$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/e4095cbf-6a95-3fd7-b885-ac1e667fadc2.roa File: e4095cbf-6a95-3fd7-b885-ac1e667fadc2.roa (raw, json) Hash identifier: F5tVf6KXRTfWjuZ6i5bN8OTS2YKz9ob2+0kWejypLvo= Subject key identifier: 2D:7D:40:CD:A5:A8:EE:A9:AC:61:20:79:56:CB:A5:CC:E6:85:AB:EF Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584F3CE284E4509760B240490400 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/e4095cbf-6a95-3fd7-b885-ac1e667fadc2.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 3738 IP address blocks: 192.250.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:84:e4:50:97:60:b2:40:49:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=28e1eaba-fcf8-4a28-b45b-ef33f2efd8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3a:46:a4:3d:e3:bc:d4:99:64:80:2c:af:c6: de:09:c2:29:52:ba:d3:e7:ed:a7:d4:e6:31:63:20: c6:ef:78:51:ee:e2:47:ff:ed:20:83:ac:89:6c:16: 28:27:5e:f8:1e:5d:c1:9b:86:63:51:c2:91:ef:e8: 5a:18:78:b4:20:39:bf:97:39:54:8f:ab:7f:5f:13: de:47:3a:b1:52:f2:e1:e0:82:a5:27:25:d1:42:b1: 85:cd:05:52:ee:b5:96:5e:60:86:38:2b:c1:a5:09: 6b:51:4d:2d:39:80:41:f4:81:8a:f0:b3:f5:ab:dd: 64:7d:52:a4:b2:31:e4:09:2b:98:90:8a:eb:9b:41: 37:55:74:4b:c8:fc:ef:c4:f2:d6:eb:cc:ea:0b:16: fa:ad:99:a0:b1:09:cd:f0:3f:65:4d:14:a3:11:7c: 79:90:4c:d5:ef:f0:e6:a8:8e:c7:6f:9e:ac:de:c1: 0e:fc:cc:ca:71:c5:ca:41:ef:69:d5:3e:10:87:75: 74:0e:32:36:aa:40:8c:cb:25:e7:eb:a3:36:be:00: 98:e9:68:e3:83:3c:99:86:ef:a2:8e:c7:31:10:06: b5:16:9b:26:6c:0f:24:08:b8:97:2f:64:43:0c:df: da:c1:12:98:11:f4:b6:0c:01:00:46:31:17:c1:66: 8a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7D:40:CD:A5:A8:EE:A9:AC:61:20:79:56:CB:A5:CC:E6:85:AB:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/e4095cbf-6a95-3fd7-b885-ac1e667fadc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:5c:99:c6:08:08:7c:2c:25:07:5e:42:23:3f:70:d6:2a:57: b1:de:17:a4:bd:4a:7c:76:a7:a7:b4:b9:1a:40:29:18:5e:2b: f9:d7:79:14:4c:88:91:c0:e8:bc:61:fe:e4:57:18:6d:69:7a: 5a:66:26:a8:4d:75:31:01:4d:67:57:f3:cf:68:47:55:0e:c3: 7b:01:4e:9d:8c:97:24:0f:e6:c2:32:5f:1b:3f:00:19:93:05: 23:a2:40:51:8c:6a:85:d7:04:02:04:5e:fd:08:c2:42:98:e8: 8c:71:9c:b2:98:c7:20:e8:97:97:43:e6:b9:f7:c9:a9:16:2b: 2b:35:c6:3d:80:fb:7b:16:6d:97:88:12:c2:37:a1:c6:50:ad: 5f:48:74:cb:97:4b:99:5c:20:e5:55:b7:ae:5c:a7:3f:50:2a: 6c:86:3c:7f:58:44:77:fe:0e:6e:0f:6f:99:77:2c:fb:d0:33: d6:d6:70:dd:7d:74:94:8d:ca:ae:ba:74:46:d7:54:33:f6:6d: 56:ea:35:30:28:7e:60:bd:88:dd:ed:f5:99:b9:bf:b6:c9:b3: 55:51:3c:cb:20:f4:9e:ed:d7:fe:5d:37:d4:5b:d2:1e:3f:ab: 4d:47:a6:3d:52:11:2f:23:54:76:31:a6:99:b3:e7:6f:49:da: ac:c1:f0:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884oTkUJdgskBJBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MjhlMWVhYmEtZmNmOC00YTI4LWI0NWItZWYzM2YyZWZkOGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjpGpD3jvNSZZIAsr8beCcIpUrrT5+2n1OYx YyDG73hR7uJH/+0gg6yJbBYoJ174Hl3Bm4ZjUcKR7+haGHi0IDm/lzlUj6t/XxPe RzqxUvLh4IKlJyXRQrGFzQVS7rWWXmCGOCvBpQlrUU0tOYBB9IGK8LP1q91kfVKk sjHkCSuYkIrrm0E3VXRLyPzvxPLW68zqCxb6rZmgsQnN8D9lTRSjEXx5kEzV7/Dm qI7Hb56s3sEO/MzKccXKQe9p1T4Qh3V0DjI2qkCMyyXn66M2vgCY6WjjgzyZhu+i jscxEAa1FpsmbA8kCLiXL2RDDN/awRKYEfS2DAEARjEXwWaKTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC19QM2lqO6prGEgeVbLpczmhavvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvZTQwOTVjYmYtNmE5NS0z ZmQ3LWI4ODUtYWMxZTY2N2ZhZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1cmcYICHwsJQdeQiM/cNYqV7HeF6S9Snx2p6e0uRpAKRheK/nXeRRM iJHA6Lxh/uRXGG1pelpmJqhNdTEBTWdX889oR1UOw3sBTp2MlyQP5sIyXxs/ABmT BSOiQFGMaoXXBAIEXv0IwkKY6IxxnLKYxyDol5dD5rn3yakWKys1xj2A+3sWbZeI EsI3ocZQrV9IdMuXS5lcIOVVt65cpz9QKmyGPH9YRHf+Dm4Pb5l3LPvQM9bWcN19 dJSNyq66dEbXVDP2bVbqNTAofmC9iN3t9Zm5v7bJs1VRPMsg9J7t1/5dN9Rb0h4/ q01Hpj1SES8jVHYxppmz529J2qzB8OA= -----END CERTIFICATE-----Generated at Tue Sep 22 14:23:14 2026 by rpki-client