$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa File: 86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa (raw, json) Hash identifier: uvUqesMY1olNtzoAG40lxSYLvEIu4ArSfcSSXGzefFQ= Subject key identifier: 0B:8E:D4:91:2A:45:97:42:35:7E:A1:A1:42:6E:23:12:0D:39:DB:D9 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584EA78869061687CCAD990EE4C0 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 3738 IP address blocks: 192.250.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:69:06:16:87:cc:ad:99:0e:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a17e99b8-a730-4fae-9142-dbed81ce2095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:42:6e:dd:61:d2:0a:7e:b6:0e:7f:80:01:ac: cf:0f:d4:f8:34:4c:c8:68:cb:fc:bf:a8:cf:02:1f: af:62:ab:8c:d3:0d:7c:50:94:de:fd:63:f2:8d:61: 59:6d:45:ed:21:90:e1:92:6a:96:f3:a0:e8:70:bb: f6:64:68:1f:8d:b4:98:c2:4e:ca:b5:0e:b5:1e:bd: 18:ab:68:f6:da:68:5f:61:b9:d5:28:f1:ba:2f:30: e7:15:ff:98:92:37:a1:08:50:6f:a4:7c:e2:ad:d3: 0b:32:19:69:98:5a:21:d9:48:23:0c:9b:43:6a:03: 16:e0:cf:9a:d7:98:75:e5:29:75:ff:60:18:91:b2: 78:72:12:48:c7:c5:48:6d:37:83:8a:45:0e:8b:e1: b4:36:fd:1f:d8:0b:e7:e0:59:3e:20:b0:bb:c0:48: c0:82:12:fa:b9:8e:ea:d0:07:12:44:7c:7b:60:3f: c7:04:95:b8:fb:70:da:db:e8:bd:82:e6:27:39:af: 68:e8:2e:d3:e7:c9:b6:3d:05:b0:74:7c:13:10:21: 8f:79:8f:51:33:04:41:fb:ae:d1:3e:03:10:cd:49: 9a:24:0b:7b:99:9a:3d:7e:71:47:31:07:4b:ab:70: 66:46:f7:bb:c8:0b:dc:d2:8c:b6:43:82:d9:13:6d: dd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8E:D4:91:2A:45:97:42:35:7E:A1:A1:42:6E:23:12:0D:39:DB:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/86d53092-d0b6-3f98-b2da-a397ab8eb01f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:94:51:32:b6:fd:d2:56:35:6c:6b:7f:70:e0:44:89:93:cd: 74:a5:cc:cb:b3:6d:37:5d:6c:ed:26:f6:39:00:b8:de:92:79: 0e:18:76:1e:a5:b2:7e:59:c1:60:4b:ee:fe:89:4d:0f:b9:fa: 63:b6:67:ed:27:c3:47:cc:ec:2c:5b:33:79:6c:d7:04:d2:55: 62:51:42:7a:5e:43:96:ea:cb:bd:52:e4:e8:1b:13:d1:bd:d2: 4d:5f:00:38:e5:42:df:c9:11:61:49:90:be:8e:18:d6:2a:3c: ef:12:eb:5d:37:28:46:96:85:09:f4:c6:07:50:89:42:44:b7: f6:e5:47:2d:4b:82:85:fb:0c:40:3b:77:1c:27:23:b6:29:db: 85:3e:22:7a:fc:44:e8:ea:3e:87:bc:8d:f3:9f:04:7c:5c:0c: 60:e7:41:d1:6d:8f:43:73:99:36:49:d2:5b:8d:09:59:cb:4e: 2d:92:47:32:66:a7:c5:b3:6b:a3:3d:17:f1:51:11:33:f5:75: bc:0e:48:20:13:8b:56:80:8a:ac:a9:82:cd:5e:f6:d8:db:4a: 9f:6e:4c:88:5d:aa:96:5a:de:7f:6b:16:a2:a1:df:12:2e:dc: 87:da:de:8d:89:2a:c3:ab:79:bb:50:ff:3a:67:69:06:26:53: 61:9d:7e:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niGkGFofMrZkO5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTE3ZTk5YjgtYTczMC00ZmFlLTkxNDItZGJlZDgxY2UyMDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEJu3WHSCn62Dn+AAazPD9T4NEzIaMv8v6jP Ah+vYquM0w18UJTe/WPyjWFZbUXtIZDhkmqW86DocLv2ZGgfjbSYwk7KtQ61Hr0Y q2j22mhfYbnVKPG6LzDnFf+YkjehCFBvpHzirdMLMhlpmFoh2UgjDJtDagMW4M+a 15h15Sl1/2AYkbJ4chJIx8VIbTeDikUOi+G0Nv0f2Avn4Fk+ILC7wEjAghL6uY7q 0AcSRHx7YD/HBJW4+3Da2+i9guYnOa9o6C7T58m2PQWwdHwTECGPeY9RMwRB+67R PgMQzUmaJAt7mZo9fnFHMQdLq3BmRve7yAvc0oy2Q4LZE23d3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuO1JEqRZdCNX6hoUJuIxINOdvZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvODZkNTMwOTItZDBiNi0z Zjk4LWIyZGEtYTM5N2FiOGViMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPolMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuUUTK2/dJWNWxrf3DgRImTzXSlzMuzbTddbO0m9jkAuN6SeQ4Ydh6l sn5ZwWBL7v6JTQ+5+mO2Z+0nw0fM7CxbM3ls1wTSVWJRQnpeQ5bqy71S5OgbE9G9 0k1fADjlQt/JEWFJkL6OGNYqPO8S6103KEaWhQn0xgdQiUJEt/blRy1LgoX7DEA7 dxwnI7Yp24U+Inr8ROjqPoe8jfOfBHxcDGDnQdFtj0NzmTZJ0luNCVnLTi2SRzJm p8Wza6M9F/FRETP1dbwOSCATi1aAiqypgs1e9tjbSp9uTIhdqpZa3n9rFqKh3xIu 3Ifa3o2JKsOrebtQ/zpnaQYmU2Gdfi0= -----END CERTIFICATE-----Generated at Wed Aug 19 23:59:11 2026 by rpki-client