$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/086e574f-3cf8-3bef-ae63-7651e1e09a3f.roa File: 086e574f-3cf8-3bef-ae63-7651e1e09a3f.roa (raw, json) Hash identifier: XQslCg1k5xc0/a9PXsw7gVBt2hqxTN519cHcuQfxrW4= Subject key identifier: A1:9F:2C:A9:69:54:EA:54:C6:47:AE:D6:52:02:8C:16:F0:7F:C0:E5 Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584E4559D290C01E688ADB96C300 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/086e574f-3cf8-3bef-ae63-7651e1e09a3f.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 36445 IP address blocks: 149.248.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:d2:90:c0:1e:68:8a:db:96:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=5f50d3f0-5bc3-4e18-99ca-a256da42fb45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e3:7e:0f:4a:8c:4c:b5:7a:8e:66:a6:2a:bd: 9f:17:87:85:4e:e5:fa:2b:fd:32:75:1b:db:b8:b9: 8a:86:a4:ad:b3:44:27:61:9c:5b:6e:38:71:49:ce: 18:32:39:50:2e:40:7b:9f:d3:9f:fe:6c:7d:f3:65: a9:2a:b2:49:e5:49:33:e8:07:5b:50:2f:73:ca:a3: b9:c6:99:01:69:55:b0:24:44:c2:14:92:98:07:b8: 12:05:2f:77:d4:79:e4:51:4d:1a:2f:e5:34:68:25: 5d:8e:31:6c:60:20:86:d0:7e:f3:a7:e6:e5:94:f5: ba:3b:bc:31:c9:c2:58:d3:9a:47:f0:c0:bf:86:26: b4:c1:13:46:11:99:06:e5:b3:30:3b:5e:86:68:86: e5:4a:58:26:6a:8a:f3:42:6d:f3:db:15:c3:0c:d9: 45:40:4b:71:59:35:04:f8:0a:80:59:49:57:a8:f6: 1b:ab:28:b5:72:5a:e9:26:6c:df:aa:ec:54:c1:11: 20:2e:49:dc:dd:f2:36:2c:0e:85:7c:31:84:41:05: b8:6a:35:16:7d:9b:9d:06:1d:d2:81:30:24:62:fe: d3:1f:ea:29:0b:67:af:5e:c6:a9:a3:0f:c6:ff:a7: 62:0a:ee:1f:77:54:43:52:93:a8:3d:fd:65:44:e7: 0d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9F:2C:A9:69:54:EA:54:C6:47:AE:D6:52:02:8C:16:F0:7F:C0:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/086e574f-3cf8-3bef-ae63-7651e1e09a3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 149.248.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:90:68:3a:18:bc:5d:d8:ac:7c:2f:7e:9e:e8:aa:01:1f:6c: 3d:0d:9f:5c:b0:22:69:a8:96:89:94:f1:59:14:ec:e4:35:2f: c5:6b:c4:6e:18:6f:77:c9:29:00:cb:70:95:3c:b0:68:76:68: 75:11:ab:0c:d5:7c:07:d5:71:47:3c:90:f8:a7:2b:7a:f6:35: 51:f1:10:cb:1b:59:ca:09:86:19:73:3c:77:95:3e:71:54:09: 33:07:da:7e:90:26:cc:d9:07:04:b1:da:b5:f0:3e:83:1b:b2: cf:7f:a4:5e:02:43:db:74:97:04:a0:47:d6:65:b1:44:7c:02: 29:25:41:90:b6:09:14:74:bc:ad:0a:f7:8a:43:3a:5f:39:64: 2a:7d:8f:3a:ec:64:3d:e3:4a:87:58:b0:b6:d5:3e:94:48:76: 47:a2:a5:41:86:b4:ba:f2:b1:88:42:f1:48:e9:88:94:7c:b9: c4:76:e1:bc:c7:ee:73:17:1a:8a:3e:50:c6:bc:52:4e:f6:22: f3:4d:24:be:7a:f4:85:06:5b:09:8a:2d:59:f9:f3:b8:6c:0f: 33:fe:e2:0f:ad:c6:1e:78:4e:10:13:f3:48:ab:f7:bf:ad:90: 97:68:44:b7:db:4b:de:d2:e5:96:20:e5:e6:99:c8:b6:6b:13: ab:3c:02:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWdKQwB5oituWwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk NWY1MGQzZjAtNWJjMy00ZTE4LTk5Y2EtYTI1NmRhNDJmYjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+N+D0qMTLV6jmamKr2fF4eFTuX6K/0ydRvb uLmKhqSts0QnYZxbbjhxSc4YMjlQLkB7n9Of/mx982WpKrJJ5Ukz6AdbUC9zyqO5 xpkBaVWwJETCFJKYB7gSBS931HnkUU0aL+U0aCVdjjFsYCCG0H7zp+bllPW6O7wx ycJY05pH8MC/hia0wRNGEZkG5bMwO16GaIblSlgmaorzQm3z2xXDDNlFQEtxWTUE +AqAWUlXqPYbqyi1clrpJmzfquxUwREgLknc3fI2LA6FfDGEQQW4ajUWfZudBh3S gTAkYv7TH+opC2evXsapow/G/6diCu4fd1RDUpOoPf1lROcNawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGfLKlpVOpUxkeu1lICjBbwf8DlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvMDg2ZTU3NGYtM2NmOC0z YmVmLWFlNjMtNzY1MWUxZTA5YTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClfhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+QaDoYvF3YrHwvfp7oqgEfbD0Nn1ywImmolomU8VkU7OQ1L8VrxG4Y b3fJKQDLcJU8sGh2aHURqwzVfAfVcUc8kPinK3r2NVHxEMsbWcoJhhlzPHeVPnFU CTMH2n6QJszZBwSx2rXwPoMbss9/pF4CQ9t0lwSgR9ZlsUR8AiklQZC2CRR0vK0K 94pDOl85ZCp9jzrsZD3jSodYsLbVPpRIdkeipUGGtLrysYhC8UjpiJR8ucR24bzH 7nMXGoo+UMa8Uk72IvNNJL569IUGWwmKLVn587hsDzP+4g+txh54ThAT80ir97+t kJdoRLfbS97S5ZYg5eaZyLZrE6s8AqQ= -----END CERTIFICATE-----Generated at Wed Jul 8 16:05:14 2026 by rpki-client