:39: ee:01:13:1b:3b:11:f4:18:f5:2c:4f:8b:e4:52:a6:37:04:92: 50:b6:3f:bf:1a:0b:d7:47:08:2a:b9:1e:35:9b:ef:fd:1e:95: c4:6e:b6:06:e4:e9:c9:9c:8c:22:c5:bd:c0:03:f4:b8:15:71: 5c:da:49:71:5d:36:d2:83:b7:6d:21:37:7f:a3:fc:32:76:eb: 92:b1:c9:bf:0b:f0:09:71:94:15:96:24:16:5b:1f:60:45:9d: e4:39:4a:35:b4:e6:95:c5:15:dc:72:7d:f2:7b:02:e3:82:83: 39:77:5c:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdofuykFwpgS4BEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWY2YTEzYjktZWFkNC00OWM1LWJhMzktNjY4NzZiNmRjNmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJGWujQO8LHxYaecB120D9CRtAU3jIzEZJmP IY++XV8BtFxeWK65HkouoVMrRbPek57Oz3EyqROj+jSfvggV7A7LzLjULL2CuzCW xz7YTQUCBr5uPyfH86eojTGa9nL0KG8pw7IaXOf/5uz5kovs6dN7HTlDrMhFz4fW +InwqLxKOmwwVQml7hhBicsyZSUTjQQzcDrCIpQg0ij2ou0b3feEepDbCuHGnAiu 2H7Ol44qM2eCso1MNCfHT1L0gJFUN4AC+bHe0rU64rXIvL9uSLpyqKJjAdDqub8a DupeSv7iAREVHX96Z+RbMD5dmfwn/+eJpr+ouW6GGyMFZymU9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP12ZVNly8JVoQU40LeurHj1ktwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvNjhhMDk0OTYtZGQxZi0z N2I5LWE4NzMtYzU0MWQ3OGJiNjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPo/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADycTt03czLvluHSoJ9J3vHt0swJ+CGDjCwjtE2U2nOheT7xFILMFEEv ZtGxHWhYtnnIO4lCTgiIebdKC0hRW6zXlRCA069QrXTKqeXS1iS06bdIGuVTbi1v SHEqRO8qSYDNRDRJncO5EiGC8ViTIsXisrdJg9poA9p9kFUhOATq8VBgvsrSIATH dM0YJ21ROe4BExs7EfQY9SxPi+RSpjcEklC2P78aC9dHCCq5HjWb7/0elcRutgbk 6cmcjCLFvcAD9LgVcVzaSXFdNtKDt20hN3+j/DJ265Kxyb8L8AlxlBWWJBZbH2BF neQ5SjW05pXFFdxyffJ7AuOCgzl3XFs= -----END CERTIFICATE-----Generated at Sat Sep 26 02:11:31 2026 by rpki-client