$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c7641056-2ab1-31f3-b882-c4150eaba29d.roa File: c7641056-2ab1-31f3-b882-c4150eaba29d.roa (raw, json) Hash identifier: azgzgfIRHmW2dp8f9g/l0NlLO5wKykNJLuZQQRE47wg= Subject key identifier: 1D:42:D5:EC:B4:4B:87:FF:E7:A3:B6:91:11:15:41:A6:03:30:5F:D5 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584F3A17CB05AC0C245B30EF4380 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c7641056-2ab1-31f3-b882-c4150eaba29d.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 3738 IP address blocks: 192.250.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:cb:05:ac:0c:24:5b:30:ef:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=207fd91c-dd12-459f-b2e6-360ad35f6c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:67:48:59:9f:92:51:00:9d:fb:36:54:f9: 2e:76:bc:9e:1a:d9:eb:20:23:5e:4f:b4:3a:a3:c3: 7f:7b:90:8f:ed:37:a7:80:14:88:75:d0:78:25:9f: 80:25:28:f2:98:4b:16:2f:ae:15:5a:bd:4c:70:1c: b4:b7:9a:dd:b1:ac:4a:8f:8d:87:39:9c:5d:f6:f5: b8:be:c4:aa:ee:fb:01:68:c3:db:2d:b1:68:90:c0: 3f:5c:f8:b1:66:93:d0:4f:27:80:0b:19:3a:c6:84: 91:98:af:5d:bb:33:ce:e7:5d:3a:61:1c:7d:21:8a: 7b:fa:67:7b:46:e3:58:02:2c:cc:09:e2:3f:87:77: c0:36:0e:95:cc:49:13:b5:a1:c8:1e:2e:b1:82:28: eb:7f:20:2d:7b:77:6e:c4:24:6b:a8:0a:82:3b:08: 4d:02:5d:30:70:19:4b:74:6c:db:88:f9:30:c1:55: 78:76:27:2b:51:2e:d0:ae:a6:db:75:0f:40:93:ff: e9:cb:e9:99:e9:16:73:e4:06:7b:73:a6:36:58:82: 89:ec:d8:07:96:83:2d:d2:86:3b:6e:62:6e:e1:0d: 86:a5:52:32:5f:61:ce:ad:e4:56:1e:26:98:d9:52: c5:ab:93:58:37:c0:6a:fe:00:9c:06:e3:22:76:3d: 42:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:42:D5:EC:B4:4B:87:FF:E7:A3:B6:91:11:15:41:A6:03:30:5F:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c7641056-2ab1-31f3-b882-c4150eaba29d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e1:1e:5e:bc:2c:36:20:ea:c7:43:6a:9c:bf:70:3a:54:fd: 69:e0:19:07:39:27:98:1e:ac:50:65:29:5f:94:4c:a9:53:40: 39:43:c0:13:6e:eb:56:01:39:5a:ed:70:45:2a:0b:89:f5:a1: 01:ae:e3:bb:b9:d9:4e:24:a7:ec:29:ef:e0:b1:50:cb:28:55: 55:fe:9d:f4:cc:f9:2a:6d:8d:91:cb:d3:b0:99:3d:81:c6:ae: ce:f6:aa:08:24:aa:dc:4c:b9:f1:8b:aa:17:4c:5e:40:7b:be: 48:b5:e1:cc:57:ea:fa:01:a9:26:1c:a6:7c:b8:18:85:68:8a: 3c:20:c3:43:3d:ff:3b:cb:68:be:74:cc:f5:85:44:78:3f:9b: 9e:52:92:d3:09:68:10:7b:75:f8:7a:34:b2:7e:f6:1c:74:28: 3d:e0:7a:50:30:32:be:16:0e:22:0b:cb:94:a3:1c:c9:b8:49: 64:43:ee:96:0e:d9:9e:73:5d:fa:d5:35:02:9e:00:35:f8:22: 32:44:59:ba:2e:31:aa:72:b7:a9:ea:3a:94:66:49:81:4b:2c: 44:a9:e2:3e:f8:44:cc:d8:e9:fc:c7:c5:b2:49:09:88:cd:8a: c5:bb:52:ea:5d:20:c2:6e:05:62:40:63:7c:21:58:a4:82:12: 7e:70:32:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8sFrAwkWzDvQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MjA3ZmQ5MWMtZGQxMi00NTlmLWIyZTYtMzYwYWQzNWY2YzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruNnSFmfklEAnfs2VPkudryeGtnrICNeT7Q6 o8N/e5CP7TengBSIddB4JZ+AJSjymEsWL64VWr1McBy0t5rdsaxKj42HOZxd9vW4 vsSq7vsBaMPbLbFokMA/XPixZpPQTyeACxk6xoSRmK9duzPO5106YRx9IYp7+md7 RuNYAizMCeI/h3fANg6VzEkTtaHIHi6xgijrfyAte3duxCRrqAqCOwhNAl0wcBlL dGzbiPkwwVV4dicrUS7QrqbbdQ9Ak//py+mZ6RZz5AZ7c6Y2WIKJ7NgHloMt0oY7 bmJu4Q2GpVIyX2HOreRWHiaY2VLFq5NYN8Bq/gCcBuMidj1CiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1C1ey0S4f/56O2kREVQaYDMF/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYzc2NDEwNTYtMmFiMS0z MWYzLWI4ODItYzQxNTBlYWJhMjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPo1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIThHl68LDYg6sdDapy/cDpU/WngGQc5J5gerFBlKV+UTKlTQDlDwBNu 61YBOVrtcEUqC4n1oQGu47u52U4kp+wp7+CxUMsoVVX+nfTM+SptjZHL07CZPYHG rs72qggkqtxMufGLqhdMXkB7vki14cxX6voBqSYcpny4GIVoijwgw0M9/zvLaL50 zPWFRHg/m55SktMJaBB7dfh6NLJ+9hx0KD3gelAwMr4WDiILy5SjHMm4SWRD7pYO 2Z5zXfrVNQKeADX4IjJEWbouMapyt6nqOpRmSYFLLESp4j74RMzY6fzHxbJJCYjN isW7UupdIMJuBWJAY3whWKSCEn5wMpA= -----END CERTIFICATE-----Generated at Tue Sep 22 07:46:52 2026 by rpki-client