$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/aa34a1b8-17aa-3936-9d5d-2616f7f84894.roa File: aa34a1b8-17aa-3936-9d5d-2616f7f84894.roa (raw, json) Hash identifier: 5QVPysGS9Go28fhFfUj3EjTVRn8fYSSAbCuz0S4kST8= Subject key identifier: 1C:22:CB:8E:57:D0:1B:B4:40:C7:18:66:34:01:C6:A4:AB:B6:1C:AF Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584F4DA3C9AEF77AB1BD70272140 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/aa34a1b8-17aa-3936-9d5d-2616f7f84894.roa Signing time: Sat 26 Sep 2026 13:02:42 +0000 ROA not before: Sat 26 Sep 2026 13:02:42 +0000 ROA not after: Fri 25 Dec 2026 14:02:42 +0000 asID: 40687 IP address blocks: 192.250.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:a3:c9:ae:f7:7a:b1:bd:70:27:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 26 13:02:42 2026 GMT Not After : Dec 25 14:02:42 2026 GMT Subject: CN=5f57f5b9-7ff9-4300-863f-8c89ac379705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:90:12:4b:31:67:3a:01:3c:ce:19:eb:c4:d0: 62:76:70:13:2e:b7:46:bc:13:af:20:10:a2:09:13: 0f:37:3e:a7:b0:36:de:8f:44:38:7e:45:b1:4a:54: e9:10:32:24:6a:35:d2:cb:9f:39:14:be:1c:f5:c2: f6:11:17:67:48:f9:85:65:6a:04:30:2f:a7:46:d8: ab:69:0d:9b:20:b4:cf:c0:26:d9:2e:ff:e7:7f:d0: b9:87:9f:92:65:d0:39:d9:70:0b:50:48:96:83:c4: ca:bc:48:3c:26:1e:f7:92:3e:0b:78:fb:cd:34:20: 9b:ca:13:37:4e:62:35:59:12:80:64:9b:49:19:5d: b2:4c:e5:82:00:9a:5d:7a:8d:54:04:92:52:f3:9e: c1:fc:0e:36:1b:cb:f0:c4:8c:9f:ac:7e:ca:c7:9e: 52:e6:88:d2:0d:00:8c:62:83:51:21:38:5f:88:a7: 7f:98:68:66:67:35:f5:72:2b:ac:fb:74:0e:be:77: a4:f7:5e:eb:cb:78:57:03:cc:6e:59:95:ff:a2:3a: d5:c8:87:29:98:2b:23:4b:87:0f:7f:a2:35:7d:a6: 21:41:f3:56:11:3a:fe:10:86:8b:e2:23:28:2c:69: f6:5a:69:71:8c:87:14:db:17:31:9d:26:75:eb:ea: 84:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:22:CB:8E:57:D0:1B:B4:40:C7:18:66:34:01:C6:A4:AB:B6:1C:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/aa34a1b8-17aa-3936-9d5d-2616f7f84894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:26:d7:dc:76:57:8e:ee:4c:7e:63:33:77:46:76:af:d4:9a: 28:a7:cc:6e:61:1f:5e:b6:e1:19:69:82:71:09:cf:f6:56:3a: 8e:76:e7:34:9d:ef:43:c1:88:a1:ac:26:6c:db:5c:e5:fe:51: 82:77:5e:5a:85:6a:c5:a6:75:24:f1:f0:9e:30:a1:69:ff:4c: 3b:46:52:99:63:2d:88:02:80:3d:7a:cb:8b:24:54:57:54:5a: 29:a0:87:a8:cf:6c:87:80:e4:12:ad:f2:4e:95:c9:40:84:75: df:67:ae:7c:56:b3:7c:3c:e9:6e:63:1a:a4:a5:24:8f:93:e2: 6e:ba:a2:fa:3d:cd:f9:59:9e:42:c8:73:84:de:af:05:10:d9: 53:a1:f3:1b:8e:67:83:53:ed:c8:29:1c:cd:bd:9c:3c:4d:8f: e2:3b:2b:40:ed:61:c8:b0:f1:6e:d1:34:ff:d1:a6:a6:c5:1b: 17:bd:91:97:44:37:67:87:ba:ec:d5:73:25:0c:9d:f6:72:d4: ed:d2:eb:7d:fd:33:09:9b:9c:ac:3f:03:2f:5c:0d:38:6d:d3: 05:a5:b4:4e:a6:f2:95:fe:e7:a5:74:72:28:f3:16:ca:8f:3b: 9c:ef:0a:d4:b7:cf:e9:16:60:f2:70:05:69:01:61:e8:4f:98: 25:ce:6a:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9No8mu93qxvXAnIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDkyNjEzMDI0MloXDTI2MTIyNTE0MDI0MlowLzEtMCsGA1UEAxMk NWY1N2Y1YjktN2ZmOS00MzAwLTg2M2YtOGM4OWFjMzc5NzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZASSzFnOgE8zhnrxNBidnATLrdGvBOvIBCi CRMPNz6nsDbej0Q4fkWxSlTpEDIkajXSy585FL4c9cL2ERdnSPmFZWoEMC+nRtir aQ2bILTPwCbZLv/nf9C5h5+SZdA52XALUEiWg8TKvEg8Jh73kj4LePvNNCCbyhM3 TmI1WRKAZJtJGV2yTOWCAJpdeo1UBJJS857B/A42G8vwxIyfrH7Kx55S5ojSDQCM YoNRIThfiKd/mGhmZzX1cius+3QOvnek917ry3hXA8xuWZX/ojrVyIcpmCsjS4cP f6I1faYhQfNWETr+EIaL4iMoLGn2WmlxjIcU2xcxnSZ16+qEZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwiy45X0Bu0QMcYZjQBxqSrthyvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYWEzNGExYjgtMTdhYS0z OTM2LTlkNWQtMjYxNmY3Zjg0ODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPpdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8m19x2V47uTH5jM3dGdq/UmiinzG5hH1624RlpgnEJz/ZWOo525zSd 70PBiKGsJmzbXOX+UYJ3XlqFasWmdSTx8J4woWn/TDtGUpljLYgCgD16y4skVFdU Wimgh6jPbIeA5BKt8k6VyUCEdd9nrnxWs3w86W5jGqSlJI+T4m66ovo9zflZnkLI c4TerwUQ2VOh8xuOZ4NT7cgpHM29nDxNj+I7K0DtYciw8W7RNP/RpqbFGxe9kZdE N2eHuuzVcyUMnfZy1O3S6339MwmbnKw/Ay9cDTht0wWltE6m8pX+56V0cijzFsqP O5zvCtS3z+kWYPJwBWkBYehPmCXOaiM= -----END CERTIFICATE-----Generated at Tue Oct 20 20:44:03 2026 by rpki-client