$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/0a40e506-5824-343e-bf12-68c1aff736d7.roa File: 0a40e506-5824-343e-bf12-68c1aff736d7.roa (raw, json) Hash identifier: FP4BYb7gaU6uwd+ggYmUXzTtY3+NTzVirsIxVN+7f+U= Subject key identifier: B7:AC:B4:22:15:BA:1E:A2:F3:85:4D:9D:F5:75:53:85:3D:42:28:F8 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584F34CB89C08AC89986F117B380 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/0a40e506-5824-343e-bf12-68c1aff736d7.roa Signing time: Thu 17 Sep 2026 15:27:35 +0000 ROA not before: Thu 17 Sep 2026 15:27:35 +0000 ROA not after: Wed 16 Dec 2026 16:27:35 +0000 asID: 3738 IP address blocks: 192.250.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:cb:89:c0:8a:c8:99:86:f1:17:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 17 15:27:35 2026 GMT Not After : Dec 16 16:27:35 2026 GMT Subject: CN=5a8eb9d1-4608-475f-8b15-2c43aafd00d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:30:57:92:68:59:62:df:af:01:19:62:22:e8: 99:9e:6f:88:94:68:b1:fb:77:99:09:9f:2b:69:1f: a6:b9:21:8b:89:d1:ac:96:1d:53:b1:4b:69:9d:9f: 9c:ce:5c:a5:b7:c4:73:89:0c:5b:3e:59:8c:03:fa: dd:3f:00:40:b4:c0:45:3c:8b:83:ca:14:ba:1e:84: 2f:01:40:0c:80:93:2f:40:7e:d7:a2:d3:8a:49:7a: 10:80:00:32:a6:f5:6c:2c:35:52:fa:af:22:7d:d6: 30:b0:ef:e0:08:86:e9:3e:1a:d5:3f:4f:8f:df:cf: 1e:35:ef:d0:be:85:dc:cf:cf:44:41:3c:62:46:8d: 98:e4:4f:b9:87:f9:93:b0:09:34:4e:8f:5f:5d:a4: 27:32:8e:f6:c8:59:17:42:93:3b:b7:33:a1:32:6c: 33:b7:a3:48:48:ce:cd:c8:01:b8:60:f5:55:28:b4: aa:60:98:37:a5:8b:4e:8a:c8:f5:f2:33:0a:7b:ba: 02:b9:d2:14:80:d8:71:1b:90:81:18:a0:9a:d2:8a: d7:48:54:03:6d:d4:e5:00:3b:c6:7f:10:1f:f8:4d: af:ad:75:89:72:4b:33:30:92:5e:e8:a1:4b:54:e2: 72:32:cb:a8:28:23:63:b4:68:c2:4d:88:5a:2b:c7: a6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AC:B4:22:15:BA:1E:A2:F3:85:4D:9D:F5:75:53:85:3D:42:28:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/0a40e506-5824-343e-bf12-68c1aff736d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:25:89:dc:4c:ba:a5:65:73:e5:fc:39:17:24:cb:86:da:bd: 44:bf:73:bf:70:4c:89:db:7f:81:5a:f4:4f:8a:a0:41:5c:3f: d6:f8:b5:22:6d:fa:df:af:59:99:a6:6d:2e:e0:61:b5:a9:96: ab:4a:5e:e3:e0:39:b9:13:f6:de:cb:55:53:2d:d0:4d:61:94: ec:b1:74:49:b6:52:fc:65:e5:d6:e3:38:7e:6a:26:c6:b9:1f: 27:29:48:05:4e:f9:df:a2:2c:41:d2:70:d1:85:b8:e5:05:65: f7:06:55:d5:b1:d9:66:bc:c0:f7:9e:ed:53:69:bc:e5:1c:ec: f7:77:7e:0c:52:a2:c7:a7:6e:be:18:86:e5:7b:4d:c8:32:06: 6c:62:9c:9e:c5:f4:ab:b2:06:61:e7:8d:29:aa:c8:46:45:3d: 3d:70:b6:73:7b:5f:1f:90:23:da:cc:9b:fd:f0:fe:7a:65:73: 8b:b9:77:dc:fa:0a:f4:a6:ff:de:dd:c5:08:a9:6f:75:d3:55: 4a:ae:06:1b:13:ab:af:fd:64:e6:66:f2:4f:ec:a5:5c:18:05: 12:fe:43:0e:ce:18:7b:bb:72:e9:f9:af:11:3b:c9:31:d5:5c: c6:d1:ad:64:1b:ae:8a:ae:5e:f3:5b:4e:48:c7:a3:45:45:86: 2b:02:f5:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80y4nAisiZhvEXs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDkxNzE1MjczNVoXDTI2MTIxNjE2MjczNVowLzEtMCsGA1UEAxMk NWE4ZWI5ZDEtNDYwOC00NzVmLThiMTUtMmM0M2FhZmQwMGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTBXkmhZYt+vARliIuiZnm+IlGix+3eZCZ8r aR+muSGLidGslh1TsUtpnZ+czlylt8RziQxbPlmMA/rdPwBAtMBFPIuDyhS6HoQv AUAMgJMvQH7XotOKSXoQgAAypvVsLDVS+q8ifdYwsO/gCIbpPhrVP0+P388eNe/Q voXcz89EQTxiRo2Y5E+5h/mTsAk0To9fXaQnMo72yFkXQpM7tzOhMmwzt6NISM7N yAG4YPVVKLSqYJg3pYtOisj18jMKe7oCudIUgNhxG5CBGKCa0orXSFQDbdTlADvG fxAf+E2vrXWJckszMJJe6KFLVOJyMsuoKCNjtGjCTYhaK8emFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLestCIVuh6i84VNnfV1U4U9Qij4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvMGE0MGU1MDYtNTgyNC0z NDNlLWJmMTItNjhjMWFmZjczNmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwlidxMuqVlc+X8ORcky4bavUS/c79wTInbf4Fa9E+KoEFcP9b4tSJt +t+vWZmmbS7gYbWplqtKXuPgObkT9t7LVVMt0E1hlOyxdEm2Uvxl5dbjOH5qJsa5 HycpSAVO+d+iLEHScNGFuOUFZfcGVdWx2Wa8wPee7VNpvOUc7Pd3fgxSosenbr4Y huV7TcgyBmxinJ7F9KuyBmHnjSmqyEZFPT1wtnN7Xx+QI9rMm/3w/nplc4u5d9z6 CvSm/97dxQipb3XTVUquBhsTq6/9ZOZm8k/spVwYBRL+Qw7OGHu7cun5rxE7yTHV XMbRrWQbroquXvNbTkjHo0VFhisC9Yw= -----END CERTIFICATE-----Generated at Mon Sep 21 22:11:01 2026 by rpki-client