$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/18d3eb1a-2686-3995-bc81-542d9f93446f.roa File: 18d3eb1a-2686-3995-bc81-542d9f93446f.roa (raw, json) Hash identifier: V+S7vEKDgZJKZzXnjwc5vve4alFLsKen0lgytcKBxH8= Subject key identifier: 0E:6A:B1:07:16:9A:9A:6F:11:05:01:8A:D8:F8:B8:06:C3:1A:A2:BD Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584AEB5BD3117D8F613A309C9C40 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/18d3eb1a-2686-3995-bc81-542d9f93446f.roa Signing time: Wed 20 Aug 2025 13:00:41 +0000 ROA not before: Wed 20 Aug 2025 13:00:41 +0000 ROA not after: Tue 18 Nov 2025 14:00:41 +0000 asID: 3738 IP address blocks: 192.250.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:5b:d3:11:7d:8f:61:3a:30:9c:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Aug 20 13:00:41 2025 GMT Not After : Nov 18 14:00:41 2025 GMT Subject: CN=1f14a1ff-9bb0-46a7-99a7-1f98fa56f138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:26:d7:6a:1a:f3:e0:11:71:6a:d9:9c:a6:32: ce:be:7f:32:04:c8:f8:e7:af:c8:00:b9:4a:43:16: 2b:ea:0c:bd:76:1c:2b:75:e8:4c:77:97:9f:5e:7c: 5e:f0:c0:31:a6:d4:bc:8f:1e:53:c7:cd:09:0d:28: 4f:d8:b0:ae:15:b4:ed:25:d9:b8:d5:ad:88:dc:10: e4:d6:34:7d:d7:04:8f:79:69:a8:1a:b9:33:ab:4b: 15:e8:75:1c:71:ad:bd:8d:06:23:df:b4:83:20:b0: 51:18:b5:3c:23:ee:3d:97:4f:96:64:e2:11:9c:21: e0:33:29:66:be:7f:25:fa:26:fb:5c:e7:ae:d1:34: 7d:bb:dc:40:ac:c2:f2:04:c2:a1:db:92:aa:fe:c2: fa:9e:ab:5a:32:83:32:90:cb:52:aa:16:20:8e:ab: a7:95:96:47:bf:f2:66:6c:fe:3e:42:c4:d0:af:57: ab:83:ac:a2:c4:5e:3d:28:10:23:aa:fe:7c:81:05: 37:4d:c7:e3:03:2a:8f:27:8f:72:56:99:85:ae:27: 42:0e:d8:db:3f:cc:1f:92:89:de:07:fb:aa:b6:59: 34:29:1f:f9:01:38:a1:97:6a:68:63:c2:1d:7d:a7: 1b:aa:3b:73:6d:5e:80:a8:74:b4:0b:60:c1:99:90: 6c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6A:B1:07:16:9A:9A:6F:11:05:01:8A:D8:F8:B8:06:C3:1A:A2:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/18d3eb1a-2686-3995-bc81-542d9f93446f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:52:c9:57:08:db:95:e3:f6:b8:cd:c9:0d:a4:4e:83:fb:bf: bf:5f:20:40:12:4a:45:06:b9:09:52:21:5a:5b:fb:f9:ad:4a: d0:e0:28:f8:73:48:67:3d:8b:a0:0a:0b:72:5a:79:df:52:28: 93:da:23:a7:60:5b:69:79:1c:09:dd:78:2b:f4:dc:f5:2e:e5: b3:7c:aa:35:28:e2:39:9d:86:e5:fd:ac:fc:2d:5d:6a:99:3c: d3:1d:01:fa:5a:82:f0:54:15:97:4a:5b:44:8c:7b:a6:69:ef: fd:15:c6:63:d8:21:64:42:78:75:cf:88:fe:9e:e5:df:19:4d: e0:ea:c2:ae:51:35:b9:b6:36:44:59:3e:0f:e6:35:6e:b4:bf: 3f:87:e0:41:a5:74:b7:f9:21:81:56:13:b9:29:5f:29:f7:d4: 46:9b:4f:9f:d8:c8:32:a3:b6:70:8c:3d:02:46:fe:53:f9:31: 27:83:d2:bb:cf:bb:00:2f:d6:24:b7:01:42:c2:4a:e2:d3:f6: f5:82:0d:97:c7:55:4f:a1:a2:d6:8e:25:10:38:a7:87:7e:19: 05:8b:da:59:96:aa:59:d9:17:61:ed:97:d6:00:32:f8:57:59: 0b:04:6c:3d:39:e2:c6:7f:24:06:0d:36:ba:33:4c:14:6a:18: 7d:8f:c1:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrW9MRfY9hOjCcnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDgyMDEzMDA0MVoXDTI1MTExODE0MDA0MVowLzEtMCsGA1UEAxMk MWYxNGExZmYtOWJiMC00NmE3LTk5YTctMWY5OGZhNTZmMTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCbXahrz4BFxatmcpjLOvn8yBMj456/IALlK QxYr6gy9dhwrdehMd5efXnxe8MAxptS8jx5Tx80JDShP2LCuFbTtJdm41a2I3BDk 1jR91wSPeWmoGrkzq0sV6HUcca29jQYj37SDILBRGLU8I+49l0+WZOIRnCHgMylm vn8l+ib7XOeu0TR9u9xArMLyBMKh25Kq/sL6nqtaMoMykMtSqhYgjqunlZZHv/Jm bP4+QsTQr1erg6yixF49KBAjqv58gQU3TcfjAyqPJ49yVpmFridCDtjbP8wfkone B/uqtlk0KR/5ATihl2poY8IdfacbqjtzbV6AqHS0C2DBmZBs4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5qsQcWmppvEQUBitj4uAbDGqK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvMThkM2ViMWEtMjY4Ni0z OTk1LWJjODEtNTQyZDlmOTM0NDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNSyVcI25Xj9rjNyQ2kToP7v79fIEASSkUGuQlSIVpb+/mtStDgKPhz SGc9i6AKC3Jaed9SKJPaI6dgW2l5HAndeCv03PUu5bN8qjUo4jmdhuX9rPwtXWqZ PNMdAfpagvBUFZdKW0SMe6Zp7/0VxmPYIWRCeHXPiP6e5d8ZTeDqwq5RNbm2NkRZ Pg/mNW60vz+H4EGldLf5IYFWE7kpXyn31EabT5/YyDKjtnCMPQJG/lP5MSeD0rvP uwAv1iS3AULCSuLT9vWCDZfHVU+hotaOJRA4p4d+GQWL2lmWqlnZF2Htl9YAMvhX WQsEbD054sZ/JAYNNrozTBRqGH2PwZw= -----END CERTIFICATE-----Generated at Wed Nov 5 09:07:56 2025 by rpki-client