$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/4208a17f-4ecd-39fc-b10e-21a3d308011a.roa File: 4208a17f-4ecd-39fc-b10e-21a3d308011a.roa (raw, json) Hash identifier: 0cQ1MO1Ay5JaZwKo3Y6rlZPaLGEz2Hay2N0xgEI/Awc= Subject key identifier: 23:D6:98:FF:BD:D8:CE:3D:AF:B9:DD:26:3B:30:FB:0B:C4:73:AD:C5 Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584BA39D0838FE64467230EB87D0 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/4208a17f-4ecd-39fc-b10e-21a3d308011a.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 36445 IP address blocks: 149.248.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:08:38:fe:64:46:72:30:eb:87:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=f552976c-1e9d-4145-9971-b38a141d9d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e4:3b:5e:a3:c7:0f:06:19:43:c2:e1:2e:8e: 8c:d5:ab:19:c0:f1:bb:9e:6c:ee:b9:ea:8a:2a:ee: 33:b8:b5:7e:42:fa:99:ab:3f:07:54:1b:d0:ef:df: 97:bf:07:89:27:71:8e:72:b5:63:92:3e:c9:e1:30: 5f:54:fb:6d:b6:52:a1:5d:a5:c5:a2:cb:a0:dc:dc: 7c:37:b9:29:c2:d8:29:60:03:a4:c4:51:33:e4:d6: 3c:9e:d7:32:c5:db:37:a2:3d:7b:9f:05:87:be:db: 77:6a:69:37:b7:4d:aa:96:d6:ef:90:79:93:44:e4: fc:e3:50:32:3a:a0:87:e3:04:75:ff:e1:ad:61:d0: 90:e7:e8:6e:34:17:1f:df:fc:b9:f4:c4:38:f2:8a: 48:13:3e:a0:c2:f0:95:d4:57:49:22:ca:0a:a1:c9: ce:75:c5:c4:83:8a:aa:de:ed:ef:4b:9e:93:1c:51: 0e:ef:0e:bf:5e:f4:de:b4:5b:ac:d2:bb:a6:71:c1: 77:bb:f4:c3:7b:7d:aa:81:15:15:d0:c2:f7:86:fc: 9f:cb:68:32:24:24:ac:e0:b1:07:49:97:db:90:5f: fa:f4:11:b0:82:1f:28:38:e5:e0:3f:21:34:20:bc: f9:bd:3a:a2:ac:50:cd:88:cf:9c:c2:e4:73:0f:3d: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D6:98:FF:BD:D8:CE:3D:AF:B9:DD:26:3B:30:FB:0B:C4:73:AD:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/4208a17f-4ecd-39fc-b10e-21a3d308011a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 149.248.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:2c:cf:0a:3b:35:cf:1b:f9:ef:ce:9b:58:8f:03:63:59:18: c0:e9:36:63:64:61:0c:93:28:49:4e:88:2a:40:43:f1:39:b1: 0c:58:fd:87:c3:23:bd:2f:eb:7d:7e:26:ca:95:a1:2a:4b:89: 1d:2b:b5:e3:01:b6:93:7a:d9:4c:0e:b6:65:ca:97:6f:85:c7: b7:24:f2:25:47:56:0a:b2:91:66:a0:8b:eb:17:8b:73:e0:c3: 3f:50:a2:4c:e7:56:7b:69:46:a1:c5:0f:4f:b7:aa:e9:91:07: 88:e2:bb:15:a7:84:b3:12:0c:50:a7:a4:86:94:25:48:bf:39: 93:2c:04:34:c8:33:67:af:00:37:4c:a3:75:4c:83:79:bd:a5: c8:07:98:a0:55:0f:ef:b0:72:d7:0d:7c:1f:e1:f8:ce:ba:9e: 7e:34:4e:55:74:f7:1e:18:28:2b:91:e2:f9:d2:f7:9b:70:66: 1f:e8:79:00:b0:49:6a:62:3c:cb:c5:9a:aa:0d:ed:7e:50:34: ee:cc:18:6e:71:00:7c:66:37:c5:be:b6:60:f1:80:70:7d:d1: f3:c7:2d:81:6e:82:21:ee:3c:fe:a9:11:91:9e:91:74:2d:ec: 7e:ca:34:e7:92:6d:da:f4:ec:43:b6:db:44:7f:88:36:95:6c: 07:42:9f:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQg4/mRGcjDrh9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZjU1Mjk3NmMtMWU5ZC00MTQ1LTk5NzEtYjM4YTE0MWQ5ZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+Q7XqPHDwYZQ8LhLo6M1asZwPG7nmzuueqK Ku4zuLV+QvqZqz8HVBvQ79+XvweJJ3GOcrVjkj7J4TBfVPtttlKhXaXFosug3Nx8 N7kpwtgpYAOkxFEz5NY8ntcyxds3oj17nwWHvtt3amk3t02qltbvkHmTROT841Ay OqCH4wR1/+GtYdCQ5+huNBcf3/y59MQ48opIEz6gwvCV1FdJIsoKocnOdcXEg4qq 3u3vS56THFEO7w6/XvTetFus0rumccF3u/TDe32qgRUV0ML3hvyfy2gyJCSs4LEH SZfbkF/69BGwgh8oOOXgPyE0ILz5vTqirFDNiM+cwuRzDz2XYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPWmP+92M49r7ndJjsw+wvEc63FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvNDIwOGExN2YtNGVjZC0z OWZjLWIxMGUtMjFhM2QzMDgwMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElfhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMUszwo7Nc8b+e/Om1iPA2NZGMDpNmNkYQyTKElOiCpAQ/E5sQxY/YfD I70v631+JsqVoSpLiR0rteMBtpN62UwOtmXKl2+Fx7ck8iVHVgqykWagi+sXi3Pg wz9QokznVntpRqHFD0+3qumRB4jiuxWnhLMSDFCnpIaUJUi/OZMsBDTIM2evADdM o3VMg3m9pcgHmKBVD++wctcNfB/h+M66nn40TlV09x4YKCuR4vnS95twZh/oeQCw SWpiPMvFmqoN7X5QNO7MGG5xAHxmN8W+tmDxgHB90fPHLYFugiHuPP6pEZGekXQt 7H7KNOeSbdr07EO220R/iDaVbAdCn8o= -----END CERTIFICATE-----Generated at Wed Nov 5 17:33:27 2025 by rpki-client