$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/67376c8e-267d-36f2-814a-f2c489f44f6e.roa File: 67376c8e-267d-36f2-814a-f2c489f44f6e.roa (raw, json) Hash identifier: xBQNEZXBfotov1DFtGeo506+8+M0ilhLnH0fhVdsFKc= Subject key identifier: F5:2E:AE:B3:9B:C0:2E:F1:72:27:A1:17:DA:BF:57:69:89:79:53:A0 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584B5141BD329F5A829C351EAA90 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/67376c8e-267d-36f2-814a-f2c489f44f6e.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 3738 IP address blocks: 192.250.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:bd:32:9f:5a:82:9c:35:1e:aa:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=9b0d6193-ffec-4bfe-bc5c-0796fa52ec92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:60:72:4c:50:d5:8c:8a:9a:36:72:e4:18:3d: f6:3a:d8:eb:2b:8b:e2:56:bc:98:5b:b9:d0:44:5d: 85:bf:7c:bb:c6:45:b7:94:26:a8:43:a1:f3:88:61: 4e:76:93:cf:78:54:2e:2f:f5:5b:5b:21:bb:a5:3f: e1:af:53:f8:71:e1:91:95:43:f0:74:c5:ad:7d:c0: 20:45:3c:8d:27:ae:dd:7c:5b:ae:90:eb:c5:8c:1e: 8d:81:0b:35:40:54:39:4e:17:4a:fe:a6:31:36:4a: 07:a0:31:48:71:e9:2d:09:73:87:ab:2c:18:52:4b: ff:49:1b:3b:f4:a0:7b:94:08:fd:a4:70:c4:9b:fb: a6:e8:cd:c9:b1:29:4c:02:8e:64:a8:0f:f7:17:44: a7:75:bb:71:76:ab:4c:a1:00:ce:9e:7b:93:42:ca: 0e:04:78:32:f8:cc:d2:08:65:32:b9:9f:27:4c:ea: aa:ea:40:f6:33:29:b6:f8:73:14:a8:88:97:c9:bb: 04:9f:7b:91:9c:97:32:61:6e:ea:db:01:13:37:c7: 50:c4:c4:ec:e5:a0:d4:35:90:42:de:ee:dd:46:30: 2a:71:4d:ec:fa:c3:bc:44:91:d2:c9:ba:5b:67:ff: 66:92:63:89:5e:de:6a:8f:e8:56:d2:fe:a2:c3:34: fd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2E:AE:B3:9B:C0:2E:F1:72:27:A1:17:DA:BF:57:69:89:79:53:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/67376c8e-267d-36f2-814a-f2c489f44f6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:85:b0:23:af:62:c6:96:34:80:49:ae:78:6b:5f:99:d5:c2: c9:47:17:93:b6:94:79:2f:de:4b:dc:ff:ea:53:bb:81:61:6c: 38:7b:94:42:f3:fc:8d:67:23:24:84:86:0d:74:12:e9:f4:e1: aa:35:3e:83:2f:1d:12:1a:25:fd:ec:a6:ab:f7:19:7a:02:8b: eb:0b:17:92:90:8e:b8:a2:03:85:4a:ce:49:49:17:01:3d:d4: 66:0e:36:a3:a1:96:78:4b:53:84:1e:a2:2e:2e:22:1d:d1:cb: 3e:c7:41:d9:45:b3:d2:a0:4a:b9:a0:d8:5c:de:8c:74:3b:75: 4c:b2:4b:7c:f0:0e:fc:80:7f:ec:a7:e8:ff:4a:6a:e6:36:51: c4:09:bf:71:ae:93:7b:96:45:42:18:bf:65:8c:02:2b:54:99: 52:4d:15:d8:c3:ce:e1:30:2f:34:f7:b3:ab:e9:bd:01:a6:04: 49:0a:ec:ff:46:97:88:5f:73:e0:8e:a6:0e:57:55:51:90:e2: e8:81:01:82:7a:fa:a8:a4:6f:2a:64:c0:71:d8:2a:3b:a4:56: 2b:ba:20:a9:6f:7e:5e:5d:16:e3:94:61:92:13:9b:c0:fd:6d: 8d:29:da:f3:78:dd:16:94:0f:03:80:0f:64:f4:5e:fb:37:20: 0c:91:09:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQb0yn1qCnDUeqpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk OWIwZDYxOTMtZmZlYy00YmZlLWJjNWMtMDc5NmZhNTJlYzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWByTFDVjIqaNnLkGD32OtjrK4viVryYW7nQ RF2Fv3y7xkW3lCaoQ6HziGFOdpPPeFQuL/VbWyG7pT/hr1P4ceGRlUPwdMWtfcAg RTyNJ67dfFuukOvFjB6NgQs1QFQ5ThdK/qYxNkoHoDFIcektCXOHqywYUkv/SRs7 9KB7lAj9pHDEm/um6M3JsSlMAo5kqA/3F0SndbtxdqtMoQDOnnuTQsoOBHgy+MzS CGUyuZ8nTOqq6kD2Mym2+HMUqIiXybsEn3uRnJcyYW7q2wETN8dQxMTs5aDUNZBC 3u7dRjAqcU3s+sO8RJHSybpbZ/9mkmOJXt5qj+hW0v6iwzT96wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUurrObwC7xciehF9q/V2mJeVOgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvNjczNzZjOGUtMjY3ZC0z NmYyLTgxNGEtZjJjNDg5ZjQ0ZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaFsCOvYsaWNIBJrnhrX5nVwslHF5O2lHkv3kvc/+pTu4FhbDh7lELz /I1nIySEhg10Eun04ao1PoMvHRIaJf3spqv3GXoCi+sLF5KQjriiA4VKzklJFwE9 1GYONqOhlnhLU4Qeoi4uIh3Ryz7HQdlFs9KgSrmg2FzejHQ7dUyyS3zwDvyAf+yn 6P9KauY2UcQJv3Guk3uWRUIYv2WMAitUmVJNFdjDzuEwLzT3s6vpvQGmBEkK7P9G l4hfc+COpg5XVVGQ4uiBAYJ6+qikbypkwHHYKjukViu6IKlvfl5dFuOUYZITm8D9 bY0p2vN43RaUDwOAD2T0Xvs3IAyRCRY= -----END CERTIFICATE-----Generated at Wed Nov 5 09:17:47 2025 by rpki-client