$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/086e574f-3cf8-3bef-ae63-7651e1e09a3f.roa File: 086e574f-3cf8-3bef-ae63-7651e1e09a3f.roa (raw, json) Hash identifier: yGQnmYcMYC8e4RdEZv7uWgLoG5uxp6BlKK9kao/MwQw= Subject key identifier: 0C:D8:60:05:47:1B:72:FE:98:FA:3E:04:3A:A6:60:5E:C1:3F:0C:7B Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584BA39CF9158B2F7992181CA680 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/086e574f-3cf8-3bef-ae63-7651e1e09a3f.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 36445 IP address blocks: 149.248.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f9:15:8b:2f:79:92:18:1c:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=de420e60-e447-4ddc-9750-6ee1d01ec46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0d:04:cb:16:29:41:56:1c:82:93:83:dd:d8: ff:17:7d:69:f9:e3:51:0e:f0:49:f9:14:c9:62:66: 6a:bd:5e:cd:dd:05:d1:5c:33:23:f9:91:16:33:95: 5e:a7:11:f7:36:75:36:f1:b0:9d:49:95:ee:a7:7b: 64:88:c9:de:9e:f8:47:0d:da:92:30:c8:77:29:56: 45:3f:34:78:e9:ed:21:4e:eb:ea:3e:76:cb:da:a0: f3:6e:cc:1f:d9:ea:cb:30:55:d5:65:51:d8:6f:34: c2:55:cc:04:8a:34:d4:32:cc:e2:18:9e:41:51:15: d5:6d:c4:2e:fe:8a:e7:0a:e9:81:b9:94:ed:68:1e: da:b4:ec:dd:6f:d2:69:44:2e:31:a2:8f:fb:6f:f2: 53:8e:b1:97:57:00:ee:9a:48:16:f1:65:aa:d6:5b: 0d:be:3a:a8:a3:cf:4b:a6:55:ca:57:03:f5:74:3c: 48:ae:ec:af:87:9a:12:96:7e:58:9e:a1:32:b0:e2: cc:c3:e2:fc:53:26:50:0c:fb:e6:a1:c7:55:d1:db: 5e:fc:48:44:99:d3:61:35:94:70:f3:5a:4b:93:17: 89:3a:8f:dc:3e:a6:df:ca:28:07:74:3f:19:4d:23: 43:4b:d0:ac:61:2e:a3:34:4d:96:55:ec:88:6b:f6: ec:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D8:60:05:47:1B:72:FE:98:FA:3E:04:3A:A6:60:5E:C1:3F:0C:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/086e574f-3cf8-3bef-ae63-7651e1e09a3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 149.248.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:1d:d2:77:a0:2f:49:e4:18:de:5b:c6:0e:36:d8:b5:06:fc: bf:9f:c0:c1:c0:1f:2c:ee:37:6c:85:1c:d1:eb:e0:9a:24:8c: f8:e2:f1:26:75:95:44:b3:39:8c:78:4f:bc:04:34:3e:e2:02: d6:20:13:61:53:e9:3e:46:8c:dc:82:56:e2:c1:42:e7:84:2a: 30:db:4f:f1:58:87:0b:6b:c4:fb:2e:84:89:76:92:99:d1:00: b0:15:58:29:dc:0c:73:28:52:c7:d2:02:09:15:e7:e7:1c:2a: a4:89:83:03:fe:cf:a1:7d:40:b7:e9:52:47:25:3d:70:89:e7: c3:79:8a:08:76:d4:12:66:9a:ff:71:45:c0:87:15:f0:98:c4: 92:43:f4:6f:76:5f:a8:21:34:51:5a:a0:eb:d5:60:96:03:35: ef:ec:90:bb:87:b3:fb:f0:9f:08:01:c0:5a:d6:06:d1:83:b6: 8f:72:27:42:a3:77:e1:41:82:ba:20:62:5d:34:61:2c:d0:07: 2d:16:de:bf:16:5f:94:11:a1:40:39:58:59:1b:53:a5:be:79: 4e:e0:4e:c7:e4:45:1d:11:9a:58:dc:4e:bc:4c:59:ca:bc:b9: 47:bd:50:85:c1:91:8c:7f:93:c0:25:20:18:46:72:a8:d8:40: 55:bf:7d:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPkViy95khgcpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZGU0MjBlNjAtZTQ0Ny00ZGRjLTk3NTAtNmVlMWQwMWVjNDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA0EyxYpQVYcgpOD3dj/F31p+eNRDvBJ+RTJ YmZqvV7N3QXRXDMj+ZEWM5VepxH3NnU28bCdSZXup3tkiMnenvhHDdqSMMh3KVZF PzR46e0hTuvqPnbL2qDzbswf2erLMFXVZVHYbzTCVcwEijTUMsziGJ5BURXVbcQu /ornCumBuZTtaB7atOzdb9JpRC4xoo/7b/JTjrGXVwDumkgW8WWq1lsNvjqoo89L plXKVwP1dDxIruyvh5oSln5YnqEysOLMw+L8UyZQDPvmocdV0dte/EhEmdNhNZRw 81pLkxeJOo/cPqbfyigHdD8ZTSNDS9CsYS6jNE2WVeyIa/bsdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzYYAVHG3L+mPo+BDqmYF7BPwx7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvMDg2ZTU3NGYtM2NmOC0z YmVmLWFlNjMtNzY1MWUxZTA5YTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClfhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMUd0negL0nkGN5bxg422LUG/L+fwMHAHyzuN2yFHNHr4JokjPji8SZ1 lUSzOYx4T7wEND7iAtYgE2FT6T5GjNyCVuLBQueEKjDbT/FYhwtrxPsuhIl2kpnR ALAVWCncDHMoUsfSAgkV5+ccKqSJgwP+z6F9QLfpUkclPXCJ58N5igh21BJmmv9x RcCHFfCYxJJD9G92X6ghNFFaoOvVYJYDNe/skLuHs/vwnwgBwFrWBtGDto9yJ0Kj d+FBgrogYl00YSzQBy0W3r8WX5QRoUA5WFkbU6W+eU7gTsfkRR0RmljcTrxMWcq8 uUe9UIXBkYx/k8AlIBhGcqjYQFW/fVg= -----END CERTIFICATE-----Generated at Wed Nov 5 13:18:00 2025 by rpki-client