$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa File: 3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa (raw, json) Hash identifier: CG2i53cASY5JTqxua37bCxYNuDCMWlarYlMeLZj/UE4= Subject key identifier: F9:59:C1:FC:D4:FE:ED:7D:74:65:98:9E:6D:C7:75:E3:34:DD:06:E9 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584B5141C0B82BE41BE8A0CA9400 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 3738 IP address blocks: 192.250.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:c0:b8:2b:e4:1b:e8:a0:ca:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=373b828e-fbc3-4bf3-ad5e-a1eb59fd6123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:34:54:16:ff:26:b8:46:1e:a0:aa:2d:25:0c: 98:7c:89:b5:3d:8e:8d:aa:ac:61:36:d8:07:4e:47: 14:33:85:4b:19:e8:ee:35:bb:8c:1b:41:fa:5c:01: ee:9e:60:46:d2:30:35:5c:06:4e:f3:09:1d:37:22: be:5c:7d:b0:09:3d:bd:4d:b6:5f:91:19:78:04:24: 69:fe:f0:42:67:bf:03:36:e6:ee:33:7d:e2:55:59: 6a:06:99:be:2d:5a:0f:25:3b:c4:43:65:ac:be:74: 88:12:3d:11:d5:ca:ae:62:0c:a8:38:77:f2:33:c6: 5c:e9:0d:f1:a6:4d:ef:e1:d3:29:83:d1:76:01:fe: 15:de:1d:16:df:84:de:aa:32:6e:b7:10:28:35:8b: 41:19:38:5d:c1:43:d2:87:c4:7b:66:21:c8:9a:cc: 54:3d:27:f3:6d:ed:d8:d3:95:ed:c2:18:d3:6b:d9: 74:13:8f:0e:c9:a5:69:38:b5:fb:e7:9b:90:4f:6d: 04:ce:78:af:3e:b4:8f:dd:54:a2:6b:33:ad:d2:56: 8d:17:47:a8:1a:9a:fa:2c:a9:06:2f:5b:5e:e4:4b: b8:ff:be:b4:1d:c4:3d:0f:3b:54:4d:09:14:0b:93: ec:e8:35:31:b1:54:4c:98:cd:b9:08:05:ca:77:bb: ee:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:59:C1:FC:D4:FE:ED:7D:74:65:98:9E:6D:C7:75:E3:34:DD:06:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3e0869f2-979b-3a34-9bb1-dbf0b47ac488.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f0:0c:3d:01:d5:8d:c5:74:d7:62:69:21:8a:a5:2e:98:84: 44:98:6d:46:af:d9:4a:13:21:6b:2a:f0:7e:2a:71:63:f8:bb: 4f:7c:4a:35:64:48:9b:74:14:c5:df:63:b5:eb:f8:2b:e0:b7: ba:a5:84:5f:47:00:d9:64:cc:fe:8a:c7:93:10:b9:fe:7d:d0: b5:53:7c:b1:44:9d:46:9d:53:12:bc:15:47:96:a1:ce:c2:ca: 90:6f:60:2b:88:05:0d:b7:3b:86:f6:50:dc:7e:65:32:1e:03: 32:47:d7:66:30:ac:16:37:18:50:fe:d5:3b:ee:45:03:43:2d: b8:af:c2:8e:5d:2a:aa:69:a6:19:d9:dd:bd:a7:03:7c:db:df: d3:a2:35:7f:7b:2f:70:b8:a6:d5:71:04:09:3e:1f:2b:e6:97: 23:54:39:5c:2f:e3:f9:f8:2b:9a:05:0d:d6:bf:14:68:3e:f9: a4:0e:01:51:99:d9:50:b0:29:c8:c5:9a:b2:2e:90:b8:77:08: d0:92:e9:54:95:52:b7:be:2c:ff:aa:85:6e:42:39:b3:ee:19: 32:3d:e0:1b:a0:ad:97:80:02:72:50:e7:30:c0:20:3a:a8:a0: e1:8e:65:23:2d:b0:60:57:c2:c1:6b:3a:9a:d3:1b:15:73:0e: 8f:3b:b1:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQcC4K+Qb6KDKlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk MzczYjgyOGUtZmJjMy00YmYzLWFkNWUtYTFlYjU5ZmQ2MTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDRUFv8muEYeoKotJQyYfIm1PY6NqqxhNtgH TkcUM4VLGejuNbuMG0H6XAHunmBG0jA1XAZO8wkdNyK+XH2wCT29TbZfkRl4BCRp /vBCZ78DNubuM33iVVlqBpm+LVoPJTvEQ2WsvnSIEj0R1cquYgyoOHfyM8Zc6Q3x pk3v4dMpg9F2Af4V3h0W34TeqjJutxAoNYtBGThdwUPSh8R7ZiHImsxUPSfzbe3Y 05XtwhjTa9l0E48OyaVpOLX755uQT20EznivPrSP3VSiazOt0laNF0eoGpr6LKkG L1te5Eu4/760HcQ9DztUTQkUC5Ps6DUxsVRMmM25CAXKd7vunQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlZwfzU/u19dGWYnm3HdeM03QbpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvM2UwODY5ZjItOTc5Yi0z YTM0LTliYjEtZGJmMGI0N2FjNDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrwDD0B1Y3FdNdiaSGKpS6YhESYbUav2UoTIWsq8H4qcWP4u098SjVk SJt0FMXfY7Xr+Cvgt7qlhF9HANlkzP6Kx5MQuf590LVTfLFEnUadUxK8FUeWoc7C ypBvYCuIBQ23O4b2UNx+ZTIeAzJH12YwrBY3GFD+1TvuRQNDLbivwo5dKqppphnZ 3b2nA3zb39OiNX97L3C4ptVxBAk+HyvmlyNUOVwv4/n4K5oFDda/FGg++aQOAVGZ 2VCwKcjFmrIukLh3CNCS6VSVUre+LP+qhW5CObPuGTI94BugrZeAAnJQ5zDAIDqo oOGOZSMtsGBXwsFrOprTGxVzDo87sSA= -----END CERTIFICATE-----Generated at Wed Nov 5 15:07:35 2025 by rpki-client