$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/4208a17f-4ecd-39fc-b10e-21a3d308011a.roa File: 4208a17f-4ecd-39fc-b10e-21a3d308011a.roa (raw, json) Hash identifier: 0BskQUZ1o+qD8SE/tupwnesciYTLxquQi73crY80UpI= Subject key identifier: B9:30:8B:88:41:01:AA:17:BC:BA:96:42:C6:F3:84:E8:99:BF:90:EC Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584C8476D1F3937CD61A4CCF0E40 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/4208a17f-4ecd-39fc-b10e-21a3d308011a.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 36445 IP address blocks: 149.248.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:d1:f3:93:7c:d6:1a:4c:cf:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=af5602a7-d606-4612-8123-ad15e86b9255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:17:5e:e3:58:f9:8a:cd:a7:9b:36:47:32:9e: 24:c2:52:eb:77:82:7d:bd:a7:3b:72:1c:8c:93:e3: cd:86:73:bb:99:10:d5:90:fd:35:67:eb:64:b3:b4: f9:01:c2:eb:c0:a1:6b:44:31:eb:f5:13:81:49:0b: 7e:46:62:7c:1a:d5:75:ad:27:b8:75:b3:13:db:eb: 0b:83:be:32:ff:43:b6:1b:79:f2:f7:1a:08:16:20: 0c:3f:0f:f2:d7:b1:1c:49:3e:b2:bb:eb:3d:ee:be: 68:09:63:4f:bd:94:35:bb:b1:71:6a:93:d1:fe:b4: 1d:4a:bb:e4:eb:cd:29:47:55:21:a7:9e:95:58:db: be:78:22:70:a5:cc:97:bb:43:a0:4a:f1:7e:8a:ca: 8f:89:93:26:8f:07:36:b5:f1:e3:41:7e:09:2f:d6: ae:76:89:f3:2a:cf:ba:70:65:38:15:18:d0:24:2f: e5:45:9f:b0:06:9b:cb:5a:c8:a1:d9:e0:81:e9:52: ed:21:7e:5b:f1:76:be:b6:3c:a9:63:d3:dd:b7:54: 79:a3:69:0d:b8:d5:32:ac:b0:d1:5d:e5:5a:bf:6a: a1:0f:1b:9e:2c:96:56:c1:57:83:ba:43:17:16:63: 31:52:ed:71:66:19:42:58:a8:41:48:14:b4:1b:cd: 67:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:30:8B:88:41:01:AA:17:BC:BA:96:42:C6:F3:84:E8:99:BF:90:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/4208a17f-4ecd-39fc-b10e-21a3d308011a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 149.248.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:66:5f:31:0a:e4:e9:c0:65:17:77:b0:47:3b:5d:84:dc:04: 3b:d0:b1:19:32:c1:7e:a9:43:bc:62:3c:b0:34:99:cd:00:aa: ee:65:1f:5d:0e:c2:21:85:e2:22:4c:5d:e3:f9:6d:e1:e4:be: f5:ba:26:f5:d6:2c:0a:51:f5:d1:0b:78:83:f3:45:57:b7:2a: 4c:f1:8e:fa:5f:ba:12:7e:bf:b1:56:45:f3:8d:1a:30:9c:db: b6:0f:1a:7c:2d:37:ea:b9:51:89:45:10:b7:d6:ba:e0:b8:19: 45:42:2b:b9:ba:34:f9:22:13:4c:19:2e:01:2b:a4:2f:c6:2c: 2c:ba:d3:c3:6c:8c:51:ca:7c:d4:51:0e:87:cf:a9:a6:e3:cf: 55:2e:b3:08:e6:98:64:15:d9:83:c4:d7:f5:01:e5:87:85:86: d5:14:82:99:fb:63:39:67:0b:d5:66:e9:f1:55:b6:45:16:a1: 8d:8c:5a:c3:13:42:50:b5:39:f4:7b:c4:f6:ad:8c:81:a5:60: ee:4f:90:52:84:0c:b0:12:cd:11:23:8e:bc:79:28:bb:bf:b3: 1f:24:a6:83:da:02:a8:91:03:d8:39:94:95:fc:e4:d6:93:67: 77:43:cb:ee:0d:8e:0c:1a:b8:39:c8:80:c6:d6:6b:bd:97:cd: 96:0f:79:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdtHzk3zWGkzPDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk YWY1NjAyYTctZDYwNi00NjEyLTgxMjMtYWQxNWU4NmI5MjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Rde41j5is2nmzZHMp4kwlLrd4J9vac7chyM k+PNhnO7mRDVkP01Z+tks7T5AcLrwKFrRDHr9ROBSQt+RmJ8GtV1rSe4dbMT2+sL g74y/0O2G3ny9xoIFiAMPw/y17EcST6yu+s97r5oCWNPvZQ1u7FxapPR/rQdSrvk 680pR1Uhp56VWNu+eCJwpcyXu0OgSvF+isqPiZMmjwc2tfHjQX4JL9audonzKs+6 cGU4FRjQJC/lRZ+wBpvLWsih2eCB6VLtIX5b8Xa+tjypY9Pdt1R5o2kNuNUyrLDR XeVav2qhDxueLJZWwVeDukMXFmMxUu1xZhlCWKhBSBS0G81nuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkwi4hBAaoXvLqWQsbzhOiZv5DsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvNDIwOGExN2YtNGVjZC0z OWZjLWIxMGUtMjFhM2QzMDgwMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElfhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRmXzEK5OnAZRd3sEc7XYTcBDvQsRkywX6pQ7xiPLA0mc0Aqu5lH10O wiGF4iJMXeP5beHkvvW6JvXWLApR9dELeIPzRVe3KkzxjvpfuhJ+v7FWRfONGjCc 27YPGnwtN+q5UYlFELfWuuC4GUVCK7m6NPkiE0wZLgErpC/GLCy608NsjFHKfNRR DofPqabjz1UuswjmmGQV2YPE1/UB5YeFhtUUgpn7YzlnC9Vm6fFVtkUWoY2MWsMT QlC1OfR7xPatjIGlYO5PkFKEDLASzREjjrx5KLu/sx8kpoPaAqiRA9g5lJX85NaT Z3dDy+4NjgwauDnIgMbWa72XzZYPeZQ= -----END CERTIFICATE-----Generated at Mon Mar 2 11:02:24 2026 by rpki-client