$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/4208a17f-4ecd-39fc-b10e-21a3d308011a.roa File: 4208a17f-4ecd-39fc-b10e-21a3d308011a.roa (raw, json) Hash identifier: Nddw4SJsU15YU0i+cNpcx5rK4Qx+fiyDcnPTLyZmcZo= Subject key identifier: C5:6B:83:12:DB:AB:A8:B0:1B:E9:CA:2A:BF:93:1C:7F:B8:77:2B:7F Certificate issuer: /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Certificate serial: 010D0C9F43285849E22524BC4D0DEE192D3E5840 Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/4208a17f-4ecd-39fc-b10e-21a3d308011a.roa Signing time: Sat 17 May 2025 13:01:02 +0000 ROA not before: Sat 17 May 2025 13:01:02 +0000 ROA not after: Fri 15 Aug 2025 13:01:02 +0000 asID: 36445 IP address blocks: 149.248.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e2:25:24:bc:4d:0d:ee:19:2d:3e:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84 Validity Not Before: May 17 13:01:02 2025 GMT Not After : Aug 15 13:01:02 2025 GMT Subject: CN=bc598717-f5b2-41c7-a43d-4d64bcb55d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:8c:1c:83:97:7b:db:57:c7:12:f5:db:31: 8d:58:cd:27:b3:03:db:91:04:d3:4e:8c:5b:37:94: c3:ea:4c:f9:e8:ae:7c:88:1f:d6:13:04:5e:25:31: d9:b0:ef:68:79:66:b5:9c:fc:eb:6a:62:fc:cf:0a: 70:86:3d:68:9c:b8:b3:bd:d3:52:3c:24:2b:a1:d1: da:8e:eb:58:41:de:64:ce:b2:51:f6:37:a5:62:3b: cb:bc:1d:21:3c:19:5d:c1:e4:ad:18:b6:30:b6:ad: f4:90:af:9d:37:f7:56:78:4e:3c:0a:de:f1:59:c5: 41:60:d7:d9:f2:16:68:2f:1a:1b:62:3c:15:02:c0: b2:80:c4:6e:5d:46:3c:45:73:25:c4:b0:f8:3d:8b: e6:cf:21:b2:61:cc:80:b7:ca:23:c3:80:cb:f5:1c: ff:8d:a2:74:30:be:72:af:0f:73:d6:0b:32:f1:ef: 76:07:6d:7f:69:b1:76:db:06:c9:13:a7:74:62:f6: 5c:9f:e9:4f:84:e6:e2:0c:47:55:3a:db:ac:e4:44: d9:cd:1d:cd:9f:94:92:d2:6f:98:54:6a:35:87:78: 4c:e4:df:0f:96:d6:44:76:d5:b5:65:c5:b8:2c:a8: 56:75:c5:3e:a1:67:3f:12:e1:34:b6:80:c9:b6:d5: bd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6B:83:12:DB:AB:A8:B0:1B:E9:CA:2A:BF:93:1C:7F:B8:77:2B:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/4208a17f-4ecd-39fc-b10e-21a3d308011a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl X509v3 Authority Key Identifier: keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer sbgp-ipAddrBlock: critical IPv4: 149.248.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e7:00:57:d7:86:68:5d:ce:49:c4:77:28:7c:68:1e:7a:3c: 6f:16:45:e7:47:2d:a4:64:36:04:6d:89:62:6a:38:bc:9b:ca: e6:53:c9:30:17:ae:42:7a:8a:53:36:77:0f:20:f3:be:f0:0d: 74:6d:e8:53:f2:af:da:06:11:e2:73:fd:fe:b6:8f:eb:b9:bd: af:f3:e4:66:ee:cd:01:a6:71:b8:e9:eb:64:ff:7c:16:14:aa: 47:3c:1d:67:37:db:bb:49:23:60:25:10:1a:ca:fa:e1:50:98: 1b:50:b0:9c:17:b1:ab:e4:63:ee:c6:60:03:42:9f:c6:36:ac: bc:7c:ef:2d:97:b3:2f:15:17:80:43:41:e4:b8:84:2c:e4:28: 8f:58:f0:b9:76:77:3d:3a:6a:75:70:d2:87:6a:df:de:a6:58: fa:12:4c:41:10:46:b6:34:ac:30:ce:bd:a9:4b:dd:e1:83:cb: 69:70:5f:91:38:1b:6e:b0:5c:f0:e2:d2:90:9d:ea:c1:ed:a4: de:de:a8:9c:31:af:f0:41:d1:71:52:d4:9d:d3:85:72:cd:5a: 6d:c6:d9:7d:82:b7:3b:91:5b:0e:30:5a:fc:49:09:e8:c9:04: f3:21:eb:5e:39:b7:98:df:71:5f:ab:39:aa:91:5a:b9:ba:f9: 17:8c:f5:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJSS8TQ3uGS0+WEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0 Zjg0MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk YmM1OTg3MTctZjViMi00MWM3LWE0M2QtNGQ2NGJjYjU1ZDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3SMHIOXe9tXxxL12zGNWM0nswPbkQTTToxb N5TD6kz56K58iB/WEwReJTHZsO9oeWa1nPzramL8zwpwhj1onLizvdNSPCQrodHa jutYQd5kzrJR9jelYjvLvB0hPBldweStGLYwtq30kK+dN/dWeE48Ct7xWcVBYNfZ 8hZoLxobYjwVAsCygMRuXUY8RXMlxLD4PYvmzyGyYcyAt8ojw4DL9Rz/jaJ0ML5y rw9z1gsy8e92B21/abF22wbJE6d0YvZcn+lPhObiDEdVOtus5ETZzR3Nn5SS0m+Y VGo1h3hM5N8PltZEdtW1ZcW4LKhWdcU+oWc/EuE0toDJttW9lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVrgxLbq6iwG+nKKr+THH+4dyt/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvNDIwOGExN2YtNGVjZC0z OWZjLWIxMGUtMjFhM2QzMDgwMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0 ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElfhQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEznAFfXhmhdzknEdyh8aB56PG8WRedHLaRkNgRtiWJqOLybyuZTyTAX rkJ6ilM2dw8g877wDXRt6FPyr9oGEeJz/f62j+u5va/z5GbuzQGmcbjp62T/fBYU qkc8HWc327tJI2AlEBrK+uFQmBtQsJwXsavkY+7GYANCn8Y2rLx87y2Xsy8VF4BD QeS4hCzkKI9Y8Ll2dz06anVw0odq396mWPoSTEEQRrY0rDDOvalL3eGDy2lwX5E4 G26wXPDi0pCd6sHtpN7eqJwxr/BB0XFS1J3ThXLNWm3G2X2CtzuRWw4wWvxJCejJ BPMh6145t5jfcV+rOaqRWrm6+ReM9TA= -----END CERTIFICATE-----Generated at Tue Jul 1 11:54:54 2025 by rpki-client