$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/086e574f-3cf8-3bef-ae63-7651e1e09a3f.roa File: 086e574f-3cf8-3bef-ae63-7651e1e09a3f.roa (raw, json) Hash identifier: LIGv2++0vvAjl2GHgR+SpUPdy3Mh2Gh36j1w3j6p4sI= Subject key identifier: 10:A0:6B:AF:AA:C8:F2:D7:FA:E7:3A:D0:60:8B:26:A4:87:7D:C2:79 Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584C8476C26DF6275B87E910A000 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/086e574f-3cf8-3bef-ae63-7651e1e09a3f.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 36445 IP address blocks: 149.248.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:c2:6d:f6:27:5b:87:e9:10:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=3ce0d7f3-199e-4246-a013-097be9ead6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d2:c5:0d:2a:ff:4b:f7:08:a8:b7:d7:19:5d: 4f:0d:91:90:67:9d:80:a6:96:9d:be:86:2b:6c:47: 03:49:52:5d:47:0a:54:1a:30:e4:61:00:43:54:f5: ee:5c:61:6e:20:66:cd:21:d3:0a:48:c1:70:b7:9e: dd:a1:24:ae:66:ed:e6:80:7b:e2:d1:b0:84:8d:c1: 26:2c:59:19:21:e2:7a:27:7f:68:3c:54:b1:2b:17: 01:03:4c:ca:c6:aa:85:45:2d:a4:0c:99:cc:31:35: 54:dc:5d:5e:f3:53:fe:ee:f4:95:dd:cd:61:61:68: bd:dc:09:65:8e:3e:f6:ac:11:e1:e3:1d:cd:f1:2e: 57:f9:19:6d:6d:25:f6:99:48:f2:ab:61:93:8e:ce: e9:84:7c:18:81:58:ab:2e:36:f3:c2:61:77:05:9c: 16:ea:42:b8:4f:5d:db:83:22:36:24:42:56:1a:a0: 64:c4:da:92:15:23:8e:75:8d:dd:c2:9a:e0:a3:f1: 82:92:46:52:66:22:5c:87:0d:57:c5:83:ca:bc:5b: 7c:c5:4e:e5:14:7e:81:4a:07:f5:25:90:7d:ea:1b: d7:0a:50:06:2b:b2:e3:85:7c:d4:a2:ce:4f:c5:c8: db:37:02:0a:3e:d2:f1:21:b1:70:1d:89:57:36:1d: 35:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A0:6B:AF:AA:C8:F2:D7:FA:E7:3A:D0:60:8B:26:A4:87:7D:C2:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/086e574f-3cf8-3bef-ae63-7651e1e09a3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 149.248.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:f3:db:d6:1a:36:e3:4a:4c:fc:1c:88:35:98:b5:96:89:73: 00:66:18:f4:c2:0d:70:d3:bc:68:14:3d:d8:b5:ba:91:33:93: 27:b4:b2:c7:38:3b:e0:eb:34:27:3f:cc:85:6e:dd:04:7f:1b: 23:cd:ed:5f:4d:de:ab:d5:c9:b1:87:50:8c:27:1a:4e:ea:f7: 96:29:b8:8e:78:a5:c1:04:6a:83:70:9b:bd:45:0e:4e:4b:a4: 88:cc:6f:cb:e8:68:42:2e:0d:9c:72:4a:48:0c:78:ac:71:dd: 00:e4:4d:4e:60:3e:5c:1b:69:c9:7f:44:35:d1:94:c7:c8:b1: 88:85:97:7e:2a:50:f4:8a:b0:e6:15:d3:42:c7:af:ea:dd:90: ec:18:fe:00:93:58:d0:df:52:c1:6f:82:d2:af:70:25:f1:c3: c0:fc:b4:ae:61:26:56:0c:b9:e2:41:21:37:6b:d5:e3:80:b3: 0f:9e:46:28:fa:cd:70:8b:1d:5b:9e:ee:0d:e6:cf:ca:46:09: 88:93:e7:02:df:e6:46:0e:56:69:11:d4:9a:ad:2a:a6:20:33: b7:1c:2e:69:ae:66:61:e7:1b:7e:f8:0a:46:4d:c2:0c:95:62: 25:54:6e:e8:f4:ed:30:f2:95:29:fa:7c:66:c6:f3:1e:03:56: 65:6c:ad:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdsJt9idbh+kQoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk M2NlMGQ3ZjMtMTk5ZS00MjQ2LWEwMTMtMDk3YmU5ZWFkNmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09LFDSr/S/cIqLfXGV1PDZGQZ52AppadvoYr bEcDSVJdRwpUGjDkYQBDVPXuXGFuIGbNIdMKSMFwt57doSSuZu3mgHvi0bCEjcEm LFkZIeJ6J39oPFSxKxcBA0zKxqqFRS2kDJnMMTVU3F1e81P+7vSV3c1hYWi93All jj72rBHh4x3N8S5X+RltbSX2mUjyq2GTjs7phHwYgVirLjbzwmF3BZwW6kK4T13b gyI2JEJWGqBkxNqSFSOOdY3dwprgo/GCkkZSZiJchw1XxYPKvFt8xU7lFH6BSgf1 JZB96hvXClAGK7LjhXzUos5PxcjbNwIKPtLxIbFwHYlXNh01rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCga6+qyPLX+uc60GCLJqSHfcJ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvMDg2ZTU3NGYtM2NmOC0z YmVmLWFlNjMtNzY1MWUxZTA5YTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClfhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzz29YaNuNKTPwciDWYtZaJcwBmGPTCDXDTvGgUPdi1upEzkye0ssc4 O+DrNCc/zIVu3QR/GyPN7V9N3qvVybGHUIwnGk7q95YpuI54pcEEaoNwm71FDk5L pIjMb8voaEIuDZxySkgMeKxx3QDkTU5gPlwbacl/RDXRlMfIsYiFl34qUPSKsOYV 00LHr+rdkOwY/gCTWNDfUsFvgtKvcCXxw8D8tK5hJlYMueJBITdr1eOAsw+eRij6 zXCLHVue7g3mz8pGCYiT5wLf5kYOVmkR1JqtKqYgM7ccLmmuZmHnG374CkZNwgyV YiVUbuj07TDylSn6fGbG8x4DVmVsrdI= -----END CERTIFICATE-----Generated at Mon Mar 2 16:28:41 2026 by rpki-client