$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/9178f256-45dc-3aa7-8211-7a81aaaa7923.roa File: 9178f256-45dc-3aa7-8211-7a81aaaa7923.roa (raw, json) Hash identifier: obA1gZFlPDsdkZluU5ffZN+gNxrtFtsTYJKICIv0veY= Subject key identifier: 0B:AA:1B:0F:90:A8:D3:51:CA:4B:3F:31:D0:54:4B:89:0A:74:83:0B Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584F4972FCC088B348E86545D100 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/9178f256-45dc-3aa7-8211-7a81aaaa7923.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3738 IP address blocks: 192.250.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:fc:c0:88:b3:48:e8:65:45:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4bacc55b-13d9-4d41-871b-6cdca6798f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:68:73:b4:dd:fd:c1:c1:35:1d:03:92:28:fc: e9:68:39:70:56:7c:35:ea:79:10:93:79:91:f1:24: 44:d8:07:7f:0c:2c:d0:f7:be:c8:9e:d5:66:12:86: 48:e6:ad:8c:f8:5f:58:8e:9a:79:50:5e:18:a7:dd: 0e:43:68:e2:2a:d0:2b:e4:bb:ac:0c:03:71:65:5b: 02:79:8e:26:9b:f1:10:4f:88:af:2a:01:e1:63:bd: c4:81:5a:6e:e6:ff:95:ca:05:bc:ec:8c:f9:5b:dd: e1:87:9b:3a:59:21:d2:5c:9c:a5:18:c4:97:2a:5c: 77:fc:ba:1c:7f:91:a8:4e:1d:55:cf:e1:43:02:b2: 4d:b4:a2:fb:66:08:05:43:fc:5b:c5:e5:e2:5e:01: 42:5d:52:b2:f3:b9:76:58:e7:21:25:5c:91:e7:d8: bb:6e:be:40:12:2d:24:89:c8:55:27:3d:eb:6c:9a: 44:73:1d:50:4a:52:d0:84:c7:67:92:ce:52:14:26: 9d:4b:ee:4a:d5:4a:29:67:b7:98:54:0e:53:c5:35: f3:38:5a:9b:a8:d7:28:a9:be:9f:14:a7:c9:a4:2c: 41:a3:c5:c0:4b:98:d5:0b:3a:3b:5a:03:58:04:d4: 65:af:b5:15:72:80:14:6d:88:47:2d:81:0c:16:51: 57:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AA:1B:0F:90:A8:D3:51:CA:4B:3F:31:D0:54:4B:89:0A:74:83:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/9178f256-45dc-3aa7-8211-7a81aaaa7923.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:af:93:2b:4d:6f:3d:f7:16:e8:7e:21:73:2b:59:93:ed:3e: 4b:dc:ed:02:9b:5a:a3:e7:ca:a7:93:6c:2e:0e:0b:b9:7b:85: 69:5b:a9:09:63:6a:06:04:09:3b:80:06:a9:48:29:8a:a9:be: 2b:9d:d4:a1:2e:da:9b:c0:f6:d3:61:2d:61:0e:a2:36:64:0f: e6:43:12:03:02:49:1a:47:f4:86:e7:07:64:38:bd:8e:ef:b4: 66:42:1a:d5:d4:85:c9:26:95:e5:ed:c8:96:40:19:d1:e3:5c: 2f:ec:bd:8a:f1:0a:52:cc:5d:a6:bd:36:69:62:1d:e3:b9:f7: fd:1d:40:84:c1:c0:2a:04:4b:f0:51:54:6a:87:6d:39:0f:7e: ea:53:1e:ad:1c:e8:94:a4:12:1b:51:1b:3e:5d:dd:ee:8e:b7: e6:f6:09:f3:55:ef:c5:8c:4c:c7:9b:56:db:39:95:9f:b5:23: e3:6a:d6:ba:19:d7:bb:51:8e:88:74:c6:3a:23:e1:a1:21:06: 1f:d6:ad:75:ba:3c:25:be:50:75:53:9e:a9:54:cf:8e:60:c7: 72:2b:67:a4:9d:b2:1a:46:77:ee:d2:54:a7:e6:0a:69:4e:5d: a6:17:31:a7:55:80:ce:d1:8e:b6:4f:3e:dc:80:06:db:76:f2: ee:60:a9:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcvzAiLNI6GVF0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGJhY2M1NWItMTNkOS00ZDQxLTg3MWItNmNkY2E2Nzk4ZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmhztN39wcE1HQOSKPzpaDlwVnw16nkQk3mR 8SRE2Ad/DCzQ977IntVmEoZI5q2M+F9Yjpp5UF4Yp90OQ2jiKtAr5LusDANxZVsC eY4mm/EQT4ivKgHhY73EgVpu5v+VygW87Iz5W93hh5s6WSHSXJylGMSXKlx3/Loc f5GoTh1Vz+FDArJNtKL7ZggFQ/xbxeXiXgFCXVKy87l2WOchJVyR59i7br5AEi0k ichVJz3rbJpEcx1QSlLQhMdnks5SFCadS+5K1UopZ7eYVA5TxTXzOFqbqNcoqb6f FKfJpCxBo8XAS5jVCzo7WgNYBNRlr7UVcoAUbYhHLYEMFlFX6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuqGw+QqNNRyks/MdBUS4kKdIMLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvOTE3OGYyNTYtNDVkYy0z YWE3LTgyMTEtN2E4MWFhYWE3OTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSvkytNbz33Fuh+IXMrWZPtPkvc7QKbWqPnyqeTbC4OC7l7hWlbqQlj agYECTuABqlIKYqpviud1KEu2pvA9tNhLWEOojZkD+ZDEgMCSRpH9IbnB2Q4vY7v tGZCGtXUhckmleXtyJZAGdHjXC/svYrxClLMXaa9NmliHeO59/0dQITBwCoES/BR VGqHbTkPfupTHq0c6JSkEhtRGz5d3e6Ot+b2CfNV78WMTMebVts5lZ+1I+Nq1roZ 17tRjoh0xjoj4aEhBh/WrXW6PCW+UHVTnqlUz45gx3IrZ6SdshpGd+7SVKfmCmlO XaYXMadVgM7RjrZPPtyABtt28u5gqS4= -----END CERTIFICATE-----Generated at Wed Oct 21 10:21:03 2026 by rpki-client