$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c8093db6-db1b-33e7-8501-039e28445968.roa File: c8093db6-db1b-33e7-8501-039e28445968.roa (raw, json) Hash identifier: XxK+JMxrnNZHBxRxwy3oC3T+fFWGoAjeB5b4a08vqG8= Subject key identifier: D0:9B:62:FA:99:3C:CE:52:0A:D0:EC:13:E3:55:0D:B3:2F:E8:4A:C3 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584B36BC4FBA2C79452BDB241680 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c8093db6-db1b-33e7-8501-039e28445968.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 3738 IP address blocks: 192.250.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:4f:ba:2c:79:45:2b:db:24:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=8532d26f-09d7-4621-b50c-42d15f80f985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ff:f9:e4:49:3e:ca:e2:e4:dc:c8:66:d5:1f: 79:48:e9:92:35:9b:16:39:20:95:9f:dc:87:39:c2: d2:9c:c8:7c:e5:10:b8:8c:df:f6:45:7a:fd:a3:dc: 83:b5:a9:72:4f:a1:bc:70:50:9a:2e:f3:45:ec:d3: 80:ed:f4:c5:3c:65:96:14:35:46:a9:e9:0e:5b:83: f2:0b:2d:79:eb:ab:cd:91:f4:54:6c:8c:9e:96:c0: 5a:1c:b7:4d:f9:fb:dd:7a:5e:df:cc:af:80:05:fd: fd:d8:97:bf:04:ca:80:4f:11:dc:fc:b7:ce:3e:74: 4f:16:2f:e2:47:0b:81:02:a0:c6:49:b8:07:fd:95: 26:8d:fa:3f:94:97:ba:19:88:79:4d:a8:ae:b5:a0: 01:df:19:a3:cc:f9:64:74:9e:d1:76:e0:de:ef:52: 5f:b7:be:2f:14:e6:98:d6:53:1d:c7:90:56:01:ee: 2f:6f:e4:13:96:e9:f0:e7:a3:91:55:ba:26:f1:b9: 4f:c8:0c:a9:a1:bb:6d:bc:8c:cd:48:61:cf:fb:8f: b5:6a:52:c0:48:30:6f:55:01:d5:87:7d:93:5b:94: 15:c0:67:4c:56:0a:01:78:ba:96:9c:7b:88:a6:38: 3d:22:c1:4c:16:47:be:7b:04:33:82:4e:62:b0:36: db:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9B:62:FA:99:3C:CE:52:0A:D0:EC:13:E3:55:0D:B3:2F:E8:4A:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c8093db6-db1b-33e7-8501-039e28445968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:39:5e:56:9d:21:23:eb:6d:a1:6a:57:be:9f:05:03:43:87: 56:15:8d:e5:7d:ba:2c:cc:fc:09:6f:f4:ee:7e:07:57:1e:c9: eb:83:1a:99:65:3b:ed:68:66:c8:60:4e:49:36:aa:24:3f:3d: ed:c0:7a:e9:f1:2b:3b:f0:31:74:83:69:96:cc:1b:78:1b:81: 6e:09:b9:5d:02:19:7f:3a:76:f2:98:e0:6b:65:ea:2b:23:58: 6f:d1:4c:1e:1f:dc:89:30:2e:a4:a1:5d:d5:5a:37:51:f5:b5: 31:cc:46:f5:ff:06:ad:c5:60:19:fc:1a:7c:bc:f3:b4:5f:ed: b2:c4:ec:90:bd:cd:d7:0a:00:9f:ff:05:a0:5c:4d:e5:cf:53: 9e:05:57:85:ef:a8:d8:8c:8e:79:1a:d4:bb:9d:c1:9a:33:06: e5:08:24:b5:d6:76:1d:01:96:3e:86:4c:02:b1:f0:bd:a5:09: e5:cf:0a:53:a7:be:1e:ec:d2:0d:3c:51:9f:62:3a:28:ab:24: dc:84:cd:c4:33:07:57:59:af:ce:1f:bb:8e:14:51:2a:17:5c: be:96:58:1d:24:2c:8c:61:31:a0:42:e8:20:98:07:13:d0:5d: 7f:ea:2a:9a:cd:53:cd:27:93:08:83:f3:5e:00:5e:06:99:8b: e9:84:51:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vE+6LHlFK9skFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk ODUzMmQyNmYtMDlkNy00NjIxLWI1MGMtNDJkMTVmODBmOTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArP/55Ek+yuLk3Mhm1R95SOmSNZsWOSCVn9yH OcLSnMh85RC4jN/2RXr9o9yDtalyT6G8cFCaLvNF7NOA7fTFPGWWFDVGqekOW4Py Cy1566vNkfRUbIyelsBaHLdN+fvdel7fzK+ABf392Je/BMqATxHc/LfOPnRPFi/i RwuBAqDGSbgH/ZUmjfo/lJe6GYh5TaiutaAB3xmjzPlkdJ7RduDe71Jft74vFOaY 1lMdx5BWAe4vb+QTlunw56ORVbom8blPyAypobttvIzNSGHP+4+1alLASDBvVQHV h32TW5QVwGdMVgoBeLqWnHuIpjg9IsFMFke+ewQzgk5isDbbPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCbYvqZPM5SCtDsE+NVDbMv6ErDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvYzgwOTNkYjYtZGIxYi0z M2U3LTg1MDEtMDM5ZTI4NDQ1OTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPprMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFs5XladISPrbaFqV76fBQNDh1YVjeV9uizM/Alv9O5+B1ceyeuDGpll O+1oZshgTkk2qiQ/Pe3AeunxKzvwMXSDaZbMG3gbgW4JuV0CGX86dvKY4Gtl6isj WG/RTB4f3IkwLqShXdVaN1H1tTHMRvX/Bq3FYBn8Gny887Rf7bLE7JC9zdcKAJ// BaBcTeXPU54FV4XvqNiMjnka1LudwZozBuUIJLXWdh0Blj6GTAKx8L2lCeXPClOn vh7s0g08UZ9iOiirJNyEzcQzB1dZr84fu44UUSoXXL6WWB0kLIxhMaBC6CCYBxPQ XX/qKprNU80nkwiD814AXgaZi+mEUTk= -----END CERTIFICATE-----Generated at Wed Sep 17 01:03:23 2025 by rpki-client