$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa File: dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa (raw, json) Hash identifier: KCRfDa1XZgXFfAvXyz/QJfgCsEClA0kahmzstvUiTfU= Subject key identifier: BD:22:6F:8A:F4:9F:04:37:60:DE:10:F8:FC:9B:B0:1F:60:23:87:DF Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584B36BC4F7809614AD97A34C000 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 3738 IP address blocks: 192.250.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:4f:78:09:61:4a:d9:7a:34:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=1758ce89-16af-4803-b740-6be3d856b5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e8:1b:84:6e:ef:96:33:e6:a3:f3:fd:27:69: 13:b2:b5:6c:7b:8a:d1:32:70:8d:93:c1:8f:c1:03: 3a:75:e6:45:8a:aa:b6:f6:7a:9e:a2:14:7d:1f:36: 51:40:da:1c:e5:2e:b6:97:64:34:de:25:98:c7:5c: d1:22:39:74:92:a7:19:32:5b:73:a9:a5:74:d1:4a: 92:bc:25:ad:5a:4b:e7:da:f4:9d:4c:85:df:ca:76: db:88:24:c3:31:8a:32:af:d8:8f:3e:9c:cc:da:39: da:00:c3:e5:44:d9:90:4e:93:5c:c5:e0:4d:b5:23: a4:f5:9b:54:8a:51:fe:4a:9b:ca:26:63:09:33:56: 53:4d:2f:1d:fa:0e:1b:22:78:09:25:38:65:8e:18: 88:39:ce:2f:93:52:aa:8d:8c:c7:f0:cb:7a:e1:c3: 1c:60:02:07:48:ff:6a:26:5d:6d:f5:34:14:0f:9b: 35:bf:2d:82:7f:28:70:3d:b9:a5:7d:95:88:54:b9: 9e:66:15:6f:de:47:55:15:1f:b6:56:a3:f3:da:ec: 6e:7c:7e:9b:d9:56:c3:1b:62:16:be:01:82:18:1a: c7:aa:4a:57:bf:6c:0c:f6:b7:74:23:90:c4:38:6e: 7c:18:18:65:91:72:b1:bf:17:db:ed:c7:27:43:4a: aa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:22:6F:8A:F4:9F:04:37:60:DE:10:F8:FC:9B:B0:1F:60:23:87:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:48:c0:08:61:94:97:8e:e3:1a:24:76:92:76:1d:fd:df:97: 3d:f7:93:6c:06:48:18:45:e5:ad:16:a3:2b:8e:ba:8a:5c:74: 45:bc:64:e0:1b:c5:f7:3e:97:bf:d6:f4:d4:c4:5d:fe:fe:e8: 15:9f:42:59:d7:07:27:a5:97:4a:88:ec:68:32:a7:95:8d:cd: 1d:42:1b:97:af:8a:2d:df:63:c6:16:7f:e8:5a:be:53:e2:a1: 78:20:ef:a8:8a:d7:9e:40:6f:fd:27:bc:60:85:89:b5:f4:de: ca:41:97:b7:d2:76:d5:e9:a2:e3:e2:78:39:32:36:2e:87:d5: 90:81:a1:22:0b:1d:fe:fb:5c:88:eb:dc:b1:b3:4a:21:9f:45: 3c:38:4e:54:97:bb:86:0f:de:fb:6b:78:14:89:55:fd:b9:f6: da:62:4c:b0:61:2c:c5:90:b8:7d:35:4b:04:10:53:b7:60:9b: a8:65:40:e6:26:ff:17:45:97:98:a2:8c:81:0f:fb:c7:83:c8: eb:67:c0:46:8e:9d:cc:d6:ee:c8:14:fc:de:a8:35:e0:6d:4d: c2:cb:54:79:66:bc:bc:59:7e:d9:5f:fa:17:68:93:ca:73:80: 17:e6:61:45:33:1e:8c:4d:66:e6:30:57:77:c0:d6:48:64:d3: 3f:09:3a:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vE94CWFK2Xo0wAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk MTc1OGNlODktMTZhZi00ODAzLWI3NDAtNmJlM2Q4NTZiNWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+gbhG7vljPmo/P9J2kTsrVse4rRMnCNk8GP wQM6deZFiqq29nqeohR9HzZRQNoc5S62l2Q03iWYx1zRIjl0kqcZMltzqaV00UqS vCWtWkvn2vSdTIXfynbbiCTDMYoyr9iPPpzM2jnaAMPlRNmQTpNcxeBNtSOk9ZtU ilH+SpvKJmMJM1ZTTS8d+g4bIngJJThljhiIOc4vk1KqjYzH8Mt64cMcYAIHSP9q Jl1t9TQUD5s1vy2CfyhwPbmlfZWIVLmeZhVv3kdVFR+2VqPz2uxufH6b2VbDG2IW vgGCGBrHqkpXv2wM9rd0I5DEOG58GBhlkXKxvxfb7ccnQ0qqGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0ib4r0nwQ3YN4Q+PybsB9gI4ffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvZGQzZTA4NDQtMzNmOS0z YWRkLWI0ZmUtMTA2MjMyZmE0YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJIwAhhlJeO4xokdpJ2Hf3flz33k2wGSBhF5a0WoyuOuopcdEW8ZOAb xfc+l7/W9NTEXf7+6BWfQlnXByell0qI7Ggyp5WNzR1CG5evii3fY8YWf+havlPi oXgg76iK155Ab/0nvGCFibX03spBl7fSdtXpouPieDkyNi6H1ZCBoSILHf77XIjr 3LGzSiGfRTw4TlSXu4YP3vtreBSJVf259tpiTLBhLMWQuH01SwQQU7dgm6hlQOYm /xdFl5iijIEP+8eDyOtnwEaOnczW7sgU/N6oNeBtTcLLVHlmvLxZftlf+hdok8pz gBfmYUUzHoxNZuYwV3fA1khk0z8JOnA= -----END CERTIFICATE-----Generated at Wed Nov 5 10:46:42 2025 by rpki-client