$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa File: 86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa (raw, json) Hash identifier: 5xs64gwSbej9lJ7Of0tI/lwbanlvsPSgB86D2l8wcWc= Subject key identifier: 27:41:2A:EB:2B:B2:A2:AC:7C:17:F9:E4:32:2D:9A:98:EC:77:D0:2D Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584B36BC4F6254A00714E4C14DC0 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 3738 IP address blocks: 192.250.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:4f:62:54:a0:07:14:e4:c1:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=bd7dd3a9-0694-4efe-8d5a-74968cc53ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3b:0f:8f:9c:ff:73:8b:4e:9d:65:f8:30:a8: cf:3f:fb:7f:03:41:40:e6:37:c9:1b:af:e7:67:ab: 60:96:90:a6:ad:4d:02:5c:ad:fb:5c:65:26:e7:21: e7:aa:70:80:4c:89:6d:b7:f8:e8:f7:63:26:89:46: d7:fe:32:85:5c:03:7e:12:c1:e6:85:6f:29:01:1b: 52:1f:be:e7:7f:87:41:97:db:10:53:67:63:33:36: 17:a1:94:29:82:4b:92:1f:36:b2:65:1a:0c:61:c6: 36:71:27:8e:4d:42:86:23:65:30:4a:a1:f5:55:39: 32:a9:49:01:90:8b:87:8e:7d:d9:27:51:22:ee:62: 3b:da:00:12:0f:e0:fd:98:19:de:13:eb:8b:72:57: d3:83:3f:02:32:9f:02:07:cf:a8:a6:a7:f4:9f:4b: d4:46:db:5f:b9:b2:1c:6f:01:92:16:01:3d:cf:12: af:2b:14:b2:24:62:01:10:0c:18:76:26:ce:c3:b6: c8:71:1a:53:e9:89:10:cb:41:fe:22:b6:15:35:eb: 39:22:2e:4e:7f:09:ea:62:ef:68:c1:f9:90:18:fb: bd:6f:b0:f5:ab:ee:ca:f0:87:b0:cb:b5:6e:1d:65: 94:c8:57:8f:7a:19:67:f6:e5:1f:ea:e7:8d:60:18: 0d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:41:2A:EB:2B:B2:A2:AC:7C:17:F9:E4:32:2D:9A:98:EC:77:D0:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ee:03:67:71:01:f1:a4:11:12:b9:07:e2:a8:ed:cc:e5:cd: 5c:74:93:39:cc:4f:d5:40:2c:0d:bf:ff:05:36:ed:64:15:9e: be:0c:67:15:08:21:86:46:79:03:29:f1:bc:9a:5d:69:54:4f: 8c:94:93:11:8b:c1:4e:73:5c:1a:09:26:e7:60:48:78:a4:eb: 92:a1:81:27:38:df:ac:47:cb:cb:ef:04:f1:22:f8:c7:c6:4d: a4:98:4c:30:79:6d:ee:e1:1c:49:50:d5:98:98:23:9b:44:73: ba:2d:36:ca:10:f9:74:0d:ff:e2:97:8b:2e:d4:8f:06:3b:f8: 21:4e:06:54:e8:42:96:2c:5f:da:b9:b3:2e:43:c4:b7:40:88: 04:0f:de:98:23:3b:05:13:3b:ff:bf:74:02:25:16:9b:e8:7e: 6b:b3:35:fe:ef:4a:b3:48:9d:0f:13:f3:81:9a:34:9d:b1:39: 4e:82:3e:70:c4:9b:51:ba:6d:b0:4d:0f:92:9c:e9:ea:da:e9: d9:55:5e:6e:b5:8b:a8:c0:c9:34:b5:7d:61:8a:9f:39:36:af: 6d:d8:33:88:78:ab:33:03:47:5b:99:6d:d8:b8:c0:40:db:8e: 22:c7:3e:5b:f1:21:40:48:29:aa:3d:11:40:23:7e:4c:cf:95: 1a:9c:58:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vE9iVKAHFOTBTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk YmQ3ZGQzYTktMDY5NC00ZWZlLThkNWEtNzQ5NjhjYzUzZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjsPj5z/c4tOnWX4MKjPP/t/A0FA5jfJG6/n Z6tglpCmrU0CXK37XGUm5yHnqnCATIltt/jo92MmiUbX/jKFXAN+EsHmhW8pARtS H77nf4dBl9sQU2djMzYXoZQpgkuSHzayZRoMYcY2cSeOTUKGI2UwSqH1VTkyqUkB kIuHjn3ZJ1Ei7mI72gASD+D9mBneE+uLclfTgz8CMp8CB8+opqf0n0vURttfubIc bwGSFgE9zxKvKxSyJGIBEAwYdibOw7bIcRpT6YkQy0H+IrYVNes5Ii5OfwnqYu9o wfmQGPu9b7D1q+7K8Iewy7VuHWWUyFePehln9uUf6ueNYBgN5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdBKusrsqKsfBf55DItmpjsd9AtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvODZkNTMwOTItZDBiNi0z Zjk4LWIyZGEtYTM5N2FiOGViMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPolMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3uA2dxAfGkERK5B+Ko7czlzVx0kznMT9VALA2//wU27WQVnr4MZxUI IYZGeQMp8byaXWlUT4yUkxGLwU5zXBoJJudgSHik65KhgSc436xHy8vvBPEi+MfG TaSYTDB5be7hHElQ1ZiYI5tEc7otNsoQ+XQN/+KXiy7UjwY7+CFOBlToQpYsX9q5 sy5DxLdAiAQP3pgjOwUTO/+/dAIlFpvofmuzNf7vSrNInQ8T84GaNJ2xOU6CPnDE m1G6bbBND5Kc6era6dlVXm61i6jAyTS1fWGKnzk2r23YM4h4qzMDR1uZbdi4wEDb jiLHPlvxIUBIKao9EUAjfkzPlRqcWB4= -----END CERTIFICATE-----Generated at Wed Sep 17 01:06:35 2025 by rpki-client