$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa File: 2b4d14c3-782d-30d6-a683-951c6c83f730.roa (raw, json) Hash identifier: F2X40VDRBHaeb9QNzQhw61iR75O0BHJDQeHPMciW9ks= Subject key identifier: B3:AA:70:C3:49:49:76:B0:D0:D1:A9:4B:F3:0E:5D:77:00:F0:37:06 Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584AC2E0DB165C7C12D3B0A89000 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 36445 IP address blocks: 149.248.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:db:16:5c:7c:12:d3:b0:a8:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=4ef2527f-b7f5-4c08-959a-6a4b6a97f9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3c:e4:b7:cc:c9:35:f9:7d:77:09:92:52:7b: 70:04:b0:b1:ff:06:f4:48:a3:01:80:89:f3:c0:26: c6:d5:2f:7e:a2:57:56:69:25:c0:5a:97:10:4f:86: a2:bf:64:8d:cb:48:66:a6:9a:de:ce:99:ba:47:a2: 16:c4:8f:84:c6:bb:23:d4:84:fd:ef:fe:5c:37:d6: c2:d3:ae:7c:2b:cf:fb:c7:87:e3:6f:51:7e:39:85: f5:88:43:fc:a9:5b:a5:87:a3:47:b2:fc:14:be:b9: 19:3f:9b:9d:e2:71:98:1f:c4:8f:01:79:f8:0d:17: b2:f8:ff:a9:72:3a:cb:0f:1d:2f:ab:a0:83:09:4f: ca:60:1d:88:b9:ca:fc:1f:20:1e:66:f0:b1:b7:8b: ee:30:1a:59:12:93:69:b9:0c:a4:89:e0:e7:a8:a7: 8f:96:35:bd:8d:27:e0:94:fe:bd:5f:8e:a7:c4:d1: 17:87:78:94:ff:9c:12:99:3c:f1:0e:3c:07:e9:ce: 3b:fb:67:44:4d:2c:9b:fe:5d:e0:f8:6c:69:9d:47: d4:0c:42:3b:cb:1a:53:2e:78:5e:ae:44:94:06:a6: 76:58:bc:ec:83:55:7e:a9:67:9d:d0:b2:98:59:3a: 8c:40:da:a7:2a:7f:74:31:fd:66:6f:85:54:bb:d3: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AA:70:C3:49:49:76:B0:D0:D1:A9:4B:F3:0E:5D:77:00:F0:37:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 149.248.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:7c:cf:c7:f7:a1:ec:2c:90:89:6e:82:c4:12:9b:b5:06:81: 17:63:00:65:4b:a8:78:c2:06:a8:e9:15:49:9a:5a:75:25:22: 98:5f:c5:c6:fa:d0:3a:3f:d3:29:e7:44:24:97:1c:aa:06:07: c7:f4:e0:56:27:d7:a4:98:df:ff:68:98:c1:63:ae:06:79:34: 45:55:9e:b2:8f:24:f3:87:5f:38:87:9d:92:1b:64:27:c2:67: 25:79:5d:c8:b3:25:3d:bb:95:a1:62:ad:f0:04:ac:fd:08:d3: 34:b7:72:97:7d:f8:43:96:49:69:86:4e:be:37:df:e3:97:f8: 11:26:94:1d:e3:b0:01:a8:82:02:00:d4:72:68:76:d6:83:95: a3:96:80:ab:09:90:ca:be:da:ce:80:56:ef:75:f4:74:79:d8: 6d:e8:37:7f:4f:70:dc:be:77:96:0c:e1:e5:02:4b:41:c0:d1: 43:31:03:1e:f3:75:60:e5:34:58:0e:4a:7a:fd:b9:7d:b7:b0: 12:21:52:60:b5:cd:db:59:ba:f3:90:86:c3:7a:34:55:3f:29: 7e:68:cb:08:75:47:7b:fa:66:90:da:e7:bb:df:14:4e:f3:be: 12:65:17:c4:d0:9d:14:16:e2:51:a2:88:65:ec:8d:1f:1e:fc: bb:82:b1:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4NsWXHwS07CokAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk NGVmMjUyN2YtYjdmNS00YzA4LTk1OWEtNmE0YjZhOTdmOWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzzkt8zJNfl9dwmSUntwBLCx/wb0SKMBgInz wCbG1S9+oldWaSXAWpcQT4aiv2SNy0hmpprezpm6R6IWxI+Exrsj1IT97/5cN9bC 0658K8/7x4fjb1F+OYX1iEP8qVulh6NHsvwUvrkZP5ud4nGYH8SPAXn4DRey+P+p cjrLDx0vq6CDCU/KYB2Iucr8HyAeZvCxt4vuMBpZEpNpuQykieDnqKePljW9jSfg lP69X46nxNEXh3iU/5wSmTzxDjwH6c47+2dETSyb/l3g+GxpnUfUDEI7yxpTLnhe rkSUBqZ2WLzsg1V+qWed0LKYWTqMQNqnKn90Mf1mb4VUu9OqhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOqcMNJSXaw0NGpS/MOXXcA8DcGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvMmI0ZDE0YzMtNzgyZC0z MGQ2LWE2ODMtOTUxYzZjODNmNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlfh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAId8z8f3oewskIlugsQSm7UGgRdjAGVLqHjCBqjpFUmaWnUlIphfxcb6 0Do/0ynnRCSXHKoGB8f04FYn16SY3/9omMFjrgZ5NEVVnrKPJPOHXziHnZIbZCfC ZyV5XcizJT27laFirfAErP0I0zS3cpd9+EOWSWmGTr433+OX+BEmlB3jsAGoggIA 1HJodtaDlaOWgKsJkMq+2s6AVu919HR52G3oN39PcNy+d5YM4eUCS0HA0UMxAx7z dWDlNFgOSnr9uX23sBIhUmC1zdtZuvOQhsN6NFU/KX5oywh1R3v6ZpDa57vfFE7z vhJlF8TQnRQW4lGiiGXsjR8e/LuCsTY= -----END CERTIFICATE-----Generated at Sun Aug 10 05:01:16 2025 by rpki-client