$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6b42c307-dd20-3ba7-92b8-55e8a7e39301.roa File: 6b42c307-dd20-3ba7-92b8-55e8a7e39301.roa (raw, json) Hash identifier: 2axZMgQlnLaOP1m5D8RCPF9fIo7JLldRbASH0+C7fUg= Subject key identifier: 07:99:3C:43:1B:B7:F8:26:5B:1A:49:EA:BD:3D:4A:DD:3B:2E:5D:14 Certificate issuer: /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Certificate serial: 010D0C9F4328584BB2F830E0F7668061F971D200 Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6b42c307-dd20-3ba7-92b8-55e8a7e39301.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 149.112.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f8:30:e0:f7:66:80:61:f9:71:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=3c56da6d-0cf6-4ebd-8d5e-2a085cb5b33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:59:69:d4:89:59:95:6c:34:e7:29:cf:97:f0: ef:a6:9a:a5:5b:d8:fc:81:26:0f:66:0f:96:47:96: 60:fc:b1:11:e0:83:13:48:3f:d1:cd:3d:27:d4:04: 06:51:69:82:b8:f7:bd:96:e0:be:d5:6c:e7:ca:d5: 57:1b:6c:4a:7f:43:a9:bd:b5:db:b7:02:93:a7:0b: de:a4:46:6b:9d:b0:5b:8b:04:fa:8f:83:a3:cb:05: 6e:d4:57:d5:e1:42:e6:fb:ff:f7:2e:f4:a0:f3:78: 83:10:6a:1c:df:95:8c:66:89:3d:bb:1f:79:92:be: 10:6d:da:ce:61:45:03:03:0d:c6:17:56:d0:89:59: b5:9f:96:b1:d8:83:c1:a4:70:f3:2d:5f:28:a2:b7: fd:a1:78:c9:58:e1:c9:7b:7c:52:60:5a:08:04:d6: 3a:28:e2:a8:49:8c:0b:ac:2a:2e:a6:74:94:02:1b: d5:2d:83:31:b2:e4:49:ab:3c:d8:21:53:12:9c:4e: 27:70:e3:d7:a8:ed:19:f7:40:e6:9c:2e:42:d3:9f: 44:b9:88:b7:7c:c4:7b:43:05:f9:9f:39:26:77:e9: 77:46:c3:37:12:92:8f:18:c4:e5:ff:9b:81:a3:f7: ff:25:04:09:21:70:4b:bf:de:62:bb:38:57:33:33: ec:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:99:3C:43:1B:B7:F8:26:5B:1A:49:EA:BD:3D:4A:DD:3B:2E:5D:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6b42c307-dd20-3ba7-92b8-55e8a7e39301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl X509v3 Authority Key Identifier: keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer sbgp-ipAddrBlock: critical IPv4: 149.112.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:3e:37:f2:5b:bb:6e:8e:b5:11:b2:a9:87:e4:7e:07:61:90: 39:e9:ea:8f:3a:79:24:95:0e:b8:1d:c3:b5:f2:0c:17:8b:dc: 3d:6b:7d:82:34:ac:53:ae:16:c1:5f:6c:70:9f:a5:e2:14:84: f7:3a:2e:f0:22:81:ff:e3:42:8f:e2:c5:28:19:f4:82:ee:0d: f3:ff:7a:b1:4d:ca:12:ba:86:5a:41:f2:b5:30:2e:c8:76:48: 26:cf:e9:cc:e2:f3:f3:d9:90:60:22:2f:f6:0e:58:e8:eb:18: 21:fd:f1:66:dd:17:a4:de:41:63:30:69:33:4e:fd:79:8e:12: be:f5:ad:11:43:cf:02:12:3c:71:f7:d4:92:d6:72:d5:60:ea: c1:ff:18:5b:bd:44:1a:79:39:fe:c9:b0:18:59:71:4f:6e:60: a7:70:67:34:6f:79:d9:d5:35:1e:14:a9:8a:0c:13:b0:56:23: 4e:9c:9b:89:bc:eb:2a:09:27:e8:67:1c:cf:00:f2:e4:e4:61: 85:44:aa:f5:2e:8e:12:2b:0b:ff:47:64:5d:82:97:76:47:43: d0:55:73:73:28:0d:6f:c5:85:10:87:5c:0d:cc:58:97:3a:88: 0a:79:e7:55:d8:04:20:2a:89:fe:c2:51:d4:d4:7e:2c:67:ca: 8f:3e:5b:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy+DDg92aAYflx0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy MmQ2MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk M2M1NmRhNmQtMGNmNi00ZWJkLThkNWUtMmEwODVjYjViMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVlp1IlZlWw05ynPl/DvppqlW9j8gSYPZg+W R5Zg/LER4IMTSD/RzT0n1AQGUWmCuPe9luC+1WznytVXG2xKf0OpvbXbtwKTpwve pEZrnbBbiwT6j4OjywVu1FfV4ULm+//3LvSg83iDEGoc35WMZok9ux95kr4QbdrO YUUDAw3GF1bQiVm1n5ax2IPBpHDzLV8oorf9oXjJWOHJe3xSYFoIBNY6KOKoSYwL rCoupnSUAhvVLYMxsuRJqzzYIVMSnE4ncOPXqO0Z90DmnC5C059EuYi3fMR7QwX5 nzkmd+l3RsM3EpKPGMTl/5uBo/f/JQQJIXBLv95iuzhXMzPs5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeZPEMbt/gmWxpJ6r09St07Ll0UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2 NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvNmI0MmMzMDctZGQyMC0z YmE3LTkyYjgtNTVlOGE3ZTM5MzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1 MGQ5MDIyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXBFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIU+N/Jbu26OtRGyqYfkfgdhkDnp6o86eSSVDrgdw7XyDBeL3D1rfYI0 rFOuFsFfbHCfpeIUhPc6LvAigf/jQo/ixSgZ9ILuDfP/erFNyhK6hlpB8rUwLsh2 SCbP6czi8/PZkGAiL/YOWOjrGCH98WbdF6TeQWMwaTNO/XmOEr71rRFDzwISPHH3 1JLWctVg6sH/GFu9RBp5Of7JsBhZcU9uYKdwZzRvednVNR4UqYoME7BWI06cm4m8 6yoJJ+hnHM8A8uTkYYVEqvUujhIrC/9HZF2Cl3ZHQ9BVc3MoDW/FhRCHXA3MWJc6 iAp551XYBCAqif7CUdTUfixnyo8+Wy8= -----END CERTIFICATE-----Generated at Wed Nov 5 01:44:58 2025 by rpki-client