$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/68a09496-dd1f-37b9-a873-c541d78bb65b.roa File: 68a09496-dd1f-37b9-a873-c541d78bb65b.roa (raw, json) Hash identifier: tIh6q+VkpIcA4ywPE/fXIEvb4vb2MRoAfK++iTDuSVo= Subject key identifier: E8:D3:C9:F6:2A:7C:59:F5:DC:59:88:CE:3C:A2:31:38:64:95:1D:49 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584B5141C134D96342A818661380 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/68a09496-dd1f-37b9-a873-c541d78bb65b.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 3738 IP address blocks: 192.250.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:c1:34:d9:63:42:a8:18:66:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=537bb7cd-0077-43d4-a693-c8b4665f4c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:c7:a7:73:9e:2a:49:3b:2b:bc:36:3b:ae:84: 2c:80:6d:c9:68:e1:52:7e:a1:e5:7e:d1:28:1b:00: d6:d2:18:14:67:1c:ba:8f:df:31:95:77:73:5a:90: 40:8a:fc:a8:1e:5c:50:81:88:5b:8e:3b:d4:b8:53: 99:93:94:58:09:a7:3b:21:04:8b:51:4c:5f:41:20: eb:d9:ca:72:72:a7:34:b8:3a:ab:b6:c2:57:a1:a3: 83:04:d2:8a:3f:3e:90:f1:da:88:3e:40:2a:00:d4: 33:ce:57:aa:49:62:39:89:9c:7f:cb:21:5a:9e:41: f6:5c:0d:f6:63:ab:85:d1:f5:c2:43:77:ab:cf:c6: 79:ba:e7:7b:fe:94:9e:0e:dd:07:15:52:6e:01:7f: ff:c3:29:d6:06:b3:83:71:90:af:17:7e:dd:55:3f: e0:5a:c3:be:a8:d9:88:da:03:9d:63:e4:ca:5f:c3: ea:7f:77:ea:8d:3e:68:d4:30:5f:78:c2:9d:2f:47: 54:52:1d:2a:4d:e8:59:c2:a2:5d:5e:9b:95:16:6c: 34:59:14:fc:38:c5:f1:18:dc:a5:3b:60:1e:22:61: 4e:c2:6b:a9:f3:8a:38:3c:41:e7:d4:9b:90:6c:13: cb:31:95:c3:06:72:b5:f7:05:0e:22:d1:ee:ad:6f: 3a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D3:C9:F6:2A:7C:59:F5:DC:59:88:CE:3C:A2:31:38:64:95:1D:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/68a09496-dd1f-37b9-a873-c541d78bb65b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:c2:43:85:75:1f:4e:2c:e7:fe:15:a1:a5:40:7d:bc:e3:af: 54:c5:bf:b6:2c:48:f7:16:b1:4c:5f:95:a2:f8:67:6a:7b:95: 35:a6:60:ea:84:d1:f4:2c:4f:6a:ff:ea:e0:6a:a8:ed:6f:e3: 57:5d:10:40:a5:74:41:74:f7:2f:32:db:7d:8f:63:54:ff:53: 68:2a:a0:26:f5:5d:5a:10:c2:fa:0c:64:e2:da:06:84:ff:d9: 55:9b:08:0a:06:f7:5e:d1:de:4d:14:72:69:f8:b6:02:12:0d: a2:73:04:92:54:d4:cd:ec:ef:18:24:41:bd:28:62:12:03:36: ba:49:2f:16:86:0f:46:fe:c2:ec:c8:3d:76:0a:38:7a:4e:1a: cb:60:15:20:c3:24:55:c0:32:64:37:88:b0:2c:22:08:99:b2: a1:4b:b0:de:1e:9e:68:48:62:41:89:25:73:87:b0:c5:3e:53: 00:87:6a:0c:89:b5:ce:d3:9b:10:18:e2:1d:da:11:b8:cf:63: 7d:00:00:f1:f6:05:51:da:c7:d2:83:72:53:5d:26:05:0c:24: 5a:df:39:d0:fb:ed:6e:cc:58:07:1d:3e:08:21:b2:f6:76:b7: 7c:90:af:df:41:21:84:de:2f:4c:50:78:6f:4e:17:a1:ba:a3: 1b:43:5b:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQcE02WNCqBhmE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NTM3YmI3Y2QtMDA3Ny00M2Q0LWE2OTMtYzhiNDY2NWY0YzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98enc54qSTsrvDY7roQsgG3JaOFSfqHlftEo GwDW0hgUZxy6j98xlXdzWpBAivyoHlxQgYhbjjvUuFOZk5RYCac7IQSLUUxfQSDr 2cpycqc0uDqrtsJXoaODBNKKPz6Q8dqIPkAqANQzzleqSWI5iZx/yyFankH2XA32 Y6uF0fXCQ3erz8Z5uud7/pSeDt0HFVJuAX//wynWBrODcZCvF37dVT/gWsO+qNmI 2gOdY+TKX8Pqf3fqjT5o1DBfeMKdL0dUUh0qTehZwqJdXpuVFmw0WRT8OMXxGNyl O2AeImFOwmup84o4PEHn1JuQbBPLMZXDBnK19wUOItHurW862wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjTyfYqfFn13FmIzjyiMThklR1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvNjhhMDk0OTYtZGQxZi0z N2I5LWE4NzMtYzU0MWQ3OGJiNjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPo/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMLCQ4V1H04s5/4VoaVAfbzjr1TFv7YsSPcWsUxflaL4Z2p7lTWmYOqE 0fQsT2r/6uBqqO1v41ddEECldEF09y8y232PY1T/U2gqoCb1XVoQwvoMZOLaBoT/ 2VWbCAoG917R3k0Ucmn4tgISDaJzBJJU1M3s7xgkQb0oYhIDNrpJLxaGD0b+wuzI PXYKOHpOGstgFSDDJFXAMmQ3iLAsIgiZsqFLsN4enmhIYkGJJXOHsMU+UwCHagyJ tc7TmxAY4h3aEbjPY30AAPH2BVHax9KDclNdJgUMJFrfOdD77W7MWAcdPgghsvZ2 t3yQr99BIYTeL0xQeG9OF6G6oxtDW8Y= -----END CERTIFICATE-----Generated at Wed Nov 5 15:07:35 2025 by rpki-client