$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3a1661e8-e26c-33eb-8628-c7a97a3366a0.roa File: 3a1661e8-e26c-33eb-8628-c7a97a3366a0.roa (raw, json) Hash identifier: bj1Iio7+175gKVbrpMgTXpCHu+qf4WvvoW74DMdT1Jw= Subject key identifier: DD:2F:17:89:B8:8A:BA:1B:78:D0:99:90:3A:B8:A8:42:EB:D2:68:75 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584BAEC7B94E15A54DFE254F3240 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3a1661e8-e26c-33eb-8628-c7a97a3366a0.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 3738 IP address blocks: 192.250.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b9:4e:15:a5:4d:fe:25:4f:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=482dd202-538a-4290-9ae7-eb241d51b59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:09:50:2f:e2:40:bc:7d:43:df:92:f0:30: 01:ff:eb:19:a1:23:54:2c:40:17:f8:ad:ef:7f:88: bc:f1:df:d2:02:c8:f3:9d:8d:3c:db:c5:fb:2f:ca: 71:ae:00:97:72:2f:d7:69:74:ad:df:82:44:87:57: ff:c4:ee:24:73:9a:40:bd:d6:cd:c0:63:62:db:1d: 7f:53:ad:c2:3e:95:fb:47:24:3f:44:52:40:7d:ae: 97:9e:7e:49:71:fb:96:05:51:7b:0e:ab:0a:d0:d5: 1b:d1:8e:c2:f8:c2:26:20:8e:83:ff:53:95:3a:10: d3:d0:19:7a:e0:6f:e4:c4:8e:46:d6:ec:2b:4f:b2: 49:30:1b:57:7d:b8:9c:65:f9:97:75:e9:1c:ea:51: 7b:b0:ad:72:11:bf:ce:b2:a0:cc:37:6e:26:eb:47: a7:55:91:67:e1:8f:47:01:90:a9:7e:82:87:db:25: 91:42:de:29:9e:b0:d0:66:2e:97:ce:0a:b9:dc:ae: cb:bf:e3:c1:72:ab:5a:94:44:8f:66:9e:07:83:1e: 6b:99:04:74:16:a7:73:bb:f5:34:47:ae:06:23:15: c5:32:3d:08:8e:89:d9:91:2b:b4:94:d4:b8:58:14: c7:1c:44:43:d1:88:e2:cb:e4:d1:be:d7:90:be:66: f0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2F:17:89:B8:8A:BA:1B:78:D0:99:90:3A:B8:A8:42:EB:D2:68:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3a1661e8-e26c-33eb-8628-c7a97a3366a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:80:f3:4d:11:53:72:ad:2c:3a:da:82:71:0f:9a:67:54:81: a2:fd:dd:04:b2:0d:0a:c2:2b:08:c3:18:4e:0f:bf:9e:77:e5: 23:6b:18:99:cf:97:14:c8:11:c9:1a:49:11:ee:ba:ba:f4:3f: 29:e1:c4:6e:76:45:c6:0f:78:35:aa:d0:bd:8f:64:7d:02:31: 75:4b:0c:eb:58:99:e7:a5:8e:9f:ad:75:c5:4c:10:09:58:bb: b9:28:f7:85:81:46:fa:ec:36:cf:13:53:85:cd:5e:e7:5d:09: 0e:f2:bc:f6:01:2c:67:3f:8d:91:e3:06:b7:c4:2f:4e:54:28: d5:8d:d2:82:ed:e3:b6:81:08:0e:b5:ad:57:0b:a3:ea:38:83: a2:e3:0a:80:a7:b6:f9:9a:b5:e8:fc:45:ea:41:7e:c8:29:01: 64:dd:2c:c3:78:ee:55:8b:c8:82:5a:43:a6:82:69:37:f9:ee: 9f:9f:d3:76:cd:4b:07:40:8d:ac:5e:08:46:f8:a8:3f:4e:f9: 99:3f:b7:09:72:8c:ea:1e:78:29:76:5d:f1:73:9b:10:22:46: f5:d1:72:d4:7c:bb:cf:40:c0:24:9c:8c:84:18:85:94:de:22: a2:03:2e:8f:11:a9:80:77:de:99:9c:a7:e4:49:8e:70:e2:8f: 66:4e:7f:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7lOFaVN/iVPMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk NDgyZGQyMDItNTM4YS00MjkwLTlhZTctZWIyNDFkNTFiNTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliQJUC/iQLx9Q9+S8DAB/+sZoSNULEAX+K3v f4i88d/SAsjznY0828X7L8pxrgCXci/XaXSt34JEh1f/xO4kc5pAvdbNwGNi2x1/ U63CPpX7RyQ/RFJAfa6Xnn5JcfuWBVF7DqsK0NUb0Y7C+MImII6D/1OVOhDT0Bl6 4G/kxI5G1uwrT7JJMBtXfbicZfmXdekc6lF7sK1yEb/OsqDMN24m60enVZFn4Y9H AZCpfoKH2yWRQt4pnrDQZi6Xzgq53K7Lv+PBcqtalESPZp4Hgx5rmQR0Fqdzu/U0 R64GIxXFMj0IjonZkSu0lNS4WBTHHERD0Yjiy+TRvteQvmbwKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0vF4m4irobeNCZkDq4qELr0mh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvM2ExNjYxZTgtZTI2Yy0z M2ViLTg2MjgtYzdhOTdhMzM2NmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwPpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmA800RU3KtLDragnEPmmdUgaL93QSyDQrCKwjDGE4Pv5535SNrGJnP lxTIEckaSRHuurr0PynhxG52RcYPeDWq0L2PZH0CMXVLDOtYmeeljp+tdcVMEAlY u7ko94WBRvrsNs8TU4XNXuddCQ7yvPYBLGc/jZHjBrfEL05UKNWN0oLt47aBCA61 rVcLo+o4g6LjCoCntvmatej8RepBfsgpAWTdLMN47lWLyIJaQ6aCaTf57p+f03bN SwdAjaxeCEb4qD9O+Zk/twlyjOoeeCl2XfFzmxAiRvXRctR8u89AwCScjIQYhZTe IqIDLo8RqYB33pmcp+RJjnDij2ZOfxQ= -----END CERTIFICATE-----Generated at Wed Nov 5 10:44:03 2025 by rpki-client