$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/7ee4f03e-9f6b-3593-abbe-f0707a1d8f02.roa File: 7ee4f03e-9f6b-3593-abbe-f0707a1d8f02.roa (raw, json) Hash identifier: h4sPwrTZ/rrvvCmcGYaFFXtfLXSYuGHaQjQXI9VvC8E= Subject key identifier: 79:C6:AB:21:F8:A6:1F:C6:80:3F:B8:34:05:C8:76:EC:21:CF:83:69 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584B5141BD94C1586319B3491540 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/7ee4f03e-9f6b-3593-abbe-f0707a1d8f02.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 3738 IP address blocks: 192.250.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:bd:94:c1:58:63:19:b3:49:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=962b3df5-d674-4295-a9a3-c46568765e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:67:d1:25:b5:f5:19:6d:02:62:bc:65:f4:7c: 55:94:18:46:28:df:de:a0:85:63:14:70:60:70:be: f8:92:00:75:0e:a8:ec:40:37:70:40:28:49:a6:4a: 15:94:89:9b:42:0e:73:85:c7:eb:82:9e:a7:24:56: 3a:ba:eb:a0:4a:40:2e:23:c3:c2:e2:8f:66:0c:8e: 5e:37:8e:c8:61:52:2a:b5:c6:40:99:58:05:e6:1a: f5:bd:80:81:d3:45:51:5a:af:3d:9d:30:4e:49:11: 93:49:7f:8f:10:53:84:d5:13:d9:0a:79:e7:77:1b: ff:a1:26:b6:7d:34:e7:5b:29:c4:7a:f3:1d:c1:5d: bd:b0:e1:c5:bf:69:f0:25:0a:26:b4:c7:29:90:cd: 5b:9b:3e:96:8c:db:b4:63:ed:82:42:f7:1e:7d:29: 51:16:ff:b9:7d:c0:c8:7e:29:39:55:58:f7:f5:91: c5:ba:2a:8e:bc:98:b2:d3:ab:71:89:03:5d:72:72: ef:08:a9:fb:29:e3:b0:0e:a5:11:70:76:08:6e:82: be:56:58:9d:61:d9:4f:e6:6c:39:4c:6f:3e:e9:7f: 78:ee:b8:71:fa:37:1b:d3:58:7d:2b:c8:8d:e0:df: a6:af:82:9f:48:90:95:dc:1f:10:cb:27:17:36:b4: 35:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C6:AB:21:F8:A6:1F:C6:80:3F:B8:34:05:C8:76:EC:21:CF:83:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/7ee4f03e-9f6b-3593-abbe-f0707a1d8f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:cf:c5:94:52:96:52:bb:b8:a4:ad:e4:6d:dd:ba:45:6d:42: ee:23:89:a6:18:c3:2c:9f:13:55:a6:55:89:2b:88:10:35:35: fd:30:fb:ab:b1:9b:c0:f4:85:4f:58:40:21:e7:16:8e:1c:91: 73:5c:de:a9:15:21:93:0d:82:98:eb:5e:a5:36:a8:fd:a7:f0: a9:82:83:19:43:68:4b:bb:87:31:8e:91:ac:a3:b0:33:84:4e: d5:de:8b:f3:6b:56:99:60:51:89:99:10:1c:59:a1:9d:21:dc: c1:90:96:f4:2c:3f:a9:04:a5:07:94:95:d8:8b:0f:f4:9a:60: 6d:63:7d:de:69:1e:f4:87:33:c0:79:60:fc:98:96:21:05:05: c3:7b:7b:1e:1c:11:c2:bd:8f:a6:03:25:71:22:49:96:2f:18: 70:70:c8:43:41:2b:27:92:ca:69:80:08:9d:99:69:b7:cb:69: 59:86:55:a3:fe:cd:c8:2c:46:db:fc:d5:5e:6e:63:30:67:fe: b3:dd:92:99:cf:41:3c:12:1c:6d:4e:e7:db:03:67:04:b4:e3: c6:d5:8e:6c:45:65:ac:b7:59:d9:dd:ae:d8:6f:9b:0c:41:63: 7f:90:3e:d1:83:cd:ed:5b:98:8b:c0:b6:e4:2b:c9:44:5e:f7: 76:f0:74:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQb2UwVhjGbNJFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk OTYyYjNkZjUtZDY3NC00Mjk1LWE5YTMtYzQ2NTY4NzY1ZTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2fRJbX1GW0CYrxl9HxVlBhGKN/eoIVjFHBg cL74kgB1DqjsQDdwQChJpkoVlImbQg5zhcfrgp6nJFY6uuugSkAuI8PC4o9mDI5e N47IYVIqtcZAmVgF5hr1vYCB00VRWq89nTBOSRGTSX+PEFOE1RPZCnnndxv/oSa2 fTTnWynEevMdwV29sOHFv2nwJQomtMcpkM1bmz6WjNu0Y+2CQvcefSlRFv+5fcDI fik5VVj39ZHFuiqOvJiy06txiQNdcnLvCKn7KeOwDqURcHYIboK+VlidYdlP5mw5 TG8+6X947rhx+jcb01h9K8iN4N+mr4KfSJCV3B8QyycXNrQ1twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnGqyH4ph/GgD+4NAXIduwhz4NpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvN2VlNGYwM2UtOWY2Yi0z NTkzLWFiYmUtZjA3MDdhMWQ4ZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTPxZRSllK7uKSt5G3dukVtQu4jiaYYwyyfE1WmVYkriBA1Nf0w+6ux m8D0hU9YQCHnFo4ckXNc3qkVIZMNgpjrXqU2qP2n8KmCgxlDaEu7hzGOkayjsDOE TtXei/NrVplgUYmZEBxZoZ0h3MGQlvQsP6kEpQeUldiLD/SaYG1jfd5pHvSHM8B5 YPyYliEFBcN7ex4cEcK9j6YDJXEiSZYvGHBwyENBKyeSymmACJ2ZabfLaVmGVaP+ zcgsRtv81V5uYzBn/rPdkpnPQTwSHG1O59sDZwS048bVjmxFZay3WdndrthvmwxB Y3+QPtGDze1bmIvAtuQryURe93bwdLc= -----END CERTIFICATE-----Generated at Wed Nov 5 22:30:35 2025 by rpki-client