$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6f77d9a3-eb03-3e5d-92e2-877a3def054f.roa File: 6f77d9a3-eb03-3e5d-92e2-877a3def054f.roa (raw, json) Hash identifier: OdMTXnFrpdHmVqthLSDh6a4+/fu7Q0IXiWGo3F7fQmg= Subject key identifier: 58:36:62:FB:26:08:43:8E:3A:9F:E9:23:A5:6D:45:17:8F:03:A5:8C Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584F49767FCDAED3DEF1CE21CF00 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6f77d9a3-eb03-3e5d-92e2-877a3def054f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3738 IP address blocks: 192.250.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:7f:cd:ae:d3:de:f1:ce:21:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1b874c3e-f6cb-4f36-8ecb-d23ed5ac7da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:20:36:25:93:d9:56:fb:ac:3c:62:8d:2c:58: e8:71:52:f9:9e:05:c6:69:3c:e1:14:23:74:5e:79: ef:3a:1e:b3:d5:50:96:ce:65:09:13:db:d7:85:c0: 7a:e4:93:f9:71:5a:8b:2b:98:40:11:28:20:2b:ec: 32:a8:89:27:3c:f2:fa:7c:05:24:11:cc:88:ea:f3: ed:6e:61:df:c3:3d:2c:9d:e6:4b:80:e9:df:c5:9a: 1b:14:7e:d4:bb:8f:3b:fa:5e:28:51:6d:5a:6d:5a: b2:2e:84:2e:d8:de:29:f5:8f:22:3d:e6:11:1e:43: 27:29:8a:aa:e9:e9:e1:c9:18:85:1d:b6:3c:2d:5f: 27:df:97:0c:e9:6d:75:e9:04:00:ff:e8:05:5b:93: 9a:4f:f5:8c:60:af:ba:41:50:72:57:47:74:33:59: 1f:7e:c5:32:8c:ff:09:d3:52:37:51:11:73:5f:3f: 1c:6d:c0:d8:7c:2b:7c:79:b4:2a:63:79:d8:ad:d1: ac:e6:c9:d8:2d:54:fe:83:c6:35:bf:17:8d:c0:75: 3f:06:99:b2:33:a8:70:02:da:b3:a4:41:c7:ea:8e: 96:e9:9f:a3:5d:ce:e2:46:58:3c:0b:14:c5:09:fc: fb:f9:f3:ee:87:98:9f:06:1d:98:37:5f:85:be:b3: 81:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:36:62:FB:26:08:43:8E:3A:9F:E9:23:A5:6D:45:17:8F:03:A5:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6f77d9a3-eb03-3e5d-92e2-877a3def054f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:c8:f3:ed:c2:e8:d7:58:34:bc:f5:34:4b:6e:ea:05:92:1e: 33:18:53:b4:7f:87:40:90:9b:a6:ec:29:f5:f7:7a:28:af:bc: 40:c3:f1:e2:f4:5b:04:c7:8a:a7:21:bd:4a:92:a1:88:b7:9b: cf:09:b3:e5:63:f1:c6:48:18:ef:1e:f7:9b:00:63:6a:27:d9: f9:44:7c:cf:e8:90:16:8f:02:1e:11:e7:d4:2d:c0:6b:da:c9: 1b:4a:6b:85:b6:2a:43:91:f0:ee:99:01:70:6c:a6:26:01:57: 36:8a:e0:72:eb:62:1a:41:e0:34:fa:fe:ad:45:f9:48:00:7c: de:7c:f3:e5:23:1b:e6:6d:34:4e:6d:49:1a:e2:0f:03:b4:4c: b3:a2:40:58:e7:8c:b3:5e:a1:5e:76:c1:0e:bd:1a:78:86:17: db:96:f7:a0:87:53:3d:c4:0d:37:a4:43:53:9a:93:96:62:9a: d1:df:cb:86:51:97:00:26:fb:bb:74:9a:a8:6b:5d:09:f9:0a: 86:1c:d1:39:2e:6a:d1:75:72:ed:23:42:be:d4:4e:3f:18:8f: 87:f7:5d:8b:5c:77:48:a5:fb:f1:39:42:e6:99:af:38:6f:86: aa:15:af:ce:82:a1:34:5c:b1:6a:b8:ef:3f:44:75:00:ba:69: a1:c9:a1:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdn/NrtPe8c4hzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWI4NzRjM2UtZjZjYi00ZjM2LThlY2ItZDIzZWQ1YWM3ZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCA2JZPZVvusPGKNLFjocVL5ngXGaTzhFCN0 XnnvOh6z1VCWzmUJE9vXhcB65JP5cVqLK5hAESggK+wyqIknPPL6fAUkEcyI6vPt bmHfwz0sneZLgOnfxZobFH7Uu487+l4oUW1abVqyLoQu2N4p9Y8iPeYRHkMnKYqq 6enhyRiFHbY8LV8n35cM6W116QQA/+gFW5OaT/WMYK+6QVByV0d0M1kffsUyjP8J 01I3URFzXz8cbcDYfCt8ebQqY3nYrdGs5snYLVT+g8Y1vxeNwHU/BpmyM6hwAtqz pEHH6o6W6Z+jXc7iRlg8CxTFCfz7+fPuh5ifBh2YN1+FvrOBGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg2YvsmCEOOOp/pI6VtRRePA6WMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvNmY3N2Q5YTMtZWIwMy0z ZTVkLTkyZTItODc3YTNkZWYwNTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3I8+3C6NdYNLz1NEtu6gWSHjMYU7R/h0CQm6bsKfX3eiivvEDD8eL0 WwTHiqchvUqSoYi3m88Js+Vj8cZIGO8e95sAY2on2flEfM/okBaPAh4R59QtwGva yRtKa4W2KkOR8O6ZAXBspiYBVzaK4HLrYhpB4DT6/q1F+UgAfN588+UjG+ZtNE5t SRriDwO0TLOiQFjnjLNeoV52wQ69GniGF9uW96CHUz3EDTekQ1Oak5ZimtHfy4ZR lwAm+7t0mqhrXQn5CoYc0TkuatF1cu0jQr7UTj8Yj4f3XYtcd0il+/E5QuaZrzhv hqoVr86CoTRcsWq47z9EdQC6aaHJoZA= -----END CERTIFICATE-----Generated at Tue Oct 20 07:55:46 2026 by rpki-client