$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/853db1af-0c14-3537-afa6-b2429c1a8793.roa File: 853db1af-0c14-3537-afa6-b2429c1a8793.roa (raw, json) Hash identifier: p/hnJ5lQw8A0hq+SiEGeubzvBxOgmq0PDDjTxfrxI1w= Subject key identifier: 31:8E:2D:18:E8:99:9A:B7:95:66:B6:6E:04:EA:17:B6:F6:37:48:97 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584F49767C53864264E830B87A60 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/853db1af-0c14-3537-afa6-b2429c1a8793.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3738 IP address blocks: 192.250.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:7c:53:86:42:64:e8:30:b8:7a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6510bd76-fca4-4ecd-bdc5-da1a915e74c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:16:af:cc:05:b0:bb:a9:d6:6c:39:e8:43:23: a4:c4:85:73:28:da:21:f3:64:d2:30:b2:71:44:9d: 31:e2:f9:b9:11:0a:07:bb:fe:4f:bb:5f:fe:6b:99: 8b:bd:42:e1:2e:e2:5b:e9:7b:96:30:cb:0a:a1:01: 46:e9:20:34:36:dd:c3:47:8f:f8:97:40:b3:ca:f6: 2e:ab:6b:0f:6a:23:1e:35:8c:25:2d:91:c7:ab:08: 8a:96:ba:c2:a6:b9:50:74:9e:1a:3c:87:c0:94:0c: f7:9d:7c:38:7f:fe:73:19:a3:44:93:23:3a:bd:de: e6:17:8b:c6:cc:cf:27:70:3e:ff:00:d6:2b:0a:82: f9:ac:b3:d9:fc:f0:31:f2:68:2a:2c:ea:e3:16:75: 86:7c:57:c2:ae:46:55:f9:bc:b7:fb:6c:11:69:e6: ed:d3:19:0c:41:fd:db:73:1d:af:aa:f9:ce:a5:4b: ff:de:37:8c:5e:7f:66:fb:0c:85:65:9d:9e:3a:87: 63:5c:20:49:64:3f:5b:8a:b0:1e:19:82:10:a2:ec: 02:66:f2:8a:d6:eb:e1:ef:13:5e:cb:fb:2f:88:b9: ed:83:d7:67:3c:96:9b:79:70:d2:35:76:43:4f:f9: 95:7b:74:56:7f:27:ed:11:58:fd:9b:41:85:40:e9: 08:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8E:2D:18:E8:99:9A:B7:95:66:B6:6E:04:EA:17:B6:F6:37:48:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/853db1af-0c14-3537-afa6-b2429c1a8793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ec:d1:89:7f:a4:e1:b8:fd:79:d7:96:41:7b:55:e6:7d:59: c4:93:e6:5d:bd:44:34:62:af:a5:f2:2d:7a:a6:79:e9:44:a8: 41:a9:6b:a6:f4:ea:3f:cf:0c:48:cd:fb:61:ae:ba:25:14:8a: fb:44:9f:d1:18:59:ba:9b:cc:ad:8a:81:43:17:19:93:b0:99: 19:84:6e:d3:23:6b:22:b0:bf:5b:12:a3:a3:11:69:8c:c7:1d: dd:2c:19:d9:d4:b7:be:fa:2d:6b:50:c5:48:30:d3:9e:a0:00: bc:ef:3f:df:29:ea:53:19:c0:64:8c:72:b3:f7:6e:06:56:34: a6:a7:37:9e:a3:9e:2f:d5:eb:c1:39:63:53:e4:96:e5:c9:f8: 75:41:3e:30:d0:03:fb:93:71:59:e0:2a:13:a0:bd:5c:86:eb: 1b:8a:f0:17:f5:c1:1d:67:67:e3:1e:4e:6e:e5:ad:b8:a2:96: ef:5d:2c:cc:65:93:b0:c6:8e:ba:21:da:99:b4:fa:a3:97:15: 4c:74:e5:9d:8c:03:c4:21:8d:90:aa:db:5d:1d:f4:5a:bd:61: 0e:61:77:50:99:be:38:aa:62:aa:76:72:fa:bd:4c:18:c9:55: 50:a3:22:90:e6:8d:ab:80:54:63:31:98:3a:fa:e6:ff:8e:be: 6d:6c:eb:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdnxThkJk6DC4emAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjUxMGJkNzYtZmNhNC00ZWNkLWJkYzUtZGExYTkxNWU3NGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBavzAWwu6nWbDnoQyOkxIVzKNoh82TSMLJx RJ0x4vm5EQoHu/5Pu1/+a5mLvULhLuJb6XuWMMsKoQFG6SA0Nt3DR4/4l0CzyvYu q2sPaiMeNYwlLZHHqwiKlrrCprlQdJ4aPIfAlAz3nXw4f/5zGaNEkyM6vd7mF4vG zM8ncD7/ANYrCoL5rLPZ/PAx8mgqLOrjFnWGfFfCrkZV+by3+2wRaebt0xkMQf3b cx2vqvnOpUv/3jeMXn9m+wyFZZ2eOodjXCBJZD9birAeGYIQouwCZvKK1uvh7xNe y/sviLntg9dnPJabeXDSNXZDT/mVe3RWfyftEVj9m0GFQOkIMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGOLRjomZq3lWa2bgTqF7b2N0iXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvODUzZGIxYWYtMGMxNC0z NTM3LWFmYTYtYjI0MjljMWE4NzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArs0Yl/pOG4/XnXlkF7VeZ9WcST5l29RDRir6XyLXqmeelEqEGpa6b0 6j/PDEjN+2GuuiUUivtEn9EYWbqbzK2KgUMXGZOwmRmEbtMjayKwv1sSo6MRaYzH Hd0sGdnUt776LWtQxUgw056gALzvP98p6lMZwGSMcrP3bgZWNKanN56jni/V68E5 Y1PkluXJ+HVBPjDQA/uTcVngKhOgvVyG6xuK8Bf1wR1nZ+MeTm7lrbiilu9dLMxl k7DGjroh2pm0+qOXFUx05Z2MA8QhjZCq210d9Fq9YQ5hd1CZvjiqYqp2cvq9TBjJ VVCjIpDmjauAVGMxmDr65v+Ovm1s6xQ= -----END CERTIFICATE-----Generated at Fri Sep 25 18:31:34 2026 by rpki-client