$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/4208a17f-4ecd-39fc-b10e-21a3d308011a.roa File: 4208a17f-4ecd-39fc-b10e-21a3d308011a.roa (raw, json) Hash identifier: 8mcirclUhmXc+ynypO1j0dgnE65NZlxZQ4dKbvtLIzw= Subject key identifier: 2B:41:86:56:A4:B6:28:8E:67:35:B6:37:A3:01:31:96:4B:12:E8:74 Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584AC2E0EAF224548DC690CB0300 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/4208a17f-4ecd-39fc-b10e-21a3d308011a.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 36445 IP address blocks: 149.248.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:ea:f2:24:54:8d:c6:90:cb:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=f52ea5aa-1759-49bc-b805-d614c0c540b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1f:55:e0:5c:72:07:6b:ca:ac:4a:96:e8:08: 9e:64:57:7f:c0:ae:52:9f:45:8a:20:24:b6:7b:db: bb:b4:5b:9f:cd:d1:a1:be:22:38:53:54:63:4d:57: ea:fe:04:24:66:a8:9c:3f:6b:d2:af:ca:bd:6b:1c: 8d:73:40:80:42:20:06:76:8c:c8:2b:cd:de:00:74: 18:26:51:d7:71:77:2c:13:cb:32:16:8b:04:05:06: e0:da:4c:f8:54:e2:63:98:a2:d0:98:64:9b:82:60: 92:97:ed:8f:e1:07:75:11:ce:ff:83:09:6b:c9:b0: d1:4b:9e:e6:14:64:26:cf:7c:c5:0c:af:01:cf:3e: 79:5d:fd:13:57:bc:46:d1:8c:c7:51:ad:97:ab:28: f2:c9:61:8a:93:7e:2a:a1:88:3a:e3:32:9a:f0:81: 41:f5:6e:e3:69:bc:1f:eb:a9:f7:be:d9:58:60:ce: c4:0b:a8:f9:7e:8d:c5:da:cc:18:4f:f4:8f:f5:01: fa:c1:4b:d0:bb:dc:9e:a6:96:b5:a3:49:a0:62:04: a1:9e:8f:ed:bb:59:93:7e:17:0f:62:64:60:9e:7d: 40:77:83:21:4b:b2:9d:8f:92:91:36:e7:c5:d6:80: f7:5c:5a:3c:d8:3a:fd:2e:e0:c9:7b:d9:44:e8:bd: a9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:41:86:56:A4:B6:28:8E:67:35:B6:37:A3:01:31:96:4B:12:E8:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/4208a17f-4ecd-39fc-b10e-21a3d308011a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 149.248.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d0:70:f3:85:c6:48:2d:2d:4f:3c:78:d3:a8:42:e6:a8:2d: de:97:41:34:7d:2b:5e:14:76:3f:33:25:33:6e:b8:40:01:61: de:13:ca:08:4f:3b:e5:43:04:e6:72:a0:b6:0f:a7:f3:8a:2a: ef:98:a6:02:e1:36:4f:bc:79:eb:8d:fb:5b:71:4a:20:ae:6b: 90:cd:06:dc:fa:26:6e:4c:77:f1:f1:ef:d3:8e:02:d6:3e:06: e5:17:91:ff:b5:ef:55:d5:9c:f4:eb:b1:ab:95:9f:f0:fc:e9: c0:3a:ca:ab:b5:20:a9:fa:c5:25:21:ae:35:96:d0:e0:08:1a: 23:54:08:84:33:1d:be:bb:d3:04:2f:cd:07:5c:2b:3a:85:33: b6:9a:6e:18:63:33:48:18:f1:c6:12:8d:4f:f9:a5:40:e8:f2: 56:3f:5b:63:9c:15:70:40:14:77:b0:d1:e7:72:ad:01:5b:cf: d5:20:61:4b:77:dd:67:19:9d:94:09:12:d7:2a:6f:ff:4d:3c: 85:69:bb:88:04:ac:c9:67:1f:bb:07:dc:1e:4b:a2:33:07:b2: 3e:b7:26:dd:65:1d:b1:8a:26:b9:36:e3:de:ff:0a:bb:22:34: 40:e2:37:74:c1:f2:f2:ed:ef:a0:5c:b0:e0:cf:ef:ea:b6:d1: 3f:17:ff:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4OryJFSNxpDLAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZjUyZWE1YWEtMTc1OS00OWJjLWI4MDUtZDYxNGMwYzU0MGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR9V4FxyB2vKrEqW6AieZFd/wK5Sn0WKICS2 e9u7tFufzdGhviI4U1RjTVfq/gQkZqicP2vSr8q9axyNc0CAQiAGdozIK83eAHQY JlHXcXcsE8syFosEBQbg2kz4VOJjmKLQmGSbgmCSl+2P4Qd1Ec7/gwlrybDRS57m FGQmz3zFDK8Bzz55Xf0TV7xG0YzHUa2XqyjyyWGKk34qoYg64zKa8IFB9W7jabwf 66n3vtlYYM7EC6j5fo3F2swYT/SP9QH6wUvQu9yeppa1o0mgYgShno/tu1mTfhcP YmRgnn1Ad4MhS7Kdj5KRNufF1oD3XFo82Dr9LuDJe9lE6L2phwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtBhlaktiiOZzW2N6MBMZZLEuh0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvNDIwOGExN2YtNGVjZC0z OWZjLWIxMGUtMjFhM2QzMDgwMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElfhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPQcPOFxkgtLU88eNOoQuaoLd6XQTR9K14Udj8zJTNuuEABYd4TyghP O+VDBOZyoLYPp/OKKu+YpgLhNk+8eeuN+1txSiCua5DNBtz6Jm5Md/Hx79OOAtY+ BuUXkf+171XVnPTrsauVn/D86cA6yqu1IKn6xSUhrjWW0OAIGiNUCIQzHb670wQv zQdcKzqFM7aabhhjM0gY8cYSjU/5pUDo8lY/W2OcFXBAFHew0edyrQFbz9UgYUt3 3WcZnZQJEtcqb/9NPIVpu4gErMlnH7sH3B5LojMHsj63Jt1lHbGKJrk2497/Crsi NEDiN3TB8vLt76BcsODP7+q20T8X/6M= -----END CERTIFICATE-----Generated at Sun Aug 10 05:01:17 2025 by rpki-client