$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/294acec0-39de-3a01-a55d-87f7629591d1.roa File: 294acec0-39de-3a01-a55d-87f7629591d1.roa (raw, json) Hash identifier: 1xjFUd7QNtoOKGddYWQsVFM13T1tC/1mcWt8U5hwhEE= Subject key identifier: 32:0C:DD:C5:AC:84:49:A7:BF:C7:BF:DB:97:7A:F6:7A:F9:82:0E:22 Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584AC2E0EB063442CA2EAA6E7CC0 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/294acec0-39de-3a01-a55d-87f7629591d1.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 36445 IP address blocks: 149.248.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:eb:06:34:42:ca:2e:aa:6e:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=3ce40b36-f25d-4246-913a-d648c21c5caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:07:f0:2d:03:8e:82:bf:79:57:7f:bf:88:be: 2b:11:ab:ec:4f:c0:6e:3b:0d:ed:37:9d:ab:29:a8: f2:85:9f:ff:8c:97:14:ba:ee:d6:29:a1:3d:b7:a3: 91:2e:f0:62:fc:17:3b:92:1e:f9:1e:a8:6a:c5:e0: fa:0f:22:19:e9:8c:00:ef:e3:8c:ab:90:1a:f3:f1: 99:49:17:ba:c2:0a:2b:9c:84:a7:3a:a4:bd:1b:b5: 89:88:81:be:c9:4f:2c:3b:64:75:f3:a1:9c:e6:93: cb:93:9e:66:1a:54:0b:d5:e1:5f:36:5c:de:ba:74: 4d:c0:0c:17:fd:93:da:95:b9:76:23:61:f1:25:43: 9d:20:87:71:37:bf:45:8b:92:22:74:62:db:8c:be: 07:c5:c4:74:e5:e1:41:32:ec:ba:fd:68:a9:41:0b: fe:13:c2:25:a9:27:b6:d2:05:a3:db:75:73:d4:77: 6b:a1:62:4f:47:5f:52:4d:d5:c2:d6:de:d4:9e:52: 75:57:fc:a4:ca:4a:02:23:0f:95:d9:9b:36:4a:30: 65:e4:fb:aa:85:c7:53:a4:40:1c:82:2d:1c:c7:ae: 6a:29:47:97:24:11:2d:50:05:8f:23:04:7f:94:81: c6:97:9e:70:5d:2d:47:51:90:94:08:db:26:f4:1c: 97:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0C:DD:C5:AC:84:49:A7:BF:C7:BF:DB:97:7A:F6:7A:F9:82:0E:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/294acec0-39de-3a01-a55d-87f7629591d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 149.248.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:7c:0b:ef:62:97:c7:e5:1f:f0:6e:42:b2:80:ca:18:67:fb: 34:19:18:99:8a:f6:02:93:14:f3:f2:aa:e0:b6:e9:1e:b6:5c: 7d:a2:0b:95:88:2d:41:6e:19:46:c9:d8:1d:34:30:6c:33:7b: 6c:f6:96:0b:92:14:6d:0a:ee:7f:58:f5:c4:47:99:26:3d:d6: 20:bf:36:3b:5d:ac:63:8a:d4:e0:22:e9:d6:60:2a:f6:93:ee: 90:fd:49:6d:80:c0:ca:4f:cf:49:c7:c8:c7:44:9d:ef:3c:15: 08:2c:c5:04:6b:f1:87:43:ff:3d:73:ed:5b:c6:16:f4:ff:68: 89:bc:ac:b0:f8:64:6d:e9:c8:3f:20:51:ae:b4:e2:30:f1:3d: 5b:7a:09:96:44:b7:c5:f2:46:42:da:57:7e:2f:9f:fd:1e:8d: 25:67:37:b9:28:55:41:1f:94:c6:82:b4:cc:e2:df:4b:b7:21: ba:d4:b1:eb:10:d2:38:df:52:ba:7d:b4:c8:53:f3:6a:99:86: c6:06:7a:2f:46:6d:b0:4e:39:39:2d:22:59:d7:a9:bc:3d:cf: b6:4b:05:8a:36:1c:60:fe:c4:3c:68:be:35:09:1c:e2:48:52: d0:5b:e7:1b:19:06:13:60:b7:f8:9f:c3:ee:26:ea:2c:07:b3: 1e:e3:3f:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4OsGNELKLqpufMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk M2NlNDBiMzYtZjI1ZC00MjQ2LTkxM2EtZDY0OGMyMWM1Y2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgfwLQOOgr95V3+/iL4rEavsT8BuOw3tN52r KajyhZ//jJcUuu7WKaE9t6ORLvBi/Bc7kh75HqhqxeD6DyIZ6YwA7+OMq5Aa8/GZ SRe6wgornISnOqS9G7WJiIG+yU8sO2R186Gc5pPLk55mGlQL1eFfNlzeunRNwAwX /ZPalbl2I2HxJUOdIIdxN79Fi5IidGLbjL4HxcR05eFBMuy6/WipQQv+E8IlqSe2 0gWj23Vz1HdroWJPR19STdXC1t7UnlJ1V/ykykoCIw+V2Zs2SjBl5PuqhcdTpEAc gi0cx65qKUeXJBEtUAWPIwR/lIHGl55wXS1HUZCUCNsm9ByXFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIM3cWshEmnv8e/25d69nr5gg4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvMjk0YWNlYzAtMzlkZS0z YTAxLWE1NWQtODdmNzYyOTU5MWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlfh3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA98C+9il8flH/BuQrKAyhhn+zQZGJmK9gKTFPPyquC26R62XH2iC5WI LUFuGUbJ2B00MGwze2z2lguSFG0K7n9Y9cRHmSY91iC/NjtdrGOK1OAi6dZgKvaT 7pD9SW2AwMpPz0nHyMdEne88FQgsxQRr8YdD/z1z7VvGFvT/aIm8rLD4ZG3pyD8g Ua604jDxPVt6CZZEt8XyRkLaV34vn/0ejSVnN7koVUEflMaCtMzi30u3IbrUsesQ 0jjfUrp9tMhT82qZhsYGei9GbbBOOTktIlnXqbw9z7ZLBYo2HGD+xDxovjUJHOJI UtBb5xsZBhNgt/ifw+4m6iwHsx7jP7c= -----END CERTIFICATE-----Generated at Sun Aug 10 05:01:08 2025 by rpki-client