$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/1c3acf03-bb1a-3986-907e-36fa7bf9ab0d.roa File: 1c3acf03-bb1a-3986-907e-36fa7bf9ab0d.roa (raw, json) Hash identifier: Tama1G6IiKWO2v5fJfk85TtQ60ypCxub3bKucclpcsk= Subject key identifier: CD:CD:EF:F2:AC:3F:9C:85:83:38:23:CD:16:C2:89:AA:86:D8:9B:14 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584F3CE29669A48E0D36A9E9BD40 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/1c3acf03-bb1a-3986-907e-36fa7bf9ab0d.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 3738 IP address blocks: 192.250.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:96:69:a4:8e:0d:36:a9:e9:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=f416d0e5-79da-46aa-9bd7-2b5449f2f4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fb:b9:19:8e:e4:82:1c:2c:5b:7a:7b:d5:e4: dc:17:95:16:ef:16:bd:8f:5f:9e:6f:9a:5f:32:54: 9d:dc:52:77:11:84:a8:ee:d5:0e:60:f7:55:0b:8a: 68:61:c8:bb:21:73:a5:9f:2b:bd:59:ac:b3:ec:88: 7b:29:d5:1c:4a:02:99:5d:56:74:7d:34:a1:f1:7c: cd:22:47:29:4c:81:86:4f:14:fe:be:46:73:83:9a: cb:e8:64:6b:2d:da:d8:68:30:cb:85:92:4d:00:9a: bb:48:a6:20:f2:03:98:1c:89:0f:6a:9b:ff:55:d3: fc:05:82:74:29:65:1d:94:d0:0d:90:94:f1:42:9d: 06:44:6b:9d:2c:48:5e:29:7c:39:bb:73:26:31:74: a8:e3:d1:36:b6:42:af:fb:b3:89:1b:28:29:fb:13: 23:07:43:d1:43:84:26:2b:73:09:dc:7b:4e:cb:2b: 52:68:b0:39:e6:da:4f:68:3d:21:82:04:45:38:58: df:70:55:2d:71:8f:18:40:62:af:14:9d:ab:16:f5: 95:8f:0c:bd:7a:80:22:d3:49:7a:c4:7f:ae:1a:c9: 45:98:87:f7:65:19:35:c0:93:3f:ff:88:b9:73:12: 68:89:fe:d4:ff:29:c2:86:1d:65:94:ac:55:4d:81: 1a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CD:EF:F2:AC:3F:9C:85:83:38:23:CD:16:C2:89:AA:86:D8:9B:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/1c3acf03-bb1a-3986-907e-36fa7bf9ab0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:d1:25:cd:28:3a:ba:5f:59:34:43:18:d4:85:50:1c:d3:16: 40:e8:a0:a0:be:51:b9:a1:28:d2:bf:d2:88:93:85:b1:fa:96: cd:64:7d:fd:2c:3b:b4:86:2e:64:5c:2c:3f:a9:b4:b5:b3:49: 72:6e:5a:33:42:53:fc:cc:22:c5:5d:e1:2b:04:f4:8c:b2:15: 0d:a7:b9:7d:87:56:76:42:1a:77:51:6a:08:ec:81:22:3d:11: 47:1d:d6:c2:7b:b5:9d:c2:af:c9:97:ab:72:62:44:06:a0:d7: 2c:11:fe:53:1c:c8:19:f7:17:e3:f2:1d:c9:09:a7:b7:e1:ba: 1c:25:18:37:f4:e9:8f:98:b7:f9:7a:13:95:fe:7c:66:b9:1f: ea:dc:cf:ec:a0:82:ef:a8:8e:ee:43:ae:d4:86:5e:e2:dd:ba: 5b:84:51:34:4c:cc:b1:81:1c:52:2f:f9:59:d2:5c:b6:58:37: 40:59:52:66:17:02:4a:13:ae:b0:2b:38:96:ea:0a:8a:75:6f: 35:50:eb:e2:13:0f:08:6b:5e:d5:05:aa:1b:45:89:93:79:4d: 05:25:66:28:41:23:41:66:6e:30:75:98:3e:ef:b0:0d:50:f1: d4:c6:2c:e9:db:2c:2a:69:53:c2:8f:6b:9d:a7:38:57:05:82: fd:6b:aa:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884pZppI4NNqnpvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjQxNmQwZTUtNzlkYS00NmFhLTliZDctMmI1NDQ5ZjJmNGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fu5GY7kghwsW3p71eTcF5UW7xa9j1+eb5pf MlSd3FJ3EYSo7tUOYPdVC4poYci7IXOlnyu9Wayz7Ih7KdUcSgKZXVZ0fTSh8XzN IkcpTIGGTxT+vkZzg5rL6GRrLdrYaDDLhZJNAJq7SKYg8gOYHIkPapv/VdP8BYJ0 KWUdlNANkJTxQp0GRGudLEheKXw5u3MmMXSo49E2tkKv+7OJGygp+xMjB0PRQ4Qm K3MJ3HtOyytSaLA55tpPaD0hggRFOFjfcFUtcY8YQGKvFJ2rFvWVjwy9eoAi00l6 xH+uGslFmIf3ZRk1wJM//4i5cxJoif7U/ynChh1llKxVTYEa4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3N7/KsP5yFgzgjzRbCiaqG2JsUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvMWMzYWNmMDMtYmIxYS0z OTg2LTkwN2UtMzZmYTdiZjlhYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvRJc0oOrpfWTRDGNSFUBzTFkDooKC+UbmhKNK/0oiThbH6ls1kff0s O7SGLmRcLD+ptLWzSXJuWjNCU/zMIsVd4SsE9IyyFQ2nuX2HVnZCGndRagjsgSI9 EUcd1sJ7tZ3Cr8mXq3JiRAag1ywR/lMcyBn3F+PyHckJp7fhuhwlGDf06Y+Yt/l6 E5X+fGa5H+rcz+yggu+oju5DrtSGXuLduluEUTRMzLGBHFIv+VnSXLZYN0BZUmYX AkoTrrArOJbqCop1bzVQ6+ITDwhrXtUFqhtFiZN5TQUlZihBI0FmbjB1mD7vsA1Q 8dTGLOnbLCppU8KPa52nOFcFgv1rqsc= -----END CERTIFICATE-----Generated at Mon Sep 21 20:06:02 2026 by rpki-client