$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3a1661e8-e26c-33eb-8628-c7a97a3366a0.roa File: 3a1661e8-e26c-33eb-8628-c7a97a3366a0.roa (raw, json) Hash identifier: h/wOuvzG2eDEm+H08j9LgVl7lKIfdxG+JjUz2lZhoOI= Subject key identifier: 2C:9B:24:68:F7:F1:49:AE:23:06:93:EE:16:9E:44:C2:90:3E:C4:7C Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584EF2E76415EA3373F94767D914 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3a1661e8-e26c-33eb-8628-c7a97a3366a0.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 3738 IP address blocks: 192.250.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:64:15:ea:33:73:f9:47:67:d9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=c5a36c43-3091-402a-b42d-1c8061bf5aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:07:da:6b:51:2b:86:26:b5:a0:77:58:ea:fe: 04:8c:14:54:20:75:2f:e4:26:93:ff:f0:5c:49:cf: 9f:c9:45:15:2f:56:a7:42:bc:4b:8e:dd:cb:0d:73: 65:65:fc:a1:03:53:36:df:3c:ed:7a:8e:f3:17:ac: c2:7d:ba:d1:cf:07:25:7e:20:d9:b8:30:33:01:f4: c6:9f:0c:b2:78:c8:c7:95:d2:ba:53:a1:a0:33:30: c9:9c:96:7d:94:48:2f:ef:f8:69:43:32:3e:de:e9: 51:72:da:ef:78:2f:00:c5:69:12:15:f5:86:d3:a8: 14:b8:04:85:b2:cb:c1:9e:bd:f7:19:7e:39:cb:ce: f0:dd:7a:f0:03:a0:37:97:53:9f:2e:ac:63:7d:d0: 86:ca:2b:8a:2e:c9:8f:d5:2a:07:27:95:d0:63:a0: c9:b1:20:6d:7b:9a:f1:0a:f7:45:78:03:b5:43:55: 37:05:ba:e1:5d:2a:ab:64:48:04:a2:bd:5e:4a:3b: 54:0a:d6:42:df:66:35:13:21:35:24:6a:22:98:73: bc:d8:0c:a0:63:2d:f2:b5:13:cc:6b:a5:1b:b4:16: a9:af:99:d3:a9:88:b3:33:88:05:1e:9d:09:61:f2: cc:19:02:8e:ae:99:be:f6:f2:16:50:cb:61:32:f2: ae:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9B:24:68:F7:F1:49:AE:23:06:93:EE:16:9E:44:C2:90:3E:C4:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3a1661e8-e26c-33eb-8628-c7a97a3366a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:f6:e3:a1:59:0a:97:ee:1b:63:39:4f:e1:e6:8d:59:7b:0f: ae:06:52:99:38:88:3e:9c:e0:de:6f:cc:19:88:c1:30:87:cd: 54:80:9d:97:90:1b:32:7f:f9:c5:48:43:30:a3:5f:97:a8:a0: 2b:76:9c:82:e9:9b:a7:ee:20:57:73:39:33:fe:33:ad:73:38: f8:cb:27:c8:8c:b5:d2:45:ed:a4:81:f3:09:20:6c:f7:b6:0d: 51:05:88:f7:88:99:d3:30:c6:a8:99:b4:0b:44:05:22:a8:89: 2d:64:fc:86:1b:9f:b4:78:a9:4b:25:0c:9b:4e:67:31:d5:4b: 0d:07:51:a5:cd:47:22:44:43:49:29:51:da:8a:dc:60:9b:ba: 56:7c:64:73:2c:26:40:8c:f6:30:76:5c:e3:34:c4:7f:33:3b: fb:bd:32:3f:88:48:16:b3:10:61:16:1b:14:bc:73:51:6d:c7: 57:6b:d6:03:53:01:9e:14:13:a3:d7:03:b7:e3:d6:6b:f5:53: 9e:0b:18:a8:63:e6:33:5d:e4:53:39:ff:4b:ac:8f:31:4c:31: 10:92:6c:99:bf:ae:15:b7:64:ff:09:5e:96:d0:6b:d7:9d:cc: a1:bb:56:f5:a5:7e:c9:be:12:c4:d7:e7:1f:32:f9:a6:8d:e7: 51:f6:79:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y52QV6jNz+Udn2RQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk YzVhMzZjNDMtMzA5MS00MDJhLWI0MmQtMWM4MDYxYmY1YWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQfaa1Erhia1oHdY6v4EjBRUIHUv5CaT//Bc Sc+fyUUVL1anQrxLjt3LDXNlZfyhA1M23zzteo7zF6zCfbrRzwclfiDZuDAzAfTG nwyyeMjHldK6U6GgMzDJnJZ9lEgv7/hpQzI+3ulRctrveC8AxWkSFfWG06gUuASF ssvBnr33GX45y87w3XrwA6A3l1OfLqxjfdCGyiuKLsmP1SoHJ5XQY6DJsSBte5rx CvdFeAO1Q1U3BbrhXSqrZEgEor1eSjtUCtZC32Y1EyE1JGoimHO82AygYy3ytRPM a6UbtBapr5nTqYizM4gFHp0JYfLMGQKOrpm+9vIWUMthMvKuvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCybJGj38UmuIwaT7haeRMKQPsR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvM2ExNjYxZTgtZTI2Yy0z M2ViLTg2MjgtYzdhOTdhMzM2NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwPpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAz246FZCpfuG2M5T+HmjVl7D64GUpk4iD6c4N5vzBmIwTCHzVSAnZeQ GzJ/+cVIQzCjX5eooCt2nILpm6fuIFdzOTP+M61zOPjLJ8iMtdJF7aSB8wkgbPe2 DVEFiPeImdMwxqiZtAtEBSKoiS1k/IYbn7R4qUslDJtOZzHVSw0HUaXNRyJEQ0kp UdqK3GCbulZ8ZHMsJkCM9jB2XOM0xH8zO/u9Mj+ISBazEGEWGxS8c1Ftx1dr1gNT AZ4UE6PXA7fj1mv1U54LGKhj5jNd5FM5/0usjzFMMRCSbJm/rhW3ZP8JXpbQa9ed zKG7VvWlfsm+EsTX5x8y+aaN51H2efA= -----END CERTIFICATE-----Generated at Mon Sep 21 18:26:17 2026 by rpki-client