$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/d1507fa1-5e61-3848-be76-f27ee6fc5174.roa File: d1507fa1-5e61-3848-be76-f27ee6fc5174.roa (raw, json) Hash identifier: bqUV7NTt23PmAKu1h0VtNs1npMVv2OVWxYt0bkwNEV4= Subject key identifier: 67:BF:CB:0D:10:5F:83:5A:C6:B9:7C:7C:20:8D:AB:47:A3:DB:F6:45 Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F4328584D65150A29AAE01A7F1BD927C0 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/d1507fa1-5e61-3848-be76-f27ee6fc5174.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 36445 IP address blocks: 149.248.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:0a:29:aa:e0:1a:7f:1b:d9:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=d23a02a0-d21d-47c1-a0ff-4a18a06a719e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:18:a9:68:66:e8:96:45:a8:cf:d2:48:a3:a2: df:1e:b5:57:50:ee:99:bb:d0:32:52:9d:81:b4:02: 82:62:65:41:41:91:80:c8:ed:32:58:25:a5:28:d9: ad:e1:d9:dd:e8:e0:1f:d5:63:3d:8c:81:ad:f8:90: 39:c5:d3:a2:67:1f:a6:48:94:55:35:34:89:47:c6: 6f:35:1b:87:dd:57:57:99:99:06:bd:94:bc:de:a1: 6b:54:c0:c4:50:de:88:54:f3:b9:43:29:b3:4c:47: 2c:6f:e0:24:ce:56:ef:c5:56:bd:22:87:95:f3:43: f9:4f:99:a4:85:d2:cb:5e:92:09:10:5b:9a:91:da: 9d:a1:24:b3:74:eb:72:b9:05:0a:0a:11:37:11:cf: b5:55:68:a6:9b:f5:87:69:23:0c:2b:13:28:1a:67: d2:15:d5:af:7f:52:59:15:be:52:ed:3c:5b:53:98: a0:52:30:a0:7e:81:f4:a1:72:72:e6:83:02:1c:37: af:4e:ee:67:a1:a3:b0:d8:df:90:d8:7a:5b:f0:c7: 45:90:18:fe:44:b5:5a:da:87:2a:38:9c:da:fe:02: 85:2c:c9:37:a9:20:7d:fd:a7:b6:75:12:d3:63:88: 39:42:6a:a3:75:62:47:8d:14:16:bc:94:73:2e:0b: 86:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BF:CB:0D:10:5F:83:5A:C6:B9:7C:7C:20:8D:AB:47:A3:DB:F6:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/d1507fa1-5e61-3848-be76-f27ee6fc5174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 149.248.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:fd:21:ed:8c:84:51:96:10:5c:06:03:a0:16:8d:ae:49:b3: 23:a8:67:83:ae:ec:cc:b0:c8:9b:44:2f:8a:13:1e:78:d0:61: 0b:67:0e:98:3f:81:e7:fa:5c:61:de:32:56:93:35:60:23:62: c1:7f:b6:33:e7:ec:a7:e1:b5:1d:67:1a:02:c4:44:e0:3d:71: 54:5f:be:1b:6e:de:2f:3b:a9:03:7e:5f:2a:7f:68:63:a2:57: 4f:b2:52:2d:1c:e4:a2:c1:7b:3d:39:7a:8e:bc:41:cb:b4:85: 7b:9c:dc:33:c2:cb:27:8d:ab:df:c4:18:2b:5e:b3:9e:07:2f: af:97:57:c2:83:71:55:7e:0f:dd:51:40:7b:38:6f:51:86:b2: 36:f6:bf:8e:77:dc:b4:57:df:e9:3d:52:7e:3f:ad:1f:f1:3e: f8:e2:df:3d:43:17:8f:11:bd:b9:4a:a5:15:39:33:dd:ea:8b: 1c:67:f9:2e:2f:25:09:9a:7e:a0:5d:c7:a3:b2:3b:47:49:4d: cc:3c:5c:f2:53:72:d4:6a:5f:84:4a:5b:d3:b7:d6:26:7b:64: 04:f2:56:f9:65:8d:27:32:ef:a1:28:79:51:7b:3c:0a:5f:16: 47:d2:77:af:63:68:f3:8b:57:41:f8:c8:a7:20:b1:64:45:8d: a6:96:09:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFQopquAafxvZJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ZDIzYTAyYTAtZDIxZC00N2MxLWEwZmYtNGExOGEwNmE3MTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBipaGbolkWoz9JIo6LfHrVXUO6Zu9AyUp2B tAKCYmVBQZGAyO0yWCWlKNmt4dnd6OAf1WM9jIGt+JA5xdOiZx+mSJRVNTSJR8Zv NRuH3VdXmZkGvZS83qFrVMDEUN6IVPO5QymzTEcsb+AkzlbvxVa9IoeV80P5T5mk hdLLXpIJEFuakdqdoSSzdOtyuQUKChE3Ec+1VWimm/WHaSMMKxMoGmfSFdWvf1JZ Fb5S7TxbU5igUjCgfoH0oXJy5oMCHDevTu5noaOw2N+Q2Hpb8MdFkBj+RLVa2ocq OJza/gKFLMk3qSB9/ae2dRLTY4g5QmqjdWJHjRQWvJRzLguGhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGe/yw0QX4Naxrl8fCCNq0ej2/ZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvZDE1MDdmYTEtNWU2MS0z ODQ4LWJlNzYtZjI3ZWU2ZmM1MTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElfhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/9Ie2MhFGWEFwGA6AWja5JsyOoZ4Ou7MywyJtEL4oTHnjQYQtnDpg/ gef6XGHeMlaTNWAjYsF/tjPn7KfhtR1nGgLEROA9cVRfvhtu3i87qQN+Xyp/aGOi V0+yUi0c5KLBez05eo68Qcu0hXuc3DPCyyeNq9/EGCtes54HL6+XV8KDcVV+D91R QHs4b1GGsjb2v4533LRX3+k9Un4/rR/xPvji3z1DF48RvblKpRU5M93qixxn+S4v JQmafqBdx6OyO0dJTcw8XPJTctRqX4RKW9O31iZ7ZATyVvlljScy76EoeVF7PApf FkfSd69jaPOLV0H4yKcgsWRFjaaWCYA= -----END CERTIFICATE-----Generated at Thu Apr 9 02:29:57 2026 by rpki-client