$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/7814deb0-86e4-358f-a861-a3dbb1d62c2e.roa File: 7814deb0-86e4-358f-a861-a3dbb1d62c2e.roa (raw, json) Hash identifier: 1Gafwd7b/eTg+DkCYVg6S4AajwVOCz+5BSx2P60SWmc= Subject key identifier: 22:2A:20:49:85:6D:2B:CF:6C:D4:C7:DB:96:C6:1D:2C:0C:3C:38:B5 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584F4989543226748090F6CD8240 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/7814deb0-86e4-358f-a861-a3dbb1d62c2e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3738 IP address blocks: 192.250.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:54:32:26:74:80:90:f6:cd:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=518849a7-4232-488a-a7c2-a6812d93fd69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8b:cc:e3:8b:16:c2:5b:cf:bc:33:d6:04:5b: 73:cf:07:94:1b:67:a9:8c:f1:19:e8:78:24:2a:e1: 8a:d0:3f:2b:1b:fa:f8:a4:71:c0:79:33:ce:59:bc: ff:07:6d:2f:6d:6b:4e:dc:28:78:2d:27:19:5c:ec: 5a:14:8d:8b:00:e2:89:28:8d:6d:ad:88:90:42:14: 8a:a8:50:c1:02:a9:89:9a:c5:5c:d7:ff:e1:c6:72: 77:90:ee:1f:ce:19:f9:51:1b:a9:b7:ce:06:02:4e: f4:70:27:aa:0a:89:01:83:44:18:f3:f5:dc:bf:38: 23:5d:38:fa:65:7d:cc:92:4a:94:d2:b9:16:83:2c: 9d:40:01:e7:a8:f3:07:54:ce:0e:9b:ed:70:04:57: 0c:8e:a4:ad:d1:7b:40:53:74:fd:02:05:49:b3:4b: 80:fb:c6:56:45:68:d4:02:e7:91:32:d0:9a:43:4e: bb:f9:53:97:3c:ec:c3:da:8d:49:ee:3a:74:84:fe: 1b:56:36:a3:21:78:c8:09:63:60:18:aa:e8:25:4e: 94:2f:73:2a:ec:77:b7:2a:aa:db:47:6e:a2:31:09: 3c:82:05:8f:9d:00:58:40:1c:48:a3:8e:0c:d4:e1: 8f:db:50:db:3b:6e:ca:1a:0c:6f:68:e9:b5:24:19: b9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2A:20:49:85:6D:2B:CF:6C:D4:C7:DB:96:C6:1D:2C:0C:3C:38:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/7814deb0-86e4-358f-a861-a3dbb1d62c2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:07:6e:9b:fc:f8:13:c5:f7:46:ac:4a:22:42:54:b2:39:20: 8a:90:9c:7c:5e:42:37:b9:ff:6d:7b:a9:24:25:fc:4d:11:40: 39:68:67:68:98:ce:f3:3e:b3:bd:f6:80:42:64:1e:1b:5f:cd: 33:21:46:fb:d3:ec:e4:64:90:52:35:82:e7:83:6a:b6:ac:ed: 58:3e:a7:f0:f1:21:db:f1:d0:9c:77:a0:4c:a1:ef:36:d7:ae: e7:74:a1:16:d7:01:f1:f1:35:d0:9d:c5:d1:47:00:4a:15:43: f2:d2:c2:ec:ca:b7:eb:de:69:69:2f:f9:65:35:0c:83:83:61: 93:77:5f:57:e6:82:4a:c2:51:47:17:9f:c2:e7:f2:5a:cf:de: f0:56:ab:0e:e2:19:d4:87:05:ea:aa:d4:b2:57:f4:82:f4:2a: a8:b0:9f:18:64:40:a3:b7:bd:ac:4e:ba:85:0b:e4:50:dc:49: 02:0d:ce:5a:3b:ab:e5:cf:6f:03:c6:54:61:98:30:4a:bb:13: 11:a8:0e:6e:53:f6:1c:dc:31:99:59:e3:70:98:6c:79:d3:52: de:4c:0e:83:e6:dc:0d:dd:3e:75:5c:70:da:b4:ca:5a:9d:88: d4:0b:c7:a7:42:7c:b8:2f:c8:d5:c5:3d:71:49:bd:b0:84:af: 3e:9e:95:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiVQyJnSAkPbNgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTE4ODQ5YTctNDIzMi00ODhhLWE3YzItYTY4MTJkOTNmZDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIvM44sWwlvPvDPWBFtzzweUG2epjPEZ6Hgk KuGK0D8rG/r4pHHAeTPOWbz/B20vbWtO3Ch4LScZXOxaFI2LAOKJKI1trYiQQhSK qFDBAqmJmsVc1//hxnJ3kO4fzhn5URupt84GAk70cCeqCokBg0QY8/XcvzgjXTj6 ZX3MkkqU0rkWgyydQAHnqPMHVM4Om+1wBFcMjqSt0XtAU3T9AgVJs0uA+8ZWRWjU AueRMtCaQ067+VOXPOzD2o1J7jp0hP4bVjajIXjICWNgGKroJU6UL3Mq7He3Kqrb R26iMQk8ggWPnQBYQBxIo44M1OGP21DbO27KGgxvaOm1JBm5OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIqIEmFbSvPbNTH25bGHSwMPDi1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvNzgxNGRlYjAtODZlNC0z NThmLWE4NjEtYTNkYmIxZDYyYzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkHbpv8+BPF90asSiJCVLI5IIqQnHxeQje5/217qSQl/E0RQDloZ2iY zvM+s732gEJkHhtfzTMhRvvT7ORkkFI1gueDaras7Vg+p/DxIdvx0Jx3oEyh7zbX rud0oRbXAfHxNdCdxdFHAEoVQ/LSwuzKt+veaWkv+WU1DIODYZN3X1fmgkrCUUcX n8Ln8lrP3vBWqw7iGdSHBeqq1LJX9IL0KqiwnxhkQKO3vaxOuoUL5FDcSQINzlo7 q+XPbwPGVGGYMEq7ExGoDm5T9hzcMZlZ43CYbHnTUt5MDoPm3A3dPnVccNq0ylqd iNQLx6dCfLgvyNXFPXFJvbCErz6elRo= -----END CERTIFICATE-----Generated at Sun Sep 27 12:11:13 2026 by rpki-client