$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa File: 2b4d14c3-782d-30d6-a683-951c6c83f730.roa (raw, json) Hash identifier: iyPdbJ6bwE1087hcLvOLalX16JT+JyQY6szRYCgmJLU= Subject key identifier: 0E:D6:D5:F5:46:0C:71:E5:A1:89:67:0E:2C:A8:58:AC:EA:09:97:8E Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584EE7BC9E4A09446D3FA3893300 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 36445 IP address blocks: 149.248.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:9e:4a:09:44:6d:3f:a3:89:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=c5628803-1062-44b5-b6bc-c56eeb5d2d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:04:68:83:ef:5b:5d:18:41:bf:3a:49:f8:38: 16:84:57:3a:45:eb:be:a3:83:bb:3c:d4:76:e8:dd: 7f:4a:79:13:2b:3b:de:ee:92:bb:d9:f3:a7:cb:84: e2:43:d2:51:51:fe:d8:a2:25:62:78:50:07:af:0b: 31:e2:5c:30:78:8b:95:59:8f:51:10:39:08:ac:00: 19:de:dc:8c:27:cb:0b:23:3e:5e:37:54:b5:23:71: a3:3a:9c:39:b6:2a:65:b5:9a:13:e0:66:6e:b2:f8: d8:eb:19:80:46:79:e0:11:93:55:e3:5e:65:5a:2b: 1c:48:26:16:cf:0a:03:4d:be:bb:1e:66:be:24:e1: 3a:71:f5:f4:92:75:b7:28:5d:3a:f6:c3:ac:e7:74: 2a:60:98:38:ab:de:88:0b:b7:ba:42:82:5c:8a:56: 20:a3:f1:eb:bc:86:6a:e7:09:b4:e5:9c:6b:f8:b5: c2:e8:59:80:f3:83:ac:7e:f6:49:fe:53:39:4d:b1: fd:0d:ab:a9:ef:23:3f:e4:5c:c2:3e:5b:4c:05:f9: e9:d9:1b:36:24:b6:31:fe:c8:34:8b:92:96:8d:ab: 93:07:b5:21:41:c4:6d:a8:a4:0f:10:c2:49:5a:ff: 5f:bc:4f:0c:d9:7b:be:84:32:a6:ec:55:37:5b:a0: 22:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D6:D5:F5:46:0C:71:E5:A1:89:67:0E:2C:A8:58:AC:EA:09:97:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/2b4d14c3-782d-30d6-a683-951c6c83f730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 149.248.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:4b:52:3c:9d:5c:70:4b:6c:79:ba:25:5b:ad:f3:78:f6:91: 85:d9:96:0b:94:9f:c5:95:e3:1a:bb:1f:f4:08:69:68:62:71: 08:3b:6d:cb:c0:95:3d:a5:3b:e6:e7:65:ef:68:73:c9:b2:7a: d0:f6:dd:72:bf:41:51:07:ed:86:c6:3e:84:45:86:9d:71:a0: ac:6a:5a:60:19:30:e0:b8:9f:f0:10:03:9d:6e:49:3e:d8:98: c5:cf:6f:17:a2:bd:de:9b:bc:91:6b:62:e9:bb:5f:0c:55:ca: 64:34:5f:9f:85:4f:4f:87:6d:58:e9:49:9a:4a:e2:80:9a:62: ce:d5:09:a1:20:2d:43:d8:f0:8f:17:3e:41:6f:e1:09:7e:77: 99:94:b7:f3:81:67:b6:8c:3c:a4:5b:f7:c8:7d:e5:58:31:ee: 53:d8:de:69:93:ae:b8:83:a6:64:a6:bf:22:07:ab:d2:a8:0a: aa:0f:4f:67:fe:c8:ce:42:2e:5a:37:97:40:f4:b4:a8:e1:68: 10:f6:5f:c2:37:7e:33:74:15:29:f3:c7:56:40:e6:15:7f:8e: 68:55:8e:c9:37:b3:00:50:1b:f7:a0:94:d2:a5:bf:42:22:c9: 29:34:78:eb:f6:e7:3d:46:dc:1a:5f:69:54:6a:8d:dd:e6:c4: 0c:9c:a2:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvJ5KCURtP6OJMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk YzU2Mjg4MDMtMTA2Mi00NGI1LWI2YmMtYzU2ZWViNWQyZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigRog+9bXRhBvzpJ+DgWhFc6Reu+o4O7PNR2 6N1/SnkTKzve7pK72fOny4TiQ9JRUf7YoiVieFAHrwsx4lwweIuVWY9REDkIrAAZ 3tyMJ8sLIz5eN1S1I3GjOpw5tipltZoT4GZusvjY6xmARnngEZNV415lWiscSCYW zwoDTb67Hma+JOE6cfX0knW3KF069sOs53QqYJg4q96IC7e6QoJcilYgo/HrvIZq 5wm05Zxr+LXC6FmA84OsfvZJ/lM5TbH9Daup7yM/5FzCPltMBfnp2Rs2JLYx/sg0 i5KWjauTB7UhQcRtqKQPEMJJWv9fvE8M2Xu+hDKm7FU3W6AiIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7W1fVGDHHloYlnDiyoWKzqCZeOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvMmI0ZDE0YzMtNzgyZC0z MGQ2LWE2ODMtOTUxYzZjODNmNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlfh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRLUjydXHBLbHm6JVut83j2kYXZlguUn8WV4xq7H/QIaWhicQg7bcvA lT2lO+bnZe9oc8myetD23XK/QVEH7YbGPoRFhp1xoKxqWmAZMOC4n/AQA51uST7Y mMXPbxeivd6bvJFrYum7XwxVymQ0X5+FT0+HbVjpSZpK4oCaYs7VCaEgLUPY8I8X PkFv4Ql+d5mUt/OBZ7aMPKRb98h95Vgx7lPY3mmTrriDpmSmvyIHq9KoCqoPT2f+ yM5CLlo3l0D0tKjhaBD2X8I3fjN0FSnzx1ZA5hV/jmhVjsk3swBQG/eglNKlv0Ii ySk0eOv25z1G3BpfaVRqjd3mxAycopQ= -----END CERTIFICATE-----Generated at Sat Aug 22 18:48:08 2026 by rpki-client