$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa File: 3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa (raw, json) Hash identifier: xOjiaa6vGBVEeXvJ7H2Q48oWggQzat+dPM8MUAd6yOI= Subject key identifier: 44:F3:FE:0E:66:B6:43:6C:14:31:76:9C:29:29:94:07:AF:56:E4:43 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584B3F1C5D262721839902847980 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 3738 IP address blocks: 192.250.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:5d:26:27:21:83:99:02:84:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=d667c9a8-6d41-4e51-989f-8a2fa571c243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2f:0b:98:13:cb:3b:2c:49:08:28:38:b7:dd: 75:41:4d:ae:a5:61:a3:85:6a:ab:2b:f1:fa:85:1f: d9:3a:bd:dd:d4:f1:c9:25:29:e2:94:56:14:1d:98: 72:6b:9b:c3:c9:a1:91:aa:15:9f:6d:a9:9e:a4:e7: 12:e4:3a:81:d2:e1:04:eb:aa:5d:d8:37:02:c8:91: 43:d7:f9:84:4f:2d:fd:d5:fb:eb:36:78:d8:62:25: 26:0a:23:d7:54:16:02:52:15:99:84:45:0f:02:0e: 3d:f0:53:dd:e6:13:6c:8a:c5:dc:7c:5a:1b:e7:95: 53:6d:d3:aa:f6:4b:06:a7:12:24:bf:4c:90:56:b4: 5c:1c:32:98:f0:10:3f:1f:03:35:f8:ea:3b:d5:5d: 4a:2d:12:e2:73:f0:b0:1c:ee:ba:d0:9b:b8:f8:ba: 5c:95:e3:7f:bc:41:40:6b:7a:f6:18:3f:de:4c:70: dc:d6:5a:3f:93:be:a8:de:2c:68:41:bc:41:e2:32: 77:d7:69:c9:cc:67:c9:fb:36:f6:f5:db:2f:b5:1e: dd:87:fd:66:88:0e:20:35:26:68:5a:46:44:42:2c: de:94:06:f5:79:1c:6a:b9:3e:ce:ae:f4:b4:a0:ee: 18:db:e4:5e:4d:9b:a6:f6:57:8f:f2:ce:da:c0:58: 50:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F3:FE:0E:66:B6:43:6C:14:31:76:9C:29:29:94:07:AF:56:E4:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:6b:99:85:3e:76:f0:47:1f:bc:82:1a:b7:bf:03:14:f8:a6: 8a:ee:1c:eb:d0:6c:37:a4:d3:8a:65:8c:70:89:c5:e6:65:10: 63:58:8f:15:8d:f8:39:5a:02:b6:2e:0f:ef:4e:35:8e:c1:f8: 8d:d7:06:58:ff:5b:b4:70:2e:f4:98:8b:cd:8c:e4:79:2c:c0: 17:3c:54:67:7d:2a:10:6f:86:f7:6f:49:8e:5c:80:da:ec:0e: 36:a8:c3:b1:25:59:63:fd:15:68:1d:a0:7d:bc:96:f3:d6:d0: 69:64:c4:61:a2:71:59:d7:59:bb:8a:02:ef:af:6c:eb:75:31: 3a:ea:27:7b:5d:7f:1d:05:48:a4:b8:5a:55:7a:c7:96:b6:43: 0b:af:7d:81:1c:0f:b7:0f:68:e4:28:77:76:d3:3c:dd:1f:5a: c9:cb:28:60:58:48:a3:46:30:b3:91:81:7a:56:db:3b:65:0e: 5e:d3:74:8b:ae:ca:8c:83:11:b2:c7:08:e7:cc:0d:05:41:e8: d3:4f:4b:f9:37:e2:d6:af:27:3d:79:ae:63:a7:c0:bc:b7:18: e4:c8:77:a8:50:c2:4d:32:56:3d:5a:8b:03:e3:d7:cc:08:b5: cc:53:4d:de:14:ac:63:da:99:33:17:9b:14:30:86:e0:08:b8: f1:5f:ff:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HF0mJyGDmQKEeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk ZDY2N2M5YTgtNmQ0MS00ZTUxLTk4OWYtOGEyZmE1NzFjMjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS8LmBPLOyxJCCg4t911QU2upWGjhWqrK/H6 hR/ZOr3d1PHJJSnilFYUHZhya5vDyaGRqhWfbamepOcS5DqB0uEE66pd2DcCyJFD 1/mETy391fvrNnjYYiUmCiPXVBYCUhWZhEUPAg498FPd5hNsisXcfFob55VTbdOq 9ksGpxIkv0yQVrRcHDKY8BA/HwM1+Oo71V1KLRLic/CwHO660Ju4+LpcleN/vEFA a3r2GD/eTHDc1lo/k76o3ixoQbxB4jJ312nJzGfJ+zb29dsvtR7dh/1miA4gNSZo WkZEQizelAb1eRxquT7OrvS0oO4Y2+ReTZum9leP8s7awFhQkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETz/g5mtkNsFDF2nCkplAevVuRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvM2YwYTRkZDktNjVkZi0z YjYxLWIxOGUtNjdjMDI5MzI3Y2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFrmYU+dvBHH7yCGre/AxT4poruHOvQbDek04pljHCJxeZlEGNYjxWN +DlaArYuD+9ONY7B+I3XBlj/W7RwLvSYi82M5HkswBc8VGd9KhBvhvdvSY5cgNrs Djaow7ElWWP9FWgdoH28lvPW0GlkxGGicVnXWbuKAu+vbOt1MTrqJ3tdfx0FSKS4 WlV6x5a2QwuvfYEcD7cPaOQod3bTPN0fWsnLKGBYSKNGMLORgXpW2ztlDl7TdIuu yoyDEbLHCOfMDQVB6NNPS/k34tavJz15rmOnwLy3GOTId6hQwk0yVj1aiwPj18wI tcxTTd4UrGPamTMXmxQwhuAIuPFf/9k= -----END CERTIFICATE-----Generated at Wed Nov 5 10:40:34 2025 by rpki-client