$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa File: fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa (raw, json) Hash identifier: bh8WFJC6+gqxoF7su0NY9z0AzBYGjvVRrvk/pVeFApI= Subject key identifier: C3:6B:1F:AC:AC:C7:50:AA:91:52:02:2B:9A:C7:F9:13:C9:BF:20:37 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584B5141BCE26BC34A80C1270200 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 3738 IP address blocks: 192.250.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:bc:e2:6b:c3:4a:80:c1:27:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=1dac2e85-b50b-4631-8b00-971fdeb59087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1b:45:b2:58:c1:d7:fd:12:df:ff:c4:6d:ba: 39:e5:39:e3:87:dd:06:f5:e7:e9:b4:07:22:1f:d6: 8e:33:2e:4c:3e:89:bd:2b:69:8e:17:c6:7e:9e:52: 86:80:58:f7:ef:a0:a7:18:07:4a:70:62:b6:52:4c: 59:51:2b:49:a1:c8:5b:a4:77:6d:4d:c3:77:2b:3c: a2:35:54:e4:c6:44:19:d2:79:85:f7:da:b4:65:56: 59:52:da:94:85:36:51:c6:93:b5:a9:2f:68:69:6a: d4:57:b6:83:3d:6d:89:16:21:a8:cb:db:8c:a1:f3: 1e:1d:fa:30:52:6f:10:ab:4c:02:24:e9:76:57:58: 56:d9:a5:4a:71:b2:4d:6d:2f:78:9c:30:74:72:07: 79:4a:9a:40:d1:e8:63:49:e5:1e:17:ce:2a:8f:b3: 93:43:69:41:9b:cc:94:c4:38:05:05:bb:a7:c1:f1: 40:c8:c7:0f:78:40:a7:9d:87:a0:41:24:af:bb:7d: 71:4f:da:b0:35:82:98:35:25:34:8e:e7:79:0a:5f: 1f:d3:00:7f:47:d6:78:1a:c8:27:40:21:5f:e5:38: bb:f1:1e:02:09:ee:a4:b0:ef:2d:c0:6c:e4:61:e3: 80:a5:2e:9a:1f:d5:c8:e3:8d:da:61:c4:da:63:05: c0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6B:1F:AC:AC:C7:50:AA:91:52:02:2B:9A:C7:F9:13:C9:BF:20:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/fa9ceb26-aedb-39db-8efd-3a3982506b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:a4:62:d7:9f:9f:46:98:27:c9:6e:7a:eb:e7:db:7f:88:45: 95:9c:99:84:22:f2:f7:5d:05:b1:71:75:30:0b:11:ca:49:c5: be:f4:1c:2b:0c:67:02:28:59:f7:be:5a:da:42:e7:07:88:54: 51:0e:7a:5b:93:da:a7:7c:ce:b3:63:a5:af:b1:4a:fc:19:72: 6e:1f:42:e2:e7:f7:a2:0e:13:06:33:fe:f8:ab:2f:c5:02:4e: 58:c9:7e:3a:9d:63:6f:1f:8d:81:bc:9e:b0:65:0b:e4:13:dd: fd:2c:72:cb:74:b9:59:a4:5d:b9:22:6c:e5:f4:f3:6f:7c:e0: 67:5d:97:5a:92:bd:10:53:71:3d:79:b6:92:f2:e6:69:9e:a1: 5a:eb:61:27:33:14:26:4e:e3:06:02:8c:52:7d:de:ec:dc:0c: 9b:69:8e:d7:cd:b8:7d:89:fc:e6:60:78:27:f2:68:a4:78:4c: 16:d5:0c:c4:07:60:81:ab:a9:e2:a0:85:f5:38:13:4b:2a:c4: 7f:3f:7e:bc:f2:e8:fb:e6:0a:34:ec:64:45:76:be:0a:ee:5c: 7d:97:dc:80:eb:80:26:e4:a4:1a:f2:a9:c6:a2:72:e2:52:61: fc:69:ae:0c:50:68:14:60:5f:59:a8:ab:c8:90:96:e7:ee:db: a9:8b:7f:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQbzia8NKgMEnAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk MWRhYzJlODUtYjUwYi00NjMxLThiMDAtOTcxZmRlYjU5MDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhtFsljB1/0S3//Ebbo55Tnjh90G9efptAci H9aOMy5MPom9K2mOF8Z+nlKGgFj376CnGAdKcGK2UkxZUStJochbpHdtTcN3Kzyi NVTkxkQZ0nmF99q0ZVZZUtqUhTZRxpO1qS9oaWrUV7aDPW2JFiGoy9uMofMeHfow Um8Qq0wCJOl2V1hW2aVKcbJNbS94nDB0cgd5SppA0ehjSeUeF84qj7OTQ2lBm8yU xDgFBbunwfFAyMcPeECnnYegQSSvu31xT9qwNYKYNSU0jud5Cl8f0wB/R9Z4Gsgn QCFf5Ti78R4CCe6ksO8twGzkYeOApS6aH9XI443aYcTaYwXAxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNrH6ysx1CqkVICK5rH+RPJvyA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvZmE5Y2ViMjYtYWVkYi0z OWRiLThlZmQtM2EzOTgyNTA2YjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIukYtefn0aYJ8lueuvn23+IRZWcmYQi8vddBbFxdTALEcpJxb70HCsM ZwIoWfe+WtpC5weIVFEOeluT2qd8zrNjpa+xSvwZcm4fQuLn96IOEwYz/virL8UC TljJfjqdY28fjYG8nrBlC+QT3f0scst0uVmkXbkibOX082984Gddl1qSvRBTcT15 tpLy5mmeoVrrYSczFCZO4wYCjFJ93uzcDJtpjtfNuH2J/OZgeCfyaKR4TBbVDMQH YIGrqeKghfU4E0sqxH8/frzy6PvmCjTsZEV2vgruXH2X3IDrgCbkpBryqcaicuJS YfxprgxQaBRgX1moq8iQlufu26mLf+I= -----END CERTIFICATE-----Generated at Wed Nov 5 10:44:11 2025 by rpki-client