$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa File: dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa (raw, json) Hash identifier: nm8y0GGfHbkrYV866a+ImWl9hSPzHQb7uQQbOSzvx0g= Subject key identifier: A3:40:9A:B4:51:8C:04:77:05:10:C5:59:59:59:7C:26:54:92:AE:86 Certificate issuer: /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Certificate serial: 010D0C9F4328584F49767C482D9AEDEEC68B5B80 Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3738 IP address blocks: 192.250.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:7c:48:2d:9a:ed:ee:c6:8b:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f64dde98-e6c8-4771-8bc8-96d7ec650ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:98:3f:ef:b2:4c:5c:a6:0b:c8:2c:30:04:6a: a8:19:3d:be:ac:16:85:a9:08:6f:69:0b:06:cc:80: b3:0f:0a:c0:fb:b4:d4:5b:cf:74:90:e2:a7:65:db: ee:86:ed:b8:c6:ef:c7:e5:44:90:40:15:4e:4e:43: ee:10:51:66:ac:6f:53:f1:d1:0d:5a:68:6b:3e:74: 66:3e:ef:3a:a0:af:f3:41:66:3a:63:e9:18:08:42: ec:4e:ca:26:51:dc:b1:d5:2a:5e:e3:58:45:1a:2f: 5e:2a:b8:41:eb:de:a1:36:91:2c:1b:75:52:a1:64: 7b:e7:60:53:2e:df:76:f1:60:63:6d:e3:8f:02:0b: b0:b3:43:e7:84:d4:c3:39:98:61:ef:32:cd:1c:6a: 08:07:18:54:83:b7:84:12:03:72:05:66:a0:80:72: db:a3:0d:e9:f5:c8:10:72:01:1c:d6:21:c2:2e:a2: 82:a6:bc:f6:e4:88:e2:5b:27:f2:46:e2:77:9c:cf: 0e:df:2b:91:b1:40:9e:a9:70:37:85:a4:b5:fe:ec: 21:78:e5:72:24:1f:88:6b:3f:2f:f2:cf:43:77:65: 5c:09:68:ff:7f:3d:19:ef:29:35:ef:19:bc:9a:44: e8:88:57:94:c2:45:4a:ca:4c:7f:b8:ea:eb:7e:48: ad:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:40:9A:B4:51:8C:04:77:05:10:C5:59:59:59:7C:26:54:92:AE:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/dd3e0844-33f9-3add-b4fe-106232fa4bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl X509v3 Authority Key Identifier: keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer sbgp-ipAddrBlock: critical IPv4: 192.250.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:35:e6:9a:e0:a4:5f:1a:78:c7:ab:16:26:1f:5b:23:dc:e9: 29:66:6b:15:08:38:0a:75:80:d4:4a:f5:54:e7:d7:57:27:70: e9:39:1a:6f:76:53:e2:92:0d:13:60:7a:fb:8f:65:c9:d3:8a: 2b:88:d7:4c:f4:6d:d7:27:d0:87:ca:98:44:d0:03:4e:5a:a1: 72:58:11:b2:57:fa:57:0a:be:2a:2d:58:7a:76:af:61:00:ac: 5d:3e:a3:77:9b:d6:8c:64:21:c8:28:3b:bc:96:92:5e:e8:26: 28:3f:93:6d:3b:81:64:6d:1e:ac:4c:96:d3:c2:ca:86:28:b2: 44:86:ac:46:8b:28:82:54:7f:a7:5a:9a:bc:13:01:bd:21:6e: 2d:16:46:cd:ea:85:97:27:34:17:e6:ae:a4:55:00:a0:be:fc: b6:7c:00:3a:d0:5b:a1:2c:47:91:08:21:19:38:37:dd:db:d6: e7:c8:5e:77:df:cb:0e:b0:8c:90:25:96:dd:13:10:77:fa:3d: 62:2d:68:3b:78:8d:e7:8a:01:c6:50:05:2b:df:0e:0d:6c:da: 9f:6d:4c:d2:69:25:30:6b:43:0b:c9:f4:27:cf:da:03:6d:ce: 02:10:7f:5c:78:2a:30:a4:3d:7c:3a:b1:fb:de:5a:53:c5:57: 94:e9:b0:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdnxILZrt7saLW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJiYzAxMGUtYTNmNy00ZjZlLTlkNmMtZGFlNTVhNjhl YzAwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjY0ZGRlOTgtZTZjOC00NzcxLThiYzgtOTZkN2VjNjUwZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5g/77JMXKYLyCwwBGqoGT2+rBaFqQhvaQsG zICzDwrA+7TUW890kOKnZdvuhu24xu/H5USQQBVOTkPuEFFmrG9T8dENWmhrPnRm Pu86oK/zQWY6Y+kYCELsTsomUdyx1Spe41hFGi9eKrhB696hNpEsG3VSoWR752BT Lt928WBjbeOPAguws0PnhNTDOZhh7zLNHGoIBxhUg7eEEgNyBWaggHLbow3p9cgQ cgEc1iHCLqKCprz25IjiWyfyRuJ3nM8O3yuRsUCeqXA3haS1/uwheOVyJB+Iaz8v 8s9Dd2VcCWj/fz0Z7yk17xm8mkToiFeUwkVKykx/uOrrfkit6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNAmrRRjAR3BRDFWVlZfCZUkq6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmJj MDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1NWE2OGVjMDAvZGQzZTA4NDQtMzNmOS0z YWRkLWI0ZmUtMTA2MjMyZmE0YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJiYzAxMGUtYTNmNy00ZjZlLTlk NmMtZGFlNTVhNjhlYzAwLzZiYmMwMTBlLWEzZjctNGY2ZS05ZDZjLWRhZTU1YTY4 ZWMwMC5jcmwwHwYDVR0jBBgwFoAUhxTlRfZtXIg9hkvY4UwQsXZEEycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmJjMDEwZS1hM2Y3LTRmNmUtOWQ2Yy1kYWU1 NWE2OGVjMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPqWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALA15prgpF8aeMerFiYfWyPc6SlmaxUIOAp1gNRK9VTn11cncOk5Gm92 U+KSDRNgevuPZcnTiiuI10z0bdcn0IfKmETQA05aoXJYEbJX+lcKviotWHp2r2EA rF0+o3eb1oxkIcgoO7yWkl7oJig/k207gWRtHqxMltPCyoYoskSGrEaLKIJUf6da mrwTAb0hbi0WRs3qhZcnNBfmrqRVAKC+/LZ8ADrQW6EsR5EIIRk4N93b1ufIXnff yw6wjJAllt0TEHf6PWItaDt4jeeKAcZQBSvfDg1s2p9tTNJpJTBrQwvJ9CfP2gNt zgIQf1x4KjCkPXw6sfveWlPFV5TpsPU= -----END CERTIFICATE-----Generated at Tue Oct 20 07:55:45 2026 by rpki-client