$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/1d3bc39b-f1ab-31d8-a29b-578d7d8b95f3.roa File: 1d3bc39b-f1ab-31d8-a29b-578d7d8b95f3.roa (raw, json) Hash identifier: /0SWPl2vn+vUTV4zNbmuV1fsl51CViPXvT5j0jORtPw= Subject key identifier: 10:B0:E9:16:8C:00:48:AB:3C:6E:40:B0:B4:B2:16:51:E5:8D:01:B3 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584BCD9B177336641A3D42A01980 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/1d3bc39b-f1ab-31d8-a29b-578d7d8b95f3.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 393740 IP address blocks: 147.124.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:17:73:36:64:1a:3d:42:a0:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=cde40316-537f-4b49-95a5-34a7c7ec2c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:30:62:63:28:71:df:8a:09:47:fa:3d:6e:8b: ae:45:c3:24:8d:f3:8d:41:ec:51:56:2d:f6:04:3d: 13:50:cc:87:cb:79:95:51:e4:c1:43:fb:ec:bd:8b: 6d:53:7f:ac:41:4e:a2:ab:9f:60:4a:f7:7a:58:b0: 82:44:95:ec:45:20:84:f6:75:9a:ff:f8:ce:19:d2: 78:32:4d:b4:94:28:62:84:45:d4:40:7f:2b:8f:f9: 47:32:2d:4a:23:55:25:d4:de:47:58:02:08:3c:3a: 19:23:7a:45:a1:92:4d:05:69:38:eb:02:99:08:a5: 21:2a:9b:c3:d1:29:f4:15:27:b1:0b:03:32:8a:a1: 2e:59:fa:c2:cd:6e:8d:3c:b5:4c:bf:c8:8f:d0:14: 17:b5:af:14:a0:52:0d:7f:85:6d:34:14:b5:6e:f8: 6a:32:83:e7:ba:dd:3d:55:fe:19:2c:0c:d3:13:74: 1c:14:9c:ec:54:1e:af:f3:30:a1:6e:ef:e1:52:f5: 41:6f:fb:8d:52:27:e8:14:47:5c:3b:21:b6:0e:6b: 2e:ab:e4:33:f2:3f:2a:8f:8e:0d:7b:c1:1a:df:2c: d4:29:bc:5a:94:f1:8a:69:7e:96:dd:de:81:50:38: 0a:02:1d:13:45:ba:49:69:73:62:50:fd:3e:67:73: c5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B0:E9:16:8C:00:48:AB:3C:6E:40:B0:B4:B2:16:51:E5:8D:01:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/1d3bc39b-f1ab-31d8-a29b-578d7d8b95f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:3f:c4:bd:97:d2:cc:0b:44:ed:b3:ae:2c:14:57:98:76:69: 98:fe:ca:37:80:51:dc:fb:d3:cf:f7:89:f3:a5:63:c2:5c:d9: 6b:a4:30:ee:e4:33:60:45:e5:39:93:61:1e:5a:4b:6f:1c:b6: e8:b3:a5:19:b3:93:3b:cb:85:df:5d:91:ef:9d:d3:77:65:d3: 26:f8:9c:9c:de:22:e3:54:02:66:fe:2a:46:3c:94:22:0c:06: 30:f8:88:b4:a1:ab:85:df:98:fe:6f:70:97:6f:99:ab:ec:aa: 4b:a0:13:10:0f:9d:43:a6:35:34:1b:38:80:ea:57:d0:13:d1: 8f:3d:88:aa:6d:aa:97:a7:e1:da:4e:e3:75:3e:d7:61:29:ab: a4:f1:f8:da:00:cf:6e:cb:df:01:63:b1:cb:d8:a0:8b:16:c8: c9:a2:e6:37:e9:3a:65:c2:c6:25:98:cc:c1:7b:b4:e5:a7:54: 0a:f8:36:99:64:ce:97:c5:46:fc:13:ad:02:1f:77:b5:e2:1e: 0d:f4:f7:8e:e0:2f:5a:64:0e:e9:e7:62:0c:a1:53:70:be:d3: a6:26:96:e7:93:ea:c3:b4:b7:03:6f:50:c3:c5:a7:5e:e5:27: 87:d2:aa:a7:d4:87:ad:44:c8:f2:24:26:83:94:fe:b2:95:fe: 39:78:ee:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmxdzNmQaPUKgGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk Y2RlNDAzMTYtNTM3Zi00YjQ5LTk1YTUtMzRhN2M3ZWMyYzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDBiYyhx34oJR/o9bouuRcMkjfONQexRVi32 BD0TUMyHy3mVUeTBQ/vsvYttU3+sQU6iq59gSvd6WLCCRJXsRSCE9nWa//jOGdJ4 Mk20lChihEXUQH8rj/lHMi1KI1Ul1N5HWAIIPDoZI3pFoZJNBWk46wKZCKUhKpvD 0Sn0FSexCwMyiqEuWfrCzW6NPLVMv8iP0BQXta8UoFINf4VtNBS1bvhqMoPnut09 Vf4ZLAzTE3QcFJzsVB6v8zChbu/hUvVBb/uNUifoFEdcOyG2Dmsuq+Qz8j8qj44N e8Ea3yzUKbxalPGKaX6W3d6BUDgKAh0TRbpJaXNiUP0+Z3PFhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCw6RaMAEirPG5AsLSyFlHljQGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMWQzYmMzOWItZjFhYi0z MWQ4LWEyOWItNTc4ZDdkOGI5NWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk3zmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMY/xL2X0swLRO2zriwUV5h2aZj+yjeAUdz708/3ifOlY8Jc2WukMO7k M2BF5TmTYR5aS28ctuizpRmzkzvLhd9dke+d03dl0yb4nJzeIuNUAmb+KkY8lCIM BjD4iLShq4XfmP5vcJdvmavsqkugExAPnUOmNTQbOIDqV9AT0Y89iKptqpen4dpO 43U+12Epq6Tx+NoAz27L3wFjscvYoIsWyMmi5jfpOmXCxiWYzMF7tOWnVAr4Nplk zpfFRvwTrQIfd7XiHg30947gL1pkDunnYgyhU3C+06YmlueT6sO0twNvUMPFp17l J4fSqqfUh61EyPIkJoOU/rKV/jl47is= -----END CERTIFICATE-----Generated at Sun Nov 16 22:08:12 2025 by rpki-client