$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa File: 86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa (raw, json) Hash identifier: v4hDowUPzM0N+nXIPY4j0e3TQpFmq9pm5Or7HZyB9E0= Subject key identifier: 2E:14:98:0A:CA:AD:E4:A4:B2:44:58:93:A4:74:64:3C:D2:2D:6F:3B Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584F49767C352D0916A71C5D6680 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3738 IP address blocks: 192.250.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:7c:35:2d:09:16:a7:1c:5d:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=76985d03-b884-42cb-a345-ca3b72e673fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0d:d6:07:3e:3c:e3:63:70:94:91:a9:aa:04: a5:b3:72:ec:aa:24:49:27:8a:b0:df:b7:4d:db:ea: ad:22:05:90:d1:1d:ac:81:89:64:50:80:e2:c9:c7: 7c:d2:35:5f:ff:df:28:34:05:86:cf:d6:3f:7f:70: 37:3d:06:6e:d2:31:e8:cf:53:e1:fb:2d:b1:ab:d5: 7d:73:46:62:10:ff:0e:94:5a:e3:dc:ad:b4:76:d1: 0b:79:06:ac:bd:85:70:fc:15:cf:26:e2:30:0a:d8: 64:0d:2e:07:92:37:52:86:9a:bb:74:16:86:01:4b: 35:ea:71:28:29:92:55:a7:02:a0:38:5f:09:6c:26: a1:cd:02:f1:5c:43:2c:e7:69:9b:13:05:82:ad:45: 28:71:48:0d:4c:2d:ba:1c:a1:30:4a:65:0a:8d:1c: 31:31:23:d9:f7:28:37:62:28:b9:c9:aa:ed:3d:48: 5c:49:e5:c0:c3:d8:f8:7d:b2:4c:29:a9:f2:7d:b7: f5:8c:9e:c6:b5:bc:50:42:79:0d:a2:c4:e7:a4:cf: 4b:b9:a1:fb:d7:e5:ac:b7:7b:d5:6f:f5:bc:e7:e0: 49:1f:6d:80:a1:4a:b8:3d:a5:12:f4:ba:6b:89:c2: 4f:d7:cb:f5:e6:3c:16:69:4a:42:34:3f:7b:11:68: 08:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:14:98:0A:CA:AD:E4:A4:B2:44:58:93:A4:74:64:3C:D2:2D:6F:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:e8:b8:15:7c:f8:0c:44:37:97:ac:5f:6e:0e:ef:22:d1:b3: 66:09:f6:e0:52:e3:6c:59:96:3e:9b:bf:cd:32:30:41:ef:00: 03:ec:86:29:a7:94:f3:10:f5:a8:93:08:0d:1e:9a:a0:37:c9: b9:e1:07:d7:38:bb:1f:6a:b9:1b:7f:db:18:7b:8f:89:78:a6: cc:5d:f9:e8:2f:9b:4f:95:b7:70:05:f5:d2:cb:b8:71:41:39: 4f:ab:70:cd:bd:bb:f6:16:a0:26:43:44:ea:d3:e4:60:e8:bd: 07:d9:82:9b:1b:ed:60:32:02:15:a0:f5:d6:27:b7:f7:51:5c: 13:76:60:ce:62:7b:1b:8e:b3:bb:30:10:28:b7:54:22:a9:3c: 56:6a:09:f6:76:09:c3:ec:2a:ea:98:ac:20:38:4e:3b:0b:21: af:7d:bc:61:00:7f:1b:e6:32:c7:7e:b0:74:dc:a0:be:1f:2a: 5e:7f:f4:6d:45:13:0b:db:77:63:fa:0d:4b:ab:ee:f8:e0:72: 77:74:d2:e6:c3:6e:fd:0b:e9:0a:32:cd:45:4c:a3:a5:8f:db: ff:10:7e:b7:2e:4c:bf:22:e2:e6:a9:30:1d:3c:c5:9f:b5:d8: f2:d1:43:63:25:af:79:ed:10:37:77:e9:e4:3f:9f:37:98:82: c0:e2:57:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdnw1LQkWpxxdZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzY5ODVkMDMtYjg4NC00MmNiLWEzNDUtY2EzYjcyZTY3M2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ3WBz4842NwlJGpqgSls3LsqiRJJ4qw37dN 2+qtIgWQ0R2sgYlkUIDiycd80jVf/98oNAWGz9Y/f3A3PQZu0jHoz1Ph+y2xq9V9 c0ZiEP8OlFrj3K20dtELeQasvYVw/BXPJuIwCthkDS4HkjdShpq7dBaGAUs16nEo KZJVpwKgOF8JbCahzQLxXEMs52mbEwWCrUUocUgNTC26HKEwSmUKjRwxMSPZ9yg3 Yii5yartPUhcSeXAw9j4fbJMKanyfbf1jJ7GtbxQQnkNosTnpM9LuaH71+Wst3vV b/W85+BJH22AoUq4PaUS9LpricJP18v15jwWaUpCND97EWgIUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4UmArKreSkskRYk6R0ZDzSLW87MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvODZkNTMwOTItZDBiNi0z Zjk4LWIyZGEtYTM5N2FiOGViMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPolMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfouBV8+AxEN5esX24O7yLRs2YJ9uBS42xZlj6bv80yMEHvAAPshimn lPMQ9aiTCA0emqA3ybnhB9c4ux9quRt/2xh7j4l4psxd+egvm0+Vt3AF9dLLuHFB OU+rcM29u/YWoCZDROrT5GDovQfZgpsb7WAyAhWg9dYnt/dRXBN2YM5iexuOs7sw ECi3VCKpPFZqCfZ2CcPsKuqYrCA4TjsLIa99vGEAfxvmMsd+sHTcoL4fKl5/9G1F Ewvbd2P6DUur7vjgcnd00ubDbv0L6QoyzUVMo6WP2/8QfrcuTL8i4uapMB08xZ+1 2PLRQ2Mlr3ntEDd36eQ/nzeYgsDiVyQ= -----END CERTIFICATE-----Generated at Tue Oct 20 22:12:25 2026 by rpki-client