$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/f59639f8-e6fd-32c3-85f4-0c9b5cdb4cae.roa File: f59639f8-e6fd-32c3-85f4-0c9b5cdb4cae.roa (raw, json) Hash identifier: WEoEyStuvXJgKARiryzK56Ac/wrqv7nHctygjMJzGQ0= Subject key identifier: A0:AB:5F:A2:88:35:24:FC:F9:38:91:FB:9F:91:E9:06:53:36:DA:1E Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584F374D537321DE62A6E2512100 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/f59639f8-e6fd-32c3-85f4-0c9b5cdb4cae.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 3738 IP address blocks: 192.250.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:53:73:21:de:62:a6:e2:51:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=843915c7-43fc-44b4-a7b3-1d5bdd1f0bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7b:c2:4b:b1:c8:da:84:46:6d:e7:6a:bd:c2: 22:7b:4e:c2:0f:70:fe:ae:10:4e:f4:6f:1d:34:60: 21:6e:27:99:fe:1f:81:62:8e:4c:d7:9f:3d:03:bc: ff:9d:77:02:50:7f:46:19:94:37:1d:45:dd:36:58: a5:26:17:19:ba:07:b5:6b:65:3d:3c:e2:c3:54:ec: fb:0c:c5:0f:ca:a5:8d:41:3b:07:88:76:1c:8e:4f: 6b:7e:4a:6f:68:e2:bb:82:48:29:c2:c2:f3:f3:74: 6c:1b:36:a4:e5:d0:11:25:cb:80:ed:1d:19:96:3b: 5d:0f:ad:95:0a:34:6d:db:71:d3:e4:2f:99:ca:e1: 68:18:3b:fa:f6:fc:28:83:20:45:67:86:e1:31:ae: 83:da:ea:d1:e8:c4:10:f4:ec:b5:22:62:ab:11:4c: aa:7c:a8:ff:00:3f:b2:9e:df:8a:31:36:74:31:93: bf:b3:fa:9a:88:f2:e8:90:bb:e4:25:ee:e5:0c:c5: 9e:85:d6:f8:9e:1d:5f:21:0e:d3:35:5e:7a:1b:c0: 36:d5:1f:c7:3e:30:24:6b:26:9c:7e:a6:84:53:96: 11:0f:3b:26:c8:c6:39:4a:b3:b1:4b:e6:2b:56:fa: 1a:4e:22:98:44:01:80:7a:9d:0c:7e:9a:7a:34:f1: c0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AB:5F:A2:88:35:24:FC:F9:38:91:FB:9F:91:E9:06:53:36:DA:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/f59639f8-e6fd-32c3-85f4-0c9b5cdb4cae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:0b:98:43:de:97:69:21:bb:1f:99:92:36:ae:03:ed:f9:4c: 23:f6:63:40:4a:80:f1:0f:71:97:0d:0c:fe:1f:f0:5c:d7:1b: 3a:cb:b9:6f:3b:c0:94:e4:25:b6:8e:21:59:0d:4c:33:87:56: 69:36:fa:34:97:e6:fb:f7:d7:ba:92:e6:7a:cb:10:42:b3:5e: ce:74:8e:37:fc:d5:90:ed:bd:2e:eb:b2:a4:c2:84:c4:f1:07: 20:4d:0b:de:c0:77:c1:cd:ef:fe:cf:58:72:de:9a:94:81:90: cb:64:13:50:60:a9:3c:a7:b6:bd:73:2e:53:2a:98:a8:1a:cd: e0:7a:8c:e8:62:0d:4f:c3:86:8d:74:a3:b8:69:35:6f:47:f3: 5c:33:b4:69:82:6a:49:87:18:ac:e5:8f:4b:42:77:3a:6c:c1: b8:d2:c3:b6:ae:d3:28:79:05:31:16:9a:3b:96:be:ee:ac:12: 5b:7d:fc:2c:19:a5:3c:2f:55:68:d4:84:1d:78:27:ce:a3:b9: 1f:50:06:8a:c0:8e:3f:a2:3f:aa:f0:90:a1:36:a7:d2:f5:26: f2:ab:b7:e3:27:3c:70:21:fe:0e:e6:f5:8a:09:29:56:e4:a2: 85:99:0a:b8:53:7d:91:10:6d:9f:5d:f2:63:45:b4:6c:30:e5: 29:f9:d9:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TVNzId5ipuJRIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk ODQzOTE1YzctNDNmYy00NGI0LWE3YjMtMWQ1YmRkMWYwYmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHvCS7HI2oRGbedqvcIie07CD3D+rhBO9G8d NGAhbieZ/h+BYo5M1589A7z/nXcCUH9GGZQ3HUXdNlilJhcZuge1a2U9POLDVOz7 DMUPyqWNQTsHiHYcjk9rfkpvaOK7gkgpwsLz83RsGzak5dARJcuA7R0ZljtdD62V CjRt23HT5C+ZyuFoGDv69vwogyBFZ4bhMa6D2urR6MQQ9Oy1ImKrEUyqfKj/AD+y nt+KMTZ0MZO/s/qaiPLokLvkJe7lDMWehdb4nh1fIQ7TNV56G8A21R/HPjAkayac fqaEU5YRDzsmyMY5SrOxS+YrVvoaTiKYRAGAep0Mfpp6NPHAMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCrX6KINST8+TiR+5+R6QZTNtoeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvZjU5NjM5ZjgtZTZmZC0z MmMzLTg1ZjQtMGM5YjVjZGI0Y2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPohMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMALmEPel2khux+ZkjauA+35TCP2Y0BKgPEPcZcNDP4f8FzXGzrLuW87 wJTkJbaOIVkNTDOHVmk2+jSX5vv317qS5nrLEEKzXs50jjf81ZDtvS7rsqTChMTx ByBNC97Ad8HN7/7PWHLempSBkMtkE1BgqTyntr1zLlMqmKgazeB6jOhiDU/Dho10 o7hpNW9H81wztGmCakmHGKzlj0tCdzpswbjSw7au0yh5BTEWmjuWvu6sElt9/CwZ pTwvVWjUhB14J86juR9QBorAjj+iP6rwkKE2p9L1JvKrt+MnPHAh/g7m9YoJKVbk ooWZCrhTfZEQbZ9d8mNFtGww5Sn52Uc= -----END CERTIFICATE-----Generated at Mon Sep 21 17:37:47 2026 by rpki-client