$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa File: 3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa (raw, json) Hash identifier: dLY5VEZmADQ89MBnwbakrHKaXE0qk3W1Euhvt5y8uhY= Subject key identifier: 08:D4:00:FC:44:BA:74:90:35:EF:F9:05:FF:EE:52:5A:2C:E1:2C:6D Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584EA78F6C7F150BA5BF48C83D60 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3738 IP address blocks: 192.250.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:6c:7f:15:0b:a5:bf:48:c8:3d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e4051988-5855-43ca-b357-ec5aa58beba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:16:3a:e9:c6:34:79:39:9c:da:f4:47:a0:d5: c3:e6:8e:ae:71:9b:ba:19:87:cc:f3:fd:4e:e8:a4: c8:24:17:a1:40:b1:fc:1a:b8:ab:91:21:ff:85:40: 04:dc:38:ca:0f:a0:e3:93:64:12:53:97:2d:cf:c4: 91:a8:b0:c3:b3:f5:ad:03:cb:8b:4f:5b:18:6e:33: de:85:69:e7:56:3a:c6:21:8d:88:55:e9:84:ce:7e: 7a:9f:75:c6:51:9f:21:0b:63:79:f6:b3:cb:52:2c: e0:ab:64:ce:0d:81:cb:a6:6b:06:16:ff:e8:ab:4e: 31:dc:9f:5b:66:58:4b:ed:b4:99:da:a5:94:06:a6: 63:26:08:f6:d1:8b:d5:1c:f8:9e:3b:90:a3:b4:cb: a5:85:3a:f5:17:30:1f:53:2c:6e:20:20:5e:f0:7e: 45:99:ed:86:50:18:c4:99:60:bb:3d:c9:6e:f8:2b: 3a:0a:b9:05:2e:5c:d3:d3:89:70:7d:27:7b:e0:27: 47:70:b5:42:3c:c1:e4:ed:bc:3f:c4:c2:1b:8f:87: 1e:fb:34:1d:35:e9:3a:10:de:b5:51:7b:aa:85:fb: ae:ab:ba:96:f5:9d:73:84:a7:1a:b7:0a:2e:27:b0: dd:a6:74:30:8c:40:a6:63:10:7a:7f:8e:09:c8:8d: 58:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D4:00:FC:44:BA:74:90:35:EF:F9:05:FF:EE:52:5A:2C:E1:2C:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3f0a4dd9-65df-3b61-b18e-67c029327ca7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:9e:c8:51:47:ea:5c:b3:16:23:93:6c:18:96:f0:2d:d1:3d: 1a:04:58:d6:5f:fd:1d:33:8b:aa:36:f3:b7:5c:93:ae:38:7c: 47:55:a8:60:a6:08:fe:8c:85:b0:7a:23:5f:09:cd:77:e2:d7: f6:2d:53:82:a8:8f:6c:8f:95:e0:74:8b:6a:70:09:8e:ea:54: 95:f5:b3:2f:b0:2e:36:a9:72:d8:d4:08:1c:be:25:82:2b:a2: c2:e1:4c:d2:13:19:00:44:7c:c1:f1:f2:2e:a6:07:97:d2:89: 4b:22:5f:65:87:c2:84:9a:7c:c4:d0:41:55:5c:df:8c:6a:d2: 6e:dd:2e:e3:8b:e4:87:0a:7e:05:b1:b2:b0:65:4f:a2:4c:7b: 91:b9:6d:ef:d4:b5:cd:99:e2:de:70:05:63:f3:a6:06:2c:56: 96:cc:61:2b:04:87:a4:1a:3d:3e:72:64:ad:77:f5:ed:56:92: 74:19:39:07:df:90:63:ce:d4:d9:6a:31:32:ef:c0:50:6a:f5: 95:e1:81:fb:72:4a:93:3a:39:bb:9d:a8:b7:66:26:0e:b1:d2: c6:0f:84:76:2f:11:bd:a7:28:10:17:6a:b9:40:a7:a8:85:28: e3:87:d6:89:d0:aa:76:cd:73:cc:4e:29:07:22:90:fd:38:6a: 8e:54:f7:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj2x/FQulv0jIPWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTQwNTE5ODgtNTg1NS00M2NhLWIzNTctZWM1YWE1OGJlYmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBY66cY0eTmc2vRHoNXD5o6ucZu6GYfM8/1O 6KTIJBehQLH8GrirkSH/hUAE3DjKD6Djk2QSU5ctz8SRqLDDs/WtA8uLT1sYbjPe hWnnVjrGIY2IVemEzn56n3XGUZ8hC2N59rPLUizgq2TODYHLpmsGFv/oq04x3J9b ZlhL7bSZ2qWUBqZjJgj20YvVHPieO5CjtMulhTr1FzAfUyxuICBe8H5Fme2GUBjE mWC7Pclu+Cs6CrkFLlzT04lwfSd74CdHcLVCPMHk7bw/xMIbj4ce+zQdNek6EN61 UXuqhfuuq7qW9Z1zhKcatwouJ7DdpnQwjECmYxB6f44JyI1Y+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjUAPxEunSQNe/5Bf/uUlos4SxtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvM2YwYTRkZDktNjVkZi0z YjYxLWIxOGUtNjdjMDI5MzI3Y2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADueyFFH6lyzFiOTbBiW8C3RPRoEWNZf/R0zi6o287dck644fEdVqGCm CP6MhbB6I18JzXfi1/YtU4Koj2yPleB0i2pwCY7qVJX1sy+wLjapctjUCBy+JYIr osLhTNITGQBEfMHx8i6mB5fSiUsiX2WHwoSafMTQQVVc34xq0m7dLuOL5IcKfgWx srBlT6JMe5G5be/Utc2Z4t5wBWPzpgYsVpbMYSsEh6QaPT5yZK139e1WknQZOQff kGPO1NlqMTLvwFBq9ZXhgftySpM6ObudqLdmJg6x0sYPhHYvEb2nKBAXarlAp6iF KOOH1onQqnbNc8xOKQcikP04ao5U93Y= -----END CERTIFICATE-----Generated at Wed Aug 19 23:59:09 2026 by rpki-client