$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/d1507fa1-5e61-3848-be76-f27ee6fc5174.roa File: d1507fa1-5e61-3848-be76-f27ee6fc5174.roa (raw, json) Hash identifier: T+3Y/VkXrRW2KMFQS9wUp0WVpDLKqnBFGQ68+jCXNs8= Subject key identifier: 45:3B:21:DB:1C:87:2C:18:35:0E:2E:52:E9:73:0B:ED:EC:F0:65:00 Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584AC2E0DAD915DA6E8D8C196A40 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/d1507fa1-5e61-3848-be76-f27ee6fc5174.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 36445 IP address blocks: 149.248.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:da:d9:15:da:6e:8d:8c:19:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=a23701e3-5682-4e7a-b554-f331e30e76bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:dc:8a:e6:04:61:16:9b:4f:75:28:47:2c:e0: ec:64:1b:be:68:56:0e:f0:cf:20:d6:87:47:41:74: cd:22:4a:9f:40:b2:7f:9a:b7:c9:7f:57:7c:7f:b5: cc:c8:eb:55:39:55:f8:06:13:e9:b8:bb:53:ee:53: 41:e2:88:58:f7:b0:85:24:76:dc:c7:f1:0b:c9:39: 98:9e:7b:79:0f:d0:6a:25:a8:46:07:a0:78:a6:7e: cb:35:86:a8:70:42:87:4a:9b:2a:8a:e8:dd:b0:97: 2a:70:7e:e6:65:3b:7c:aa:ac:d3:06:8b:50:fc:94: 15:6a:08:99:73:cb:af:d2:43:10:cb:ab:1f:e4:ab: 93:f8:b2:31:16:76:28:9c:63:e5:a0:14:ab:1f:89: 56:68:59:15:23:2e:30:6c:27:a9:17:05:77:96:ae: 76:57:04:75:3b:ab:51:88:c2:22:86:15:fa:8f:d6: 4f:ca:ff:7c:92:d1:2e:73:ef:60:56:1d:cb:55:bc: 36:30:29:2d:4b:ab:c9:70:33:05:32:43:00:0d:b1: df:60:60:fb:a5:e0:dd:c6:d4:00:ed:ae:41:78:3f: d5:d8:5f:d1:8e:b7:fe:53:92:30:47:06:a8:72:d8: 57:04:50:99:b2:38:61:dc:77:d9:fe:2f:89:62:2f: b8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:3B:21:DB:1C:87:2C:18:35:0E:2E:52:E9:73:0B:ED:EC:F0:65:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/d1507fa1-5e61-3848-be76-f27ee6fc5174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 149.248.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:89:fa:3c:c1:e2:c3:0d:27:ef:40:48:7e:28:bf:e8:06:d0: 79:18:f2:21:53:1b:d5:96:2b:c6:52:53:81:bd:b8:b1:49:e1: 3d:be:99:ea:64:f4:38:a4:2f:34:40:92:c7:e0:01:3b:aa:84: b6:00:ed:e3:03:12:1d:c6:89:63:ed:45:89:f2:df:24:7a:ae: e8:db:4e:e9:eb:22:2b:66:9a:95:85:f5:4a:ec:c1:24:a3:25: dc:0d:5b:e9:a6:a6:6d:5c:6e:8a:54:d5:21:98:f4:f2:86:f9: 12:45:dc:df:14:9e:1e:b7:53:44:d9:e8:d1:6e:37:fc:5c:41: 00:ba:86:62:85:47:a7:91:85:99:4c:c4:11:43:14:8f:c7:49: a2:76:5d:b8:8c:49:e6:ee:26:ef:e7:be:85:16:90:b7:9b:3a: 3d:15:fe:40:59:f1:80:67:ed:f2:34:a5:0e:d6:18:3c:66:c0: f1:c2:7d:40:7d:ad:1d:33:ad:a6:38:3c:48:d6:d6:e4:bd:3d: ba:de:34:21:cb:b4:43:73:0d:c0:c7:76:2a:18:8d:8a:93:4c: d3:05:1b:4b:5f:d3:91:70:e8:58:09:29:d1:32:5d:f1:6f:0a: 7e:73:94:6d:6a:c2:fd:eb:88:30:a4:a4:a2:ea:d0:65:2a:ef: ef:12:04:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4NrZFdpujYwZakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk YTIzNzAxZTMtNTY4Mi00ZTdhLWI1NTQtZjMzMWUzMGU3NmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdyK5gRhFptPdShHLODsZBu+aFYO8M8g1odH QXTNIkqfQLJ/mrfJf1d8f7XMyOtVOVX4BhPpuLtT7lNB4ohY97CFJHbcx/ELyTmY nnt5D9BqJahGB6B4pn7LNYaocEKHSpsqiujdsJcqcH7mZTt8qqzTBotQ/JQVagiZ c8uv0kMQy6sf5KuT+LIxFnYonGPloBSrH4lWaFkVIy4wbCepFwV3lq52VwR1O6tR iMIihhX6j9ZPyv98ktEuc+9gVh3LVbw2MCktS6vJcDMFMkMADbHfYGD7peDdxtQA 7a5BeD/V2F/Rjrf+U5IwRwaocthXBFCZsjhh3HfZ/i+JYi+4HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEU7IdschywYNQ4uUulzC+3s8GUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvZDE1MDdmYTEtNWU2MS0z ODQ4LWJlNzYtZjI3ZWU2ZmM1MTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElfhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALiJ+jzB4sMNJ+9ASH4ov+gG0HkY8iFTG9WWK8ZSU4G9uLFJ4T2+mepk 9DikLzRAksfgATuqhLYA7eMDEh3GiWPtRYny3yR6rujbTunrIitmmpWF9UrswSSj JdwNW+mmpm1cbopU1SGY9PKG+RJF3N8Unh63U0TZ6NFuN/xcQQC6hmKFR6eRhZlM xBFDFI/HSaJ2XbiMSebuJu/nvoUWkLebOj0V/kBZ8YBn7fI0pQ7WGDxmwPHCfUB9 rR0zraY4PEjW1uS9PbreNCHLtENzDcDHdioYjYqTTNMFG0tf05Fw6FgJKdEyXfFv Cn5zlG1qwv3riDCkpKLq0GUq7+8SBL0= -----END CERTIFICATE-----Generated at Sun Aug 10 05:00:59 2025 by rpki-client