$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/3d7e51e5-cc22-379b-8813-0bc1cdfc955a.roa File: 3d7e51e5-cc22-379b-8813-0bc1cdfc955a.roa (raw, json) Hash identifier: HMAMDF1JC9lOYH3ebGP1mI2B5POjpmP4rHYWDRxztcs= Subject key identifier: 68:46:60:47:5D:75:68:B2:89:B8:BA:5A:71:6B:22:0E:35:8C:62:B3 Certificate issuer: /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Certificate serial: 010D0C9F4328584E54B4EAE408B299AFE0298000 Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/3d7e51e5-cc22-379b-8813-0bc1cdfc955a.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 63221 IP address blocks: 149.112.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:ea:e4:08:b2:99:af:e0:29:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=bad5d68d-37c5-45da-b7ba-b64b488d41be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ec:d1:0a:13:a8:22:a5:f5:96:38:b3:b2:bc: 72:e0:e9:23:ac:7c:6d:f2:27:f6:49:d3:f8:62:b2: ec:ff:a9:5e:22:84:9c:83:89:19:db:86:c7:a3:e8: 1f:7f:7b:db:c9:89:84:2c:40:5e:5c:1b:c0:fa:68: ac:8a:50:ba:a9:7a:0c:ba:a7:d3:86:b4:b6:20:f4: b5:f4:34:2c:31:8a:b3:19:db:e6:2e:f5:ef:04:2e: 1b:5a:99:61:0a:87:1c:89:8f:a3:b9:db:44:d2:ce: 00:83:88:c9:66:45:4a:e5:d7:61:05:82:c7:38:c4: 4e:ef:99:b3:4e:c5:2d:71:01:17:d0:b3:80:25:85: 3f:5c:93:95:49:09:b4:fc:8e:73:5f:e2:b0:0f:10: 58:4e:70:b8:e9:98:91:66:ff:39:87:48:b7:d3:ee: fb:41:c0:2a:9e:dd:b2:d0:06:a9:47:c7:9d:b6:ce: 35:47:af:01:65:d2:aa:b9:32:52:62:7d:e3:9c:03: c8:c5:c4:d5:a2:25:4d:01:20:25:4f:7c:f5:26:09: 7f:c5:6d:b6:05:6a:18:51:57:8b:a2:19:d0:fe:70: 65:6e:8b:e5:36:b2:1b:e3:dd:cf:c5:b8:a0:d2:6f: de:19:20:48:c3:4d:0a:d0:74:15:58:01:eb:fa:32: 86:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:46:60:47:5D:75:68:B2:89:B8:BA:5A:71:6B:22:0E:35:8C:62:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/3d7e51e5-cc22-379b-8813-0bc1cdfc955a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl X509v3 Authority Key Identifier: keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer sbgp-ipAddrBlock: critical IPv4: 149.112.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:9e:d6:c1:dd:db:e2:ff:e3:7c:ce:04:13:1d:5b:08:a1:b0: 5d:31:14:7b:c5:d7:14:19:8a:e1:39:5d:5b:d9:f0:ca:de:bd: 79:20:3e:91:36:9d:16:90:2c:11:79:91:69:36:ec:83:fc:c6: af:45:e6:63:77:b6:d7:12:ff:3a:a0:b9:87:1b:1a:76:c6:ca: 87:5e:4a:b9:63:62:ae:43:b8:7a:92:24:f9:26:bb:0b:59:92: 6a:6a:8e:9a:f6:30:ba:3a:62:d9:c3:47:1a:31:05:85:84:93: 9e:c6:08:54:b1:30:d4:30:f0:55:ec:b2:2e:c1:ad:aa:ad:aa: 09:0a:ff:42:a4:ba:1f:55:0a:f4:a1:86:ac:a9:1e:9a:2b:d2: b2:d4:b8:4d:d2:81:a7:ad:63:3d:93:d4:55:50:6a:64:31:c5: 62:28:62:9b:d8:6e:b7:59:47:2e:89:06:42:69:54:f3:4f:26: 3a:92:ef:94:e8:77:4a:27:e8:6e:af:a5:cb:cc:f7:f2:dd:9e: 53:2f:1d:7e:97:cf:78:f6:c6:8e:99:46:f2:e3:5f:d9:2f:39: e8:98:28:ed:7a:bb:5c:2c:5b:20:b8:68:a0:6b:8d:68:23:df: 69:4f:e8:f2:df:8d:dd:86:9b:76:e7:e6:12:91:2f:9a:d4:84: 07:2f:66:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtOrkCLKZr+ApgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy MmQ2MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk YmFkNWQ2OGQtMzdjNS00NWRhLWI3YmEtYjY0YjQ4OGQ0MWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoezRChOoIqX1ljizsrxy4OkjrHxt8if2SdP4 YrLs/6leIoScg4kZ24bHo+gff3vbyYmELEBeXBvA+misilC6qXoMuqfThrS2IPS1 9DQsMYqzGdvmLvXvBC4bWplhCocciY+judtE0s4Ag4jJZkVK5ddhBYLHOMRO75mz TsUtcQEX0LOAJYU/XJOVSQm0/I5zX+KwDxBYTnC46ZiRZv85h0i30+77QcAqnt2y 0AapR8edts41R68BZdKquTJSYn3jnAPIxcTVoiVNASAlT3z1Jgl/xW22BWoYUVeL ohnQ/nBlbovlNrIb493Pxbig0m/eGSBIw00K0HQVWAHr+jKGbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhGYEdddWiyibi6WnFrIg41jGKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2 NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvM2Q3ZTUxZTUtY2MyMi0z NzliLTg4MTMtMGJjMWNkZmM5NTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1 MGQ5MDIyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGe1sHd2+L/43zOBBMdWwihsF0xFHvF1xQZiuE5XVvZ8MrevXkgPpE2 nRaQLBF5kWk27IP8xq9F5mN3ttcS/zqguYcbGnbGyodeSrljYq5DuHqSJPkmuwtZ kmpqjpr2MLo6YtnDRxoxBYWEk57GCFSxMNQw8FXssi7BraqtqgkK/0Kkuh9VCvSh hqypHpor0rLUuE3SgaetYz2T1FVQamQxxWIoYpvYbrdZRy6JBkJpVPNPJjqS75To d0on6G6vpcvM9/LdnlMvHX6Xz3j2xo6ZRvLjX9kvOeiYKO16u1wsWyC4aKBrjWgj 32lP6PLfjd2Gm3bn5hKRL5rUhAcvZrc= -----END CERTIFICATE-----Generated at Tue Jul 7 11:54:41 2026 by rpki-client