$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa File: 2b4d14c3-782d-30d6-a683-951c6c83f730.roa (raw, json) Hash identifier: KW4qog+anEJrdDp52dxcIhciGlAJlNA+/UciBI68YNI= Subject key identifier: 6E:C7:F9:86:11:18:15:0C:86:73:2F:6A:52:02:32:29:57:FA:0C:ED Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584BA39CF9347315FEBC96019780 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 36445 IP address blocks: 149.248.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f9:34:73:15:fe:bc:96:01:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=277f5c6e-ece1-440b-b21a-86674c78e48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ad:ac:a7:cf:9e:17:a0:ea:d7:58:90:74:d8: 20:82:b1:25:c3:8b:46:b5:41:6f:4e:2a:66:57:9f: e7:db:c9:a6:89:88:8d:68:8c:e3:ce:9a:93:fc:8f: d8:25:41:f6:42:96:75:6e:38:30:89:ea:e7:d6:39: 20:f4:67:a9:be:4e:a1:93:1e:09:90:43:df:79:9f: 7b:7c:34:91:ee:bb:28:ef:f6:b8:e6:a9:db:29:2c: 70:68:1e:07:f2:6b:07:9b:73:c5:72:23:90:27:bf: f0:9a:52:bb:cd:26:50:ce:ba:47:9d:c3:60:71:39: 18:5d:d5:08:b9:04:9d:ff:11:1b:29:09:99:b0:b7: dd:68:a9:6e:88:a2:1b:9b:29:1d:0e:ff:1d:8f:bb: ca:6f:0d:55:fd:77:e3:06:7e:ee:43:da:87:85:05: fb:16:a7:37:f1:e0:84:f2:68:f8:b2:df:05:cd:38: 59:46:d4:bf:e8:b9:9b:53:6f:e8:38:0a:7e:18:41: 5b:2c:8c:ad:a3:0b:3a:94:ac:24:13:4e:bf:a9:19: 00:54:19:a9:34:47:b1:80:39:e6:56:d0:6e:fb:f8: c0:1b:b0:cf:9f:61:34:bc:ee:a9:ec:87:8f:b0:0a: 84:94:99:07:e2:b0:5a:46:30:87:a3:29:39:3b:6d: ff:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C7:F9:86:11:18:15:0C:86:73:2F:6A:52:02:32:29:57:FA:0C:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 149.248.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8c:3a:a9:59:61:a8:a0:fc:8d:43:49:2e:ac:de:60:cc:99: 89:73:38:1c:67:61:12:51:e9:bf:be:1f:43:ef:b1:f1:d1:f2: 0e:92:2f:6b:09:a6:26:04:c6:23:1a:d6:60:94:cc:15:05:c1: 7c:e6:9d:ae:0b:98:25:c4:e1:b7:12:48:8e:cc:68:a4:7c:1e: a0:28:c2:e2:b2:e4:1b:77:d7:85:de:9f:97:2a:89:7e:a3:97: 02:63:d9:5c:fd:7f:b4:fa:9a:15:00:f5:77:3b:61:ba:cd:54: 1f:ef:a5:38:4d:a6:e4:e1:3a:a8:0d:d9:39:a3:2f:3b:da:d6: 16:0f:04:b1:c1:a6:8a:c3:5c:d7:a9:06:50:29:fe:7f:72:79: bb:87:7c:64:46:17:c4:c1:eb:63:b1:b0:64:2d:0a:17:5a:25: d0:3f:b5:03:89:cc:f2:d6:d9:e2:10:24:b0:d2:0c:be:e1:66: a3:f1:19:c4:e6:7f:8c:e2:66:5d:6f:fe:ce:ac:02:c4:c3:8f: 93:8a:1c:cc:64:8a:66:f4:fc:39:5a:3d:f3:b1:7c:37:41:3c: f0:44:03:f8:c5:62:60:6c:e2:c6:72:58:f9:8a:55:3c:47:92: 28:ea:3d:31:34:02:c7:2f:3a:67:c5:49:9f:21:5c:0f:fd:8b: ec:08:45:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPk0cxX+vJYBl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk Mjc3ZjVjNmUtZWNlMS00NDBiLWIyMWEtODY2NzRjNzhlNDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja2sp8+eF6Dq11iQdNgggrElw4tGtUFvTipm V5/n28mmiYiNaIzjzpqT/I/YJUH2QpZ1bjgwiern1jkg9Gepvk6hkx4JkEPfeZ97 fDSR7rso7/a45qnbKSxwaB4H8msHm3PFciOQJ7/wmlK7zSZQzrpHncNgcTkYXdUI uQSd/xEbKQmZsLfdaKluiKIbmykdDv8dj7vKbw1V/XfjBn7uQ9qHhQX7Fqc38eCE 8mj4st8FzThZRtS/6LmbU2/oOAp+GEFbLIytows6lKwkE06/qRkAVBmpNEexgDnm VtBu+/jAG7DPn2E0vO6p7IePsAqElJkH4rBaRjCHoyk5O23/IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7H+YYRGBUMhnMvalICMilX+gztMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvMmI0ZDE0YzMtNzgyZC0z MGQ2LWE2ODMtOTUxYzZjODNmNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlfh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWMOqlZYaig/I1DSS6s3mDMmYlzOBxnYRJR6b++H0PvsfHR8g6SL2sJ piYExiMa1mCUzBUFwXzmna4LmCXE4bcSSI7MaKR8HqAowuKy5Bt314Xen5cqiX6j lwJj2Vz9f7T6mhUA9Xc7YbrNVB/vpThNpuThOqgN2TmjLzva1hYPBLHBporDXNep BlAp/n9yebuHfGRGF8TB62OxsGQtChdaJdA/tQOJzPLW2eIQJLDSDL7hZqPxGcTm f4ziZl1v/s6sAsTDj5OKHMxkimb0/DlaPfOxfDdBPPBEA/jFYmBs4sZyWPmKVTxH kijqPTE0AscvOmfFSZ8hXA/9i+wIRQg= -----END CERTIFICATE-----Generated at Wed Nov 5 17:33:08 2025 by rpki-client