$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c31cdc41-f023-34ff-922b-23c50777aff0.roa File: c31cdc41-f023-34ff-922b-23c50777aff0.roa (raw, json) Hash identifier: PUmU8HMQPtt9slGqxpIoPLV2padnPLPOeMYlVH2J9Uo= Subject key identifier: F0:AD:64:FD:54:55:AE:24:95:77:44:17:68:30:BA:3C:4C:35:F7:03 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584B36BC4FD0E8FBA960E28F81C0 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c31cdc41-f023-34ff-922b-23c50777aff0.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 3738 IP address blocks: 192.250.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:4f:d0:e8:fb:a9:60:e2:8f:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=a4d523d2-13b2-4660-bb7f-6ab6e2bbecfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b2:45:2c:4d:fe:f1:9e:63:1b:aa:15:f8:27: 46:94:ec:3b:d1:ab:7f:24:dd:28:43:66:56:59:53: 49:f1:1f:5e:08:34:7d:82:be:f3:90:25:8a:9c:9d: f5:8f:6c:5e:c7:f7:dd:75:7e:86:a4:5e:83:00:c3: 5d:9e:b2:a4:9c:b2:6e:b2:7a:30:ed:00:92:79:15: 77:81:91:27:0a:30:69:7e:ec:fc:af:6b:d5:3f:ba: a1:c5:c7:04:25:94:16:df:ed:36:47:77:e9:69:aa: ec:9d:0e:8d:20:13:d7:83:32:43:66:9f:7c:b9:04: e0:df:e7:e1:09:e0:66:f7:2e:7e:9a:20:b7:e7:ee: 9c:0a:05:9e:01:6d:3e:ee:1a:72:19:23:71:98:fd: f6:b9:5a:4c:c3:85:8d:dc:0f:83:8f:dc:73:f7:10: 3e:4d:a2:b8:9a:3e:e6:a2:fb:d7:df:4f:3a:dc:c5: 92:82:5f:68:0d:70:b0:e6:7e:f6:52:bc:fe:10:c7: 08:a3:88:39:95:24:13:26:0e:1f:ef:c8:32:ad:74: cb:bc:e4:76:93:31:a2:54:a2:b0:87:09:28:d5:63: 87:c3:bc:de:60:1c:66:6c:4a:5c:d6:23:44:e1:db: 01:16:d8:f3:e0:33:d7:e6:07:3d:83:e9:31:5c:98: ff:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:AD:64:FD:54:55:AE:24:95:77:44:17:68:30:BA:3C:4C:35:F7:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c31cdc41-f023-34ff-922b-23c50777aff0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:9f:94:d8:78:a2:df:cb:f7:fa:3b:54:70:61:5f:53:98:46: 54:88:de:03:92:76:22:ed:2b:b6:c6:10:e7:65:92:7f:93:d5: a4:00:35:83:0b:35:d6:6b:e8:0f:e9:7f:83:ca:0a:25:54:95: 99:ee:5e:f2:da:98:6c:52:3c:fd:ef:66:66:03:14:bd:8e:9f: 6d:15:01:97:c7:10:b0:2b:93:d0:c3:df:b3:5f:2e:ca:1d:91: d9:fe:16:d7:f2:0e:db:35:68:27:9e:52:1c:68:a2:69:2a:a0: 1f:9b:e2:77:0b:70:b4:df:d1:b2:22:96:36:03:30:43:49:73: 76:4c:c6:28:48:82:3c:2d:22:ce:48:35:f7:99:1a:82:14:75: d6:67:de:1b:c9:82:eb:f5:ae:88:23:5c:e9:1d:87:43:b7:2b: a1:1c:c9:23:37:1a:80:84:b8:4a:18:84:de:7d:0e:39:cd:10: 3a:b4:09:bf:e0:90:32:96:06:e8:cd:30:d0:b5:61:40:18:0a: ce:05:2c:53:b4:20:3d:3e:eb:d4:6a:28:a0:a8:7d:14:09:81: f1:3b:62:ed:02:2f:0f:2d:a2:56:02:ac:03:a9:31:f9:4f:3f: cb:42:f8:b2:79:0e:0c:2e:3d:5a:99:66:00:cb:87:46:4a:57: 3a:b8:c1:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vE/Q6PupYOKPgcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk YTRkNTIzZDItMTNiMi00NjYwLWJiN2YtNmFiNmUyYmJlY2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbJFLE3+8Z5jG6oV+CdGlOw70at/JN0oQ2ZW WVNJ8R9eCDR9gr7zkCWKnJ31j2xex/fddX6GpF6DAMNdnrKknLJusnow7QCSeRV3 gZEnCjBpfuz8r2vVP7qhxccEJZQW3+02R3fpaarsnQ6NIBPXgzJDZp98uQTg3+fh CeBm9y5+miC35+6cCgWeAW0+7hpyGSNxmP32uVpMw4WN3A+Dj9xz9xA+TaK4mj7m ovvX30863MWSgl9oDXCw5n72Urz+EMcIo4g5lSQTJg4f78gyrXTLvOR2kzGiVKKw hwko1WOHw7zeYBxmbEpc1iNE4dsBFtjz4DPX5gc9g+kxXJj/cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCtZP1UVa4klXdEF2gwujxMNfcDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYzMxY2RjNDEtZjAyMy0z NGZmLTkyMmItMjNjNTA3NzdhZmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWflNh4ot/L9/o7VHBhX1OYRlSI3gOSdiLtK7bGEOdlkn+T1aQANYML NdZr6A/pf4PKCiVUlZnuXvLamGxSPP3vZmYDFL2On20VAZfHELArk9DD37NfLsod kdn+FtfyDts1aCeeUhxoomkqoB+b4ncLcLTf0bIiljYDMENJc3ZMxihIgjwtIs5I NfeZGoIUddZn3hvJguv1rogjXOkdh0O3K6EcySM3GoCEuEoYhN59DjnNEDq0Cb/g kDKWBujNMNC1YUAYCs4FLFO0ID0+69RqKKCofRQJgfE7Yu0CLw8tolYCrAOpMflP P8tC+LJ5DgwuPVqZZgDLh0ZKVzq4wa4= -----END CERTIFICATE-----Generated at Wed Sep 17 01:06:04 2025 by rpki-client