$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/4e7a23d6-84a8-3e21-a4cd-a9ab5bf7c58d.roa File: 4e7a23d6-84a8-3e21-a4cd-a9ab5bf7c58d.roa (raw, json) Hash identifier: 9KM5BOdedLfKSSiiMfPTdQ/mw5j85dzB1LgA25HZTdM= Subject key identifier: 3C:52:6A:EF:66:C9:62:1C:77:68:0B:30:DD:52:4E:6E:F3:72:71:68 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584F49757AFFFB0879BE63B9D980 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/4e7a23d6-84a8-3e21-a4cd-a9ab5bf7c58d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3738 IP address blocks: 192.250.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:7a:ff:fb:08:79:be:63:b9:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bdab606d-307d-4bfe-9a44-b629f112d818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:db:4a:22:65:16:42:7f:f3:dc:81:7d:74:67: 75:69:82:fe:2f:5f:df:c4:98:27:b2:91:70:48:bb: a0:38:93:49:e0:e8:98:23:99:fa:40:db:3d:a2:42: 84:ef:66:52:c8:81:84:96:38:32:03:6e:be:19:2d: 51:7a:fb:e9:c4:eb:7b:71:3e:7a:c1:65:97:5f:0a: 04:93:b0:bc:74:52:16:dc:cb:3e:00:d5:4f:8d:25: b8:fa:1e:87:8c:21:8d:90:cb:66:80:6e:bb:9f:78: 66:43:41:cb:3e:f8:bb:b6:07:73:24:7c:4b:d8:f3: 4d:f6:22:df:f9:e7:21:2e:8e:0c:8d:6d:1d:ba:66: ac:85:6e:78:41:d1:53:6b:53:5e:68:95:c4:19:b0: 61:e3:3a:b1:b8:d2:bd:2f:68:79:31:bd:fc:06:5b: 94:5e:22:be:35:bd:4c:89:e6:50:fd:6d:cf:b2:e6: 43:8f:5d:54:a9:2d:17:0f:3c:d6:c3:76:58:21:6c: e9:8c:80:30:c5:f0:0a:f1:3d:9a:d1:6c:20:db:d9: f8:6b:37:c6:8b:b2:32:72:61:0f:8c:13:4e:0e:24: c2:fe:25:7b:e1:6f:71:e5:a9:d6:82:f0:0d:c8:53: 14:3d:3f:27:88:19:60:95:35:a6:68:cb:ce:b8:97: 8c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:52:6A:EF:66:C9:62:1C:77:68:0B:30:DD:52:4E:6E:F3:72:71:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/4e7a23d6-84a8-3e21-a4cd-a9ab5bf7c58d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:3f:6c:86:84:74:33:be:2a:d4:80:11:84:de:ea:61:fd:23: b7:bf:ee:c0:80:fd:b9:05:29:d4:a2:8a:13:d0:8a:6b:9c:ba: 8c:1a:71:55:20:67:f5:cb:4b:ab:49:1a:02:1d:2f:87:5b:b6: 0e:1b:8d:b9:48:d6:11:08:fa:e4:bc:b7:9d:d9:96:0a:6e:75: ba:c2:1e:8e:ca:39:a8:92:2b:df:b5:1a:d8:ea:d5:30:59:b4: 48:2d:88:60:f2:dd:46:e2:7a:09:12:3f:48:2d:19:e7:11:44: d1:d5:8c:48:a1:d2:4f:10:92:c6:58:99:91:f0:05:e1:70:08: 97:99:fe:e7:96:a7:6a:7e:db:cc:de:26:97:51:3c:2a:db:a1: cc:a5:e4:62:15:f9:bb:68:dc:30:0e:45:94:be:cf:20:96:ec: fa:eb:40:9e:a8:1d:9f:88:f3:1b:b0:68:5f:1b:39:3e:dd:0d: fa:59:cf:81:67:63:82:b7:08:5c:94:fc:b0:b6:ff:f0:15:57: 06:67:49:76:7d:da:0f:50:cb:9a:3e:cb:f9:28:a1:f0:d7:70: 13:d7:89:32:c0:5c:b2:5a:f8:63:73:d6:cf:1e:2f:ac:07:d0: 10:11:64:27:14:43:cd:64:7c:87:f9:c7:bf:e2:f1:63:58:84: 20:87:46:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdXr/+wh5vmO52YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmRhYjYwNmQtMzA3ZC00YmZlLTlhNDQtYjYyOWYxMTJkODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9tKImUWQn/z3IF9dGd1aYL+L1/fxJgnspFw SLugOJNJ4OiYI5n6QNs9okKE72ZSyIGEljgyA26+GS1RevvpxOt7cT56wWWXXwoE k7C8dFIW3Ms+ANVPjSW4+h6HjCGNkMtmgG67n3hmQ0HLPvi7tgdzJHxL2PNN9iLf +echLo4MjW0dumashW54QdFTa1NeaJXEGbBh4zqxuNK9L2h5Mb38BluUXiK+Nb1M ieZQ/W3PsuZDj11UqS0XDzzWw3ZYIWzpjIAwxfAK8T2a0Wwg29n4azfGi7IycmEP jBNODiTC/iV74W9x5anWgvANyFMUPT8niBlglTWmaMvOuJeMIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxSau9myWIcd2gLMN1STm7zcnFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvNGU3YTIzZDYtODRhOC0z ZTIxLWE0Y2QtYTlhYjViZjdjNThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKw/bIaEdDO+KtSAEYTe6mH9I7e/7sCA/bkFKdSiihPQimucuowacVUg Z/XLS6tJGgIdL4dbtg4bjblI1hEI+uS8t53ZlgpudbrCHo7KOaiSK9+1Gtjq1TBZ tEgtiGDy3UbiegkSP0gtGecRRNHVjEih0k8QksZYmZHwBeFwCJeZ/ueWp2p+28ze JpdRPCrbocyl5GIV+bto3DAORZS+zyCW7PrrQJ6oHZ+I8xuwaF8bOT7dDfpZz4Fn Y4K3CFyU/LC2//AVVwZnSXZ92g9Qy5o+y/koofDXcBPXiTLAXLJa+GNz1s8eL6wH 0BARZCcUQ81kfIf5x7/i8WNYhCCHRso= -----END CERTIFICATE-----Generated at Tue Oct 20 12:23:00 2026 by rpki-client