$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa File: 2b4d14c3-782d-30d6-a683-951c6c83f730.roa (raw, json) Hash identifier: nedAhNEWcyrlsS+H/e96uzn7FGbgrtlkmHjiRSP5aK4= Subject key identifier: C4:3D:F0:52:61:C3:F1:9A:BD:4B:09:73:3D:03:51:0B:0F:13:24:C8 Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584D65150A5B88D367F9AE805670 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 36445 IP address blocks: 149.248.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:0a:5b:88:d3:67:f9:ae:80:56:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=91b35f60-b80d-4dc2-88f1-80fb3e308610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:99:8a:6f:38:49:a4:6e:cb:b6:54:76:3b:33: f4:10:f0:31:57:57:66:78:56:10:24:a3:72:2f:41: 4b:36:8a:ff:b8:2f:90:42:16:a9:4a:a0:86:a2:8d: f6:49:b3:5c:35:53:bf:37:64:f9:ab:86:69:b2:78: 77:c0:ca:80:2d:4e:2c:d3:b7:3e:2e:93:6e:83:94: 2d:f6:8a:45:26:07:b9:51:a8:27:bd:e6:27:32:a0: d7:7f:aa:34:ce:f9:b0:71:bf:f9:11:81:98:9f:3a: 18:63:0f:81:51:64:7a:62:b4:5e:da:b5:b4:c9:d6: c1:e7:35:5e:ee:49:53:58:b4:aa:e4:7a:e3:a5:e1: 1d:27:f7:d8:d4:1e:11:fd:bc:91:a3:06:29:a8:f7: 8a:f7:f8:2f:03:ba:53:13:e6:b1:6d:cd:3d:89:00: a4:a4:e3:e4:cb:29:d8:c7:6b:b4:39:bd:06:f4:1c: cd:bc:ef:7b:a6:95:3d:0a:ef:a4:f5:5a:6e:d9:f4: 7c:99:17:d0:12:8e:2e:4b:4c:44:aa:20:5d:1c:f1: eb:79:0e:22:9e:c2:48:bc:f9:d7:ae:4b:05:f1:e1: 36:0b:60:e4:7d:b6:84:1c:eb:35:6d:9d:70:fb:f3: f1:25:c0:b2:2c:b7:66:35:91:f4:ee:5b:64:73:94: 8c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:3D:F0:52:61:C3:F1:9A:BD:4B:09:73:3D:03:51:0B:0F:13:24:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 149.248.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:80:f8:74:2a:13:31:20:da:7b:cd:32:60:30:60:c6:e2:7e: ce:cc:f6:b0:b2:6a:9c:59:0f:e5:f7:16:d6:59:0b:04:08:29: ac:be:37:c2:08:7f:c2:3c:b1:94:0b:c5:0c:ef:a1:09:e0:45: 7d:4b:cf:89:50:76:d6:87:4c:f1:1a:8e:37:48:b1:91:15:11: 7e:64:bd:f3:25:0f:1f:b1:47:58:40:95:d4:aa:ed:18:a7:93: 22:dc:49:7a:24:6d:0d:a0:4e:47:bf:cb:2c:6b:13:33:bf:4a: 14:c1:0a:21:66:59:2e:25:8e:7c:b0:9b:56:72:45:1d:66:10: 21:ff:70:0c:d3:a7:d8:34:51:81:0b:a4:5f:95:96:ec:38:81: cd:bf:b8:6e:fd:01:44:8e:7c:65:7f:8e:56:b7:c6:44:3b:5b: f7:45:99:5a:ed:fd:e6:25:c5:4d:7d:78:fb:64:a6:d2:44:15: 7b:ce:f5:51:71:92:a1:d7:b3:07:4e:54:da:76:e1:e4:b3:27: 10:af:00:7f:5f:ee:8b:66:44:cf:c0:66:c8:94:00:fd:f9:04: f4:2f:21:28:ae:16:33:c8:9c:a3:d5:0a:1a:d2:88:27:0a:a9: 38:e8:85:68:28:c2:7b:ed:01:8a:91:c5:fa:fa:ec:00:e1:ce: 4b:83:c6:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFQpbiNNn+a6AVnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk OTFiMzVmNjAtYjgwZC00ZGMyLTg4ZjEtODBmYjNlMzA4NjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZmKbzhJpG7LtlR2OzP0EPAxV1dmeFYQJKNy L0FLNor/uC+QQhapSqCGoo32SbNcNVO/N2T5q4Zpsnh3wMqALU4s07c+LpNug5Qt 9opFJge5UagnveYnMqDXf6o0zvmwcb/5EYGYnzoYYw+BUWR6YrRe2rW0ydbB5zVe 7klTWLSq5HrjpeEdJ/fY1B4R/byRowYpqPeK9/gvA7pTE+axbc09iQCkpOPkyynY x2u0Ob0G9BzNvO97ppU9Cu+k9Vpu2fR8mRfQEo4uS0xEqiBdHPHreQ4insJIvPnX rksF8eE2C2DkfbaEHOs1bZ1w+/PxJcCyLLdmNZH07ltkc5SMkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQ98FJhw/GavUsJcz0DUQsPEyTIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvMmI0ZDE0YzMtNzgyZC0z MGQ2LWE2ODMtOTUxYzZjODNmNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlfh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGA+HQqEzEg2nvNMmAwYMbifs7M9rCyapxZD+X3FtZZCwQIKay+N8II f8I8sZQLxQzvoQngRX1Lz4lQdtaHTPEajjdIsZEVEX5kvfMlDx+xR1hAldSq7Rin kyLcSXokbQ2gTke/yyxrEzO/ShTBCiFmWS4ljnywm1ZyRR1mECH/cAzTp9g0UYEL pF+Vluw4gc2/uG79AUSOfGV/jla3xkQ7W/dFmVrt/eYlxU19ePtkptJEFXvO9VFx kqHXswdOVNp24eSzJxCvAH9f7otmRM/AZsiUAP35BPQvISiuFjPInKPVChrSiCcK qTjohWgownvtAYqRxfr67ADhzkuDxgk= -----END CERTIFICATE-----Generated at Thu Apr 9 02:29:28 2026 by rpki-client