$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/0d4cf752-11a9-3196-8224-27b57c3db46a.roa File: 0d4cf752-11a9-3196-8224-27b57c3db46a.roa (raw, json) Hash identifier: gn3cT+fXy5qbA+LIeRXvFv/b6lXoRuzya81ZG5dis+s= Subject key identifier: EB:7F:BA:F5:57:00:B5:80:37:3E:17:BD:34:3C:CD:10:0E:EB:3E:32 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584F3CE27CD96221194A98E0A300 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/0d4cf752-11a9-3196-8224-27b57c3db46a.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 3738 IP address blocks: 192.250.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:7c:d9:62:21:19:4a:98:e0:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=b3cb9976-02d8-4522-8324-3da0668242d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:c7:b5:b2:34:f8:8f:60:15:70:ee:6d:83: 9d:50:54:d2:3d:2d:82:02:0f:1a:82:f6:16:36:ff: 16:97:7f:12:b5:36:3e:fc:8a:20:45:fa:dd:cf:0e: 57:6f:fc:cb:e9:42:fa:ac:ab:86:2c:df:0e:b9:fb: 25:a7:71:9b:6d:60:3a:e8:4c:91:b9:d5:9f:5f:ab: dc:92:c4:ba:c0:91:e2:99:18:f1:80:5c:c7:30:f3: 50:39:a6:e2:4c:89:72:4c:2e:31:e5:f6:45:ba:98: 45:b1:54:79:b2:7f:75:5d:13:26:dc:2e:34:2e:1c: ee:1e:1e:db:1c:6e:08:f8:e7:89:ef:36:9c:a4:86: ed:6d:6d:26:08:a8:45:9e:62:95:f5:ae:da:c6:a8: 67:59:ec:09:02:33:21:e1:fd:9a:4a:50:3d:b7:46: b3:71:36:df:aa:1b:8e:b5:ac:05:99:dc:de:ba:51: eb:32:44:0d:33:43:65:46:b7:4f:10:62:f6:2a:a6: 51:94:f5:d4:0e:0b:d5:d4:6a:00:54:d5:89:2a:12: ef:56:9a:10:46:0e:ff:f2:1d:0f:5a:4c:b6:23:33: 19:85:1f:44:f3:c6:91:1b:21:e7:8f:52:9f:48:85: 5a:c2:74:1b:44:14:50:23:68:5c:dd:b3:29:c4:56: 9e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7F:BA:F5:57:00:B5:80:37:3E:17:BD:34:3C:CD:10:0E:EB:3E:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/0d4cf752-11a9-3196-8224-27b57c3db46a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:66:c0:40:d4:6b:00:3c:25:de:a5:50:16:32:57:77:22:f7: 54:f2:eb:16:72:83:b2:ee:48:08:43:43:34:96:b4:11:18:f3: c1:89:5d:ef:d5:30:92:ec:fd:2b:fc:24:96:57:68:92:2c:12: 54:88:cd:09:1a:e8:63:fe:4a:ac:7c:e2:3b:ce:54:bb:32:18: fe:93:95:95:6b:0e:53:5f:13:20:92:d2:b5:01:d4:43:7f:43: 4e:8d:79:70:6d:d5:d2:9d:92:46:f0:0d:b4:ad:25:94:0f:91: dd:65:75:35:58:bd:f4:b2:b1:9e:9d:c8:ad:98:27:e5:93:03: 91:0c:76:91:b5:cc:fc:e7:08:37:47:b7:ce:94:52:5a:f9:70: ed:d0:ef:2f:a7:0f:0e:b4:88:49:d1:f4:03:ae:fc:b5:67:55: df:4f:e1:c8:b9:cc:b7:bf:c2:85:1d:cb:fb:b2:99:7b:ab:2c: 0c:1c:e1:d4:8e:87:da:d9:ea:3e:cb:dd:2e:3d:c8:97:65:be: 3f:d7:43:58:7b:be:59:4b:15:e7:b6:89:cf:63:c8:07:ac:6d: 77:1e:d4:d6:a8:96:77:36:21:89:0b:ce:88:42:b6:36:a1:8a: 0f:ba:3d:8d:1e:3f:1a:5e:8d:ec:ac:a0:77:af:c6:72:34:34: 8d:d1:d4:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884nzZYiEZSpjgowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk YjNjYjk5NzYtMDJkOC00NTIyLTgzMjQtM2RhMDY2ODI0MmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzrHtbI0+I9gFXDubYOdUFTSPS2CAg8agvYW Nv8Wl38StTY+/IogRfrdzw5Xb/zL6UL6rKuGLN8Oufslp3GbbWA66EyRudWfX6vc ksS6wJHimRjxgFzHMPNQOabiTIlyTC4x5fZFuphFsVR5sn91XRMm3C40LhzuHh7b HG4I+OeJ7zacpIbtbW0mCKhFnmKV9a7axqhnWewJAjMh4f2aSlA9t0azcTbfqhuO tawFmdzeulHrMkQNM0NlRrdPEGL2KqZRlPXUDgvV1GoAVNWJKhLvVpoQRg7/8h0P Wky2IzMZhR9E88aRGyHnj1KfSIVawnQbRBRQI2hc3bMpxFae7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOt/uvVXALWANz4XvTQ8zRAO6z4yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvMGQ0Y2Y3NTItMTFhOS0z MTk2LTgyMjQtMjdiNTdjM2RiNDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5mwEDUawA8Jd6lUBYyV3ci91Ty6xZyg7LuSAhDQzSWtBEY88GJXe/V MJLs/Sv8JJZXaJIsElSIzQka6GP+Sqx84jvOVLsyGP6TlZVrDlNfEyCS0rUB1EN/ Q06NeXBt1dKdkkbwDbStJZQPkd1ldTVYvfSysZ6dyK2YJ+WTA5EMdpG1zPznCDdH t86UUlr5cO3Q7y+nDw60iEnR9AOu/LVnVd9P4ci5zLe/woUdy/uymXurLAwc4dSO h9rZ6j7L3S49yJdlvj/XQ1h7vllLFee2ic9jyAesbXce1Naolnc2IYkLzohCtjah ig+6PY0ePxpejeysoHevxnI0NI3R1OU= -----END CERTIFICATE-----Generated at Tue Sep 22 02:44:56 2026 by rpki-client