$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/1baf6c98-4306-31cd-8037-a57bf81a7a84.roa File: 1baf6c98-4306-31cd-8037-a57bf81a7a84.roa (raw, json) Hash identifier: O0GrCSADAF4il6oFCWX7t3qVpbMtmbWauU/WuyxqXhQ= Subject key identifier: 17:E1:D2:3A:3F:06:B3:F3:1E:94:37:94:FA:8C:C6:48:C5:BB:4B:FA Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584F3CE279C52BA86FEB65B9B660 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/1baf6c98-4306-31cd-8037-a57bf81a7a84.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 3738 IP address blocks: 192.250.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:79:c5:2b:a8:6f:eb:65:b9:b6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=ad122e9f-0683-4b5c-82c5-ccb92770ef23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:94:67:c5:83:a8:c1:c4:43:72:36:1f:72:f3: f2:5e:1a:73:26:96:71:dd:cb:26:be:37:9d:3e:a0: e4:22:45:a6:b1:af:c3:d6:48:83:a6:10:a4:2b:cd: 36:d7:81:5f:b9:5c:98:0f:b1:4a:d4:34:74:dc:d5: 74:09:30:59:ee:a8:c6:13:53:a0:66:c9:5f:d7:4c: 80:20:21:53:ba:07:f3:52:e0:d5:a1:a4:3f:74:69: 49:38:68:8e:db:3e:ee:42:54:c7:4d:3f:41:6c:52: 85:9b:8e:ae:02:01:53:41:ed:73:6b:3b:ec:55:9d: 56:7d:40:32:39:52:f0:5a:d5:0d:f9:47:3f:bc:e5: ac:0b:50:81:e2:78:ee:48:02:9c:e8:68:42:58:5e: 27:18:d4:c7:00:ae:7a:16:e5:7f:80:6c:ac:58:81: 33:9e:2f:63:8b:f7:cd:ad:e2:09:67:4b:c0:7f:c6: 7e:2a:86:7c:1c:4e:74:fd:57:c9:94:24:8e:da:8f: 8d:50:ef:33:19:e2:38:77:6f:4a:f1:75:91:31:8b: 51:49:83:4e:c3:84:e0:40:d1:72:76:a0:36:da:59: 70:4b:26:71:2b:00:0c:1e:a6:dc:b1:d6:f9:29:e7: 70:05:d4:f6:ab:cb:ab:e9:bc:c6:09:55:ce:57:d5: 75:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E1:D2:3A:3F:06:B3:F3:1E:94:37:94:FA:8C:C6:48:C5:BB:4B:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/1baf6c98-4306-31cd-8037-a57bf81a7a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:7f:8d:66:d9:34:98:7e:33:3c:23:3a:27:fd:e6:c6:2d:c7: e4:eb:25:92:41:6d:c2:c8:0e:a5:38:f6:6e:40:0c:e5:c1:6d: c7:2b:66:85:ba:29:b1:cb:4e:8d:51:db:c5:ab:e6:38:b7:eb: 57:d5:51:4a:93:ac:84:da:f2:2a:2f:d5:aa:41:78:7f:0b:fc: e8:b5:cc:b3:c4:94:d4:b9:b3:e2:03:ff:e3:38:ab:8a:91:a5: e0:ae:d2:cf:13:eb:ad:58:1b:24:98:8b:e8:3e:69:14:cd:4e: 1e:1e:3a:8e:7e:c1:b2:dc:cd:b7:f3:83:38:34:cd:0b:1e:1e: 15:d9:cb:eb:df:7d:c4:fa:65:b5:b9:8b:b1:d9:11:52:81:79: 5f:6b:3d:0e:22:3a:21:de:b7:f3:50:eb:d6:f5:41:0d:3f:c9: 4b:e2:70:64:e2:9d:40:97:fe:28:73:bb:9a:61:ca:e0:13:11: 71:ae:4e:2b:b7:87:fd:78:15:0b:7a:5c:00:30:5c:b0:12:f4: 6d:95:69:04:08:41:29:8d:fb:67:85:c3:66:04:a5:c7:87:f5: 0c:c1:2e:82:bf:e8:e9:9c:f4:4e:43:90:83:e5:77:a2:ee:21: 28:a2:d2:7d:31:d4:17:a8:a8:55:47:83:75:8a:10:47:0a:99: e1:57:b4:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884nnFK6hv62W5tmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk YWQxMjJlOWYtMDY4My00YjVjLTgyYzUtY2NiOTI3NzBlZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJRnxYOowcRDcjYfcvPyXhpzJpZx3csmvjed PqDkIkWmsa/D1kiDphCkK80214FfuVyYD7FK1DR03NV0CTBZ7qjGE1OgZslf10yA ICFTugfzUuDVoaQ/dGlJOGiO2z7uQlTHTT9BbFKFm46uAgFTQe1zazvsVZ1WfUAy OVLwWtUN+Uc/vOWsC1CB4njuSAKc6GhCWF4nGNTHAK56FuV/gGysWIEzni9ji/fN reIJZ0vAf8Z+KoZ8HE50/VfJlCSO2o+NUO8zGeI4d29K8XWRMYtRSYNOw4TgQNFy dqA22llwSyZxKwAMHqbcsdb5KedwBdT2q8ur6bzGCVXOV9V18QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfh0jo/BrPzHpQ3lPqMxkjFu0v6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvMWJhZjZjOTgtNDMwNi0z MWNkLTgwMzctYTU3YmY4MWE3YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ/jWbZNJh+MzwjOif95sYtx+TrJZJBbcLIDqU49m5ADOXBbccrZoW6 KbHLTo1R28Wr5ji361fVUUqTrITa8iov1apBeH8L/Oi1zLPElNS5s+ID/+M4q4qR peCu0s8T661YGySYi+g+aRTNTh4eOo5+wbLczbfzgzg0zQseHhXZy+vffcT6ZbW5 i7HZEVKBeV9rPQ4iOiHet/NQ69b1QQ0/yUvicGTinUCX/ihzu5phyuATEXGuTiu3 h/14FQt6XAAwXLAS9G2VaQQIQSmN+2eFw2YEpceH9QzBLoK/6Omc9E5DkIPld6Lu ISii0n0x1BeoqFVHg3WKEEcKmeFXtHQ= -----END CERTIFICATE-----Generated at Tue Sep 22 13:33:39 2026 by rpki-client