$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/11201fd6-3297-3fa0-9993-7151b5002998.roa File: 11201fd6-3297-3fa0-9993-7151b5002998.roa (raw, json) Hash identifier: u85CFSghkrUd+t9mGWqWyjv6e0fNkcJtj3u2g08g4/M= Subject key identifier: 98:22:7A:10:86:84:0B:15:CC:1A:9A:24:0B:5C:69:0D:B8:27:E2:AE Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584B3C51ACD7A6777B18A7741A80 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/11201fd6-3297-3fa0-9993-7151b5002998.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 3738 IP address blocks: 192.250.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:ac:d7:a6:77:7b:18:a7:74:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=e064cace-4bd8-409a-b44f-7c90ee7ebe2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:47:1a:38:6d:97:b1:a7:0f:5a:fe:16:ef:ca: 63:07:2b:af:24:9a:0a:48:c7:0c:ce:9d:11:04:d7: 4b:b3:1e:67:08:fc:84:2d:e2:54:a7:46:91:7c:50: 57:79:28:fb:67:79:72:b4:17:99:b2:99:c1:b8:f7: 85:be:70:46:c1:b7:8a:14:6d:89:78:0c:1f:f9:b6: ad:40:b3:29:02:d8:97:d5:a3:7b:b9:d4:65:c3:bf: 4f:82:0a:96:29:95:58:5a:4d:40:0f:c1:45:56:cc: 00:73:20:18:33:da:7c:4a:18:4a:c8:6c:f6:e6:22: c2:d4:0a:87:fc:c3:bd:94:29:89:58:57:df:a0:25: 3f:3f:21:3f:d0:2c:22:de:53:18:96:1f:26:24:ae: 52:6d:08:f1:e3:67:d5:dd:b3:9f:3f:d3:d3:08:cc: c9:23:d9:7d:5b:5d:38:fa:73:08:64:9a:e4:a4:03: ba:56:f7:1f:bf:65:f0:1c:d4:16:8b:67:d4:25:a0: c5:9f:68:ca:69:35:dc:44:91:20:5d:95:e6:4a:e9: 42:f5:fc:93:33:72:53:ca:c9:7d:94:8d:8f:dc:2c: a3:e0:d1:65:10:10:bc:1e:b0:6b:33:9a:34:9e:fd: 75:fc:66:db:82:ad:e9:74:fc:55:c8:79:79:3c:f1: 8d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:22:7A:10:86:84:0B:15:CC:1A:9A:24:0B:5C:69:0D:B8:27:E2:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/11201fd6-3297-3fa0-9993-7151b5002998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f9:37:12:69:87:b6:2e:c1:60:ce:0b:62:f4:15:81:e4:42: ef:bb:fa:86:a7:7e:dc:91:68:dc:f4:3a:34:fa:2d:c0:05:87: 83:ab:1f:67:4d:32:d5:63:c3:0e:c2:41:f9:47:80:c1:31:b8: 84:f2:01:7d:96:dc:6c:6b:82:a4:0f:9d:b9:63:1e:e7:68:25: f9:ee:a6:94:f3:4a:ff:1b:36:73:1d:f6:c6:67:6b:0e:49:d0: a5:36:bb:98:8a:14:5e:f0:6c:1f:1a:46:ac:69:8c:5f:d9:59: ae:f5:d7:d3:10:0c:3f:b0:db:98:15:40:bf:ab:bb:4b:4e:49: 87:73:8b:f6:11:63:a8:a1:ea:40:c9:b9:64:87:0e:9a:b2:0e: 40:97:26:1b:fb:e6:d5:13:4a:02:80:dc:a6:59:67:7a:d6:ec: 56:88:bb:ff:91:57:ba:73:61:91:45:9a:23:2d:ea:f9:ca:06: ce:cf:e8:0a:5b:93:a4:b7:76:aa:ce:c7:63:cc:9f:d7:75:fb: b2:e6:ba:33:24:ec:7d:68:a3:23:d7:ba:6b:1f:8b:00:d2:69: 7c:b9:52:54:4b:30:84:79:35:c6:c6:ed:d6:c5:92:3a:2f:a8: f7:b7:3f:02:87:c7:90:ce:0f:cf:f9:af:55:fe:ef:e6:48:4b: 09:90:cd:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8UazXpnd7GKd0GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk ZTA2NGNhY2UtNGJkOC00MDlhLWI0NGYtN2M5MGVlN2ViZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkcaOG2XsacPWv4W78pjByuvJJoKSMcMzp0R BNdLsx5nCPyELeJUp0aRfFBXeSj7Z3lytBeZspnBuPeFvnBGwbeKFG2JeAwf+bat QLMpAtiX1aN7udRlw79PggqWKZVYWk1AD8FFVswAcyAYM9p8ShhKyGz25iLC1AqH /MO9lCmJWFffoCU/PyE/0Cwi3lMYlh8mJK5SbQjx42fV3bOfP9PTCMzJI9l9W104 +nMIZJrkpAO6Vvcfv2XwHNQWi2fUJaDFn2jKaTXcRJEgXZXmSulC9fyTM3JTysl9 lI2P3Cyj4NFlEBC8HrBrM5o0nv11/Gbbgq3pdPxVyHl5PPGNxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgiehCGhAsVzBqaJAtcaQ24J+KuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvMTEyMDFmZDYtMzI5Ny0z ZmEwLTk5OTMtNzE1MWI1MDAyOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPp3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFn5NxJph7YuwWDOC2L0FYHkQu+7+oanftyRaNz0OjT6LcAFh4OrH2dN MtVjww7CQflHgMExuITyAX2W3GxrgqQPnbljHudoJfnuppTzSv8bNnMd9sZnaw5J 0KU2u5iKFF7wbB8aRqxpjF/ZWa7119MQDD+w25gVQL+ru0tOSYdzi/YRY6ih6kDJ uWSHDpqyDkCXJhv75tUTSgKA3KZZZ3rW7FaIu/+RV7pzYZFFmiMt6vnKBs7P6Apb k6S3dqrOx2PMn9d1+7LmujMk7H1ooyPXumsfiwDSaXy5UlRLMIR5NcbG7dbFkjov qPe3PwKHx5DOD8/5r1X+7+ZISwmQzTE= -----END CERTIFICATE-----Generated at Wed Nov 5 09:13:10 2025 by rpki-client