$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/e1cbafcb-17d6-3f34-a3ab-ce140a904bc6.roa File: e1cbafcb-17d6-3f34-a3ab-ce140a904bc6.roa (raw, json) Hash identifier: r3d8/cQhwLvMZTlM5tF5TiyvQhvSb9NZFL+1M/JkSR4= Subject key identifier: A0:4D:C6:63:80:45:9D:1E:C0:74:32:95:C6:A9:0B:B3:7E:0C:DC:5E Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584B5141C15E8F96062012CC1590 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/e1cbafcb-17d6-3f34-a3ab-ce140a904bc6.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 3738 IP address blocks: 192.250.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:c1:5e:8f:96:06:20:12:cc:15:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=c918fb8b-4930-4318-a2f4-3e432fe959a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e1:67:72:a8:5b:d0:05:d9:32:4e:5d:b5:af: c4:21:82:be:41:99:3a:66:57:33:d1:16:61:38:c2: 05:5f:6c:77:19:1d:a1:43:fc:36:b2:e4:b4:a0:f8: 74:11:18:b4:c9:7d:ec:02:a4:de:46:c9:af:8d:10: 5e:79:7e:bc:4f:f1:b2:ea:0c:c6:22:38:1a:fe:32: 23:fd:6e:0f:40:87:b9:82:a5:ae:ca:af:ba:a6:d7: 82:d1:c5:bb:39:2b:48:4f:e4:57:4c:f2:7d:77:4b: 37:68:6d:98:fa:08:99:b7:de:a4:bc:b5:80:d8:08: 07:a2:33:49:36:9f:4a:df:6d:37:6b:d4:48:09:b1: 1f:92:69:8c:2f:49:39:a9:81:1c:d2:2b:c3:6c:81: 02:af:80:db:a4:a7:4e:63:8a:12:23:33:b5:37:82: 57:16:29:5e:f4:09:55:0d:59:75:d6:d9:0c:c6:e0: 68:2c:b8:58:ad:c9:a4:53:f6:79:b7:35:11:b5:8c: 13:78:bd:fc:d8:6f:1c:a1:11:31:2d:e0:f0:dd:2c: 9c:b2:fd:6e:32:2c:37:3d:48:a2:dd:54:20:95:12: fa:42:78:c3:13:7f:26:77:cb:b8:31:7b:66:a8:db: 28:3e:cb:af:d7:0e:b2:93:48:09:31:91:29:41:6b: ab:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4D:C6:63:80:45:9D:1E:C0:74:32:95:C6:A9:0B:B3:7E:0C:DC:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/e1cbafcb-17d6-3f34-a3ab-ce140a904bc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:b9:e6:07:5c:02:7b:e2:4e:e9:5e:26:7f:e5:2b:2a:ba:e2: 6f:e1:a6:a0:96:6e:80:71:8b:6a:d4:22:3d:81:98:fb:3c:01: 3e:64:ae:f6:38:09:92:b8:a8:48:c6:34:74:9d:a1:05:1b:62: f0:3c:5a:48:d5:e8:b4:d9:cd:9e:97:32:07:73:9a:17:06:35: 28:1e:61:0f:75:c1:98:3a:ef:68:44:ab:dc:bc:f0:d7:98:3e: 11:7a:8f:bc:af:50:a4:3e:d1:d9:5f:6b:5d:57:01:38:3c:76: 2e:22:fc:cb:37:f9:99:71:28:6c:d7:cb:86:52:93:52:e4:b0: 78:20:6f:28:b7:4e:b2:9c:52:db:25:e9:c2:dc:09:24:ab:cf: 40:42:10:49:82:b9:e1:cf:75:11:ba:99:de:4c:f6:c8:bb:e2: 6c:0e:ea:5e:8b:14:fb:37:55:c0:8a:e6:01:e8:2e:07:3e:f0: fe:fb:bb:ef:df:70:d4:ed:91:6b:c6:29:bd:d8:82:da:2d:2e: 5c:ec:41:eb:b5:2d:71:be:8e:c9:dd:ae:9e:68:d1:04:5c:dc: 24:72:ef:c8:aa:4b:0d:ce:85:29:40:cf:0c:dd:5f:b2:4f:6a: 58:d9:1b:64:2b:f9:24:b8:c4:5b:52:55:ef:c6:23:74:04:5c: 8d:20:5d:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQcFej5YGIBLMFZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk YzkxOGZiOGItNDkzMC00MzE4LWEyZjQtM2U0MzJmZTk1OWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+Fncqhb0AXZMk5dta/EIYK+QZk6Zlcz0RZh OMIFX2x3GR2hQ/w2suS0oPh0ERi0yX3sAqTeRsmvjRBeeX68T/Gy6gzGIjga/jIj /W4PQIe5gqWuyq+6pteC0cW7OStIT+RXTPJ9d0s3aG2Y+giZt96kvLWA2AgHojNJ Np9K3203a9RICbEfkmmML0k5qYEc0ivDbIECr4DbpKdOY4oSIzO1N4JXFile9AlV DVl11tkMxuBoLLhYrcmkU/Z5tzURtYwTeL382G8coRExLeDw3Sycsv1uMiw3PUii 3VQglRL6QnjDE38md8u4MXtmqNsoPsuv1w6yk0gJMZEpQWur9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBNxmOARZ0ewHQylcapC7N+DNxeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvZTFjYmFmY2ItMTdkNi0z ZjM0LWEzYWItY2UxNDBhOTA0YmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALC55gdcAnviTuleJn/lKyq64m/hpqCWboBxi2rUIj2BmPs8AT5krvY4 CZK4qEjGNHSdoQUbYvA8WkjV6LTZzZ6XMgdzmhcGNSgeYQ91wZg672hEq9y88NeY PhF6j7yvUKQ+0dlfa11XATg8di4i/Ms3+ZlxKGzXy4ZSk1LksHggbyi3TrKcUtsl 6cLcCSSrz0BCEEmCueHPdRG6md5M9si74mwO6l6LFPs3VcCK5gHoLgc+8P77u+/f cNTtkWvGKb3YgtotLlzsQeu1LXG+jsndrp5o0QRc3CRy78iqSw3OhSlAzwzdX7JP aljZG2Qr+SS4xFtSVe/GI3QEXI0gXco= -----END CERTIFICATE-----Generated at Wed Nov 5 10:40:04 2025 by rpki-client