$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/294acec0-39de-3a01-a55d-87f7629591d1.roa File: 294acec0-39de-3a01-a55d-87f7629591d1.roa (raw, json) Hash identifier: ZLS+hsEVeSmwysGkGEJ8d5GZ+4RC2P4MOdr8V5d5ng0= Subject key identifier: 23:BE:E3:B5:92:F0:60:85:3B:94:BE:41:B9:92:E4:0A:1C:19:A1:A7 Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584C8476D204640978468E80C400 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/294acec0-39de-3a01-a55d-87f7629591d1.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 36445 IP address blocks: 149.248.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:d2:04:64:09:78:46:8e:80:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=1181e4a9-157b-43ba-be15-b2253caff9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:16:1f:6a:96:e8:94:cf:98:ac:a1:f0:49:78: 99:2a:d2:e8:4e:df:4a:53:89:6d:2e:ed:a0:8d:ee: b1:77:1d:95:45:5e:2c:cc:23:b9:f6:ad:2a:ed:73: 54:4e:da:71:4e:69:49:49:38:c0:9e:2c:93:33:84: 75:bd:9a:9e:29:0a:47:46:ed:be:a3:62:c2:1b:b7: c4:e0:f2:96:35:03:0a:43:da:a8:71:13:be:17:c3: ba:23:0a:7e:62:81:c2:b5:49:6d:e2:eb:c0:b7:63: a7:f7:29:54:03:c6:31:91:05:84:6d:49:47:a6:d8: 4a:f8:5c:11:6a:08:a1:ba:4d:e3:3f:98:4d:0d:6b: 32:f2:36:13:db:c6:59:95:3e:48:6d:a4:46:16:d6: d3:22:8a:e4:29:64:01:33:b7:c6:4e:91:e4:01:20: 90:63:47:68:f2:ed:9d:86:2a:f4:a3:c6:48:ee:0f: 65:ef:38:cb:df:d3:2d:db:3a:16:bd:d8:f6:9a:ef: 49:57:a4:9b:30:92:87:46:cd:72:5a:f3:42:03:52: ce:2d:14:ca:3e:26:96:38:07:c1:a0:1f:b8:d3:8a: 54:c3:c5:06:4b:78:51:6a:33:a7:65:22:43:18:35: 61:a0:38:58:31:4f:6f:51:ca:d6:af:f6:8a:51:5c: f3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BE:E3:B5:92:F0:60:85:3B:94:BE:41:B9:92:E4:0A:1C:19:A1:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/294acec0-39de-3a01-a55d-87f7629591d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 149.248.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:54:93:75:01:cb:16:e1:f7:ad:b5:33:34:1f:4e:42:5e:ba: a8:20:8b:74:2b:a8:c6:0e:2a:66:35:d7:65:a2:07:81:53:e0: 60:a1:f2:f4:91:59:b1:e6:aa:4b:39:c3:9b:b2:62:a5:4d:a9: 4e:9a:3c:ea:8d:b1:fd:38:77:7f:f4:0b:44:64:5a:20:56:58: 67:6b:26:c4:29:ad:07:6a:6f:55:d5:b6:0c:96:81:c8:8e:f9: 39:4f:bf:69:1d:86:60:47:90:db:cd:c7:a3:92:8c:c9:17:98: 44:b9:67:8c:29:8a:ae:18:d3:46:d7:64:62:ec:92:5e:23:2a: 65:55:1b:53:67:1c:70:be:06:67:00:c2:cd:c8:6c:c2:c2:4e: 86:79:1f:4a:d4:e8:bb:fd:90:0a:69:db:8b:be:b5:ac:c1:9e: 12:08:8d:7e:ca:fd:ec:fe:f3:be:59:e3:ef:b5:5d:97:37:2f: 4a:76:6d:01:d1:10:da:01:14:3d:87:54:3e:88:55:92:f7:0b: 08:2d:6f:e0:85:8d:9e:a6:da:e9:cf:82:ec:02:6e:c7:13:50: 41:ad:67:9c:33:7b:3e:56:13:4f:8b:6e:b1:db:89:ea:51:7e: c8:68:25:7f:7f:a6:8b:c2:13:5f:f5:b3:19:a6:31:10:13:78: c8:e1:17:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdtIEZAl4Ro6AxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk MTE4MWU0YTktMTU3Yi00M2JhLWJlMTUtYjIyNTNjYWZmOWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRYfapbolM+YrKHwSXiZKtLoTt9KU4ltLu2g je6xdx2VRV4szCO59q0q7XNUTtpxTmlJSTjAniyTM4R1vZqeKQpHRu2+o2LCG7fE 4PKWNQMKQ9qocRO+F8O6Iwp+YoHCtUlt4uvAt2On9ylUA8YxkQWEbUlHpthK+FwR agihuk3jP5hNDWsy8jYT28ZZlT5IbaRGFtbTIorkKWQBM7fGTpHkASCQY0do8u2d hir0o8ZI7g9l7zjL39Mt2zoWvdj2mu9JV6SbMJKHRs1yWvNCA1LOLRTKPiaWOAfB oB+404pUw8UGS3hRajOnZSJDGDVhoDhYMU9vUcrWr/aKUVzzAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCO+47WS8GCFO5S+QbmS5AocGaGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvMjk0YWNlYzAtMzlkZS0z YTAxLWE1NWQtODdmNzYyOTU5MWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlfh3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1Uk3UByxbh9621MzQfTkJeuqggi3QrqMYOKmY112WiB4FT4GCh8vSR WbHmqks5w5uyYqVNqU6aPOqNsf04d3/0C0RkWiBWWGdrJsQprQdqb1XVtgyWgciO +TlPv2kdhmBHkNvNx6OSjMkXmES5Z4wpiq4Y00bXZGLskl4jKmVVG1NnHHC+BmcA ws3IbMLCToZ5H0rU6Lv9kApp24u+tazBnhIIjX7K/ez+875Z4++1XZc3L0p2bQHR ENoBFD2HVD6IVZL3Cwgtb+CFjZ6m2unPguwCbscTUEGtZ5wzez5WE0+LbrHbiepR fshoJX9/povCE1/1sxmmMRATeMjhF/8= -----END CERTIFICATE-----Generated at Mon Mar 2 13:03:38 2026 by rpki-client