$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6b42c307-dd20-3ba7-92b8-55e8a7e39301.roa File: 6b42c307-dd20-3ba7-92b8-55e8a7e39301.roa (raw, json) Hash identifier: lHVZc3cMml7Z1HsC+i6StwM0LsQTG+6wYXN/Gc0L2SU= Subject key identifier: AE:9C:31:18:C3:2E:06:40:9D:26:63:95:4C:A5:90:D3:B4:5F:C9:DD Certificate issuer: /CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Certificate serial: 010D0C9F4328584EF717B7EBC5722017ABC0BBD0 Authority key identifier: F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6b42c307-dd20-3ba7-92b8-55e8a7e39301.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 0 IP address blocks: 149.112.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:b7:eb:c5:72:20:17:ab:c0:bb:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf65f5a-6dd3-4c5d-9a94-33050d9022d6 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=46f6bca1-02d3-4d5d-a69a-9bc8914bf7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:92:5e:8a:5b:46:4c:17:75:80:bd:d7:49: b6:37:17:cc:65:cd:df:0d:ac:1d:1b:da:26:97:0c: ff:70:ea:64:a7:66:32:0f:64:b2:1c:bb:24:df:c3: f5:31:b7:38:5f:90:42:2f:d6:56:97:c4:5d:3c:73: 2f:e9:c7:d3:d6:a3:47:32:70:8d:98:29:e1:7e:54: 42:cb:5c:c7:b0:ed:01:63:9f:de:c1:74:28:c9:63: 70:53:19:9f:3e:96:8b:68:9b:ff:3f:61:c5:83:5e: 85:4b:31:ee:d9:92:5a:f7:16:ae:3c:d9:5c:05:55: 52:39:06:44:de:2a:09:e7:15:54:4b:e5:0d:0e:40: b4:f2:bf:44:63:d4:91:22:51:53:e6:95:63:cb:20: bd:ce:dd:13:bb:9b:75:7e:9d:9e:3b:b5:0b:63:9a: 68:61:b3:dc:e3:92:78:f2:61:b9:0c:a7:92:a6:60: 7c:ba:9d:9f:6b:b3:e2:f9:b4:69:6d:78:a2:a8:ac: d9:51:82:c7:f7:c8:00:b9:09:17:c6:e8:2d:b3:bf: 21:51:b9:2b:a4:29:c3:41:f7:f9:33:aa:cd:45:68: 13:b9:a9:ae:3d:06:63:84:5d:5d:7d:81:66:4a:77: 4e:b5:10:05:7d:17:85:7d:6e:97:6e:57:a6:c4:45: 6f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9C:31:18:C3:2E:06:40:9D:26:63:95:4C:A5:90:D3:B4:5F:C9:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6b42c307-dd20-3ba7-92b8-55e8a7e39301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.crl X509v3 Authority Key Identifier: keyid:F2:A4:2B:DE:FA:FE:77:93:4E:14:AF:9C:ED:16:EC:DD:01:9F:E4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6bf65f5a-6dd3-4c5d-9a94-33050d9022d6.cer sbgp-ipAddrBlock: critical IPv4: 149.112.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d4:27:a5:4a:aa:74:e4:30:65:cc:e2:0f:eb:95:71:e4:36: ac:5e:64:4d:c2:5f:47:ba:2b:77:85:26:df:93:88:ff:c8:29: 87:be:10:ac:70:34:aa:2a:b8:86:20:f6:04:1c:f5:44:21:66: a7:cb:4f:c2:86:e8:87:66:c1:31:c7:76:53:5c:c6:fc:b0:7e: 31:7f:2e:54:d9:70:36:fb:49:bb:f0:01:49:c5:3e:0e:64:32: ff:65:f2:a7:f9:36:fe:7a:18:71:da:8d:22:dc:0f:d5:e7:c5: 71:87:55:ab:2b:51:4c:07:23:d9:ce:f4:92:2f:8a:f5:7d:38: e0:84:b1:f2:83:28:7f:53:b9:19:2a:9a:59:fa:c8:76:29:73: d8:e5:f9:da:c6:c3:3f:9c:11:03:4e:ab:ba:9e:21:69:bd:6e: 9d:83:24:6c:01:ac:a8:17:2d:75:27:e7:81:97:a5:a9:b8:50: 78:94:07:7d:59:41:ec:0a:e6:03:70:cd:23:0e:93:33:28:be: 54:83:db:a6:37:4c:64:ff:fb:11:48:de:0c:e7:28:8e:37:c0: ae:03:ad:27:7c:b9:c7:cc:2f:02:1b:71:a4:72:13:93:98:d1: 16:95:08:6d:a0:83:eb:6b:2a:d6:3f:3f:f0:9b:50:20:88:de: f3:cd:18:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F7frxXIgF6vAu9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmNjVmNWEtNmRkMy00YzVkLTlhOTQtMzMwNTBkOTAy MmQ2MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NDZmNmJjYTEtMDJkMy00ZDVkLWE2OWEtOWJjODkxNGJmN2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHmSXopbRkwXdYC910m2NxfMZc3fDawdG9om lwz/cOpkp2YyD2SyHLsk38P1Mbc4X5BCL9ZWl8RdPHMv6cfT1qNHMnCNmCnhflRC y1zHsO0BY5/ewXQoyWNwUxmfPpaLaJv/P2HFg16FSzHu2ZJa9xauPNlcBVVSOQZE 3ioJ5xVUS+UNDkC08r9EY9SRIlFT5pVjyyC9zt0Tu5t1fp2eO7ULY5poYbPc45J4 8mG5DKeSpmB8up2fa7Pi+bRpbXiiqKzZUYLH98gAuQkXxugts78hUbkrpCnDQff5 M6rNRWgTuamuPQZjhF1dfYFmSndOtRAFfReFfW6XblemxEVvHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6cMRjDLgZAnSZjlUylkNO0X8ndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2 NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1MGQ5MDIyZDYvNmI0MmMzMDctZGQyMC0z YmE3LTkyYjgtNTVlOGE3ZTM5MzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmJmNjVmNWEtNmRkMy00YzVkLTlh OTQtMzMwNTBkOTAyMmQ2LzZiZjY1ZjVhLTZkZDMtNGM1ZC05YTk0LTMzMDUwZDkw MjJkNi5jcmwwHwYDVR0jBBgwFoAU8qQr3vr+d5NOFK+c7Rbs3QGf5MQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82YmY2NWY1YS02ZGQzLTRjNWQtOWE5NC0zMzA1 MGQ5MDIyZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXBFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzUJ6VKqnTkMGXM4g/rlXHkNqxeZE3CX0e6K3eFJt+TiP/IKYe+EKxw NKoquIYg9gQc9UQhZqfLT8KG6IdmwTHHdlNcxvywfjF/LlTZcDb7SbvwAUnFPg5k Mv9l8qf5Nv56GHHajSLcD9XnxXGHVasrUUwHI9nO9JIvivV9OOCEsfKDKH9TuRkq mln6yHYpc9jl+drGwz+cEQNOq7qeIWm9bp2DJGwBrKgXLXUn54GXpam4UHiUB31Z QewK5gNwzSMOkzMovlSD26Y3TGT/+xFI3gznKI43wK4DrSd8ucfMLwIbcaRyE5OY 0RaVCG2gg+trKtY/P/CbUCCI3vPNGFI= -----END CERTIFICATE-----Generated at Wed Sep 30 07:24:37 2026 by rpki-client