$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3dc4a1d1-b7f7-341e-b10e-6b2ab978e157.roa File: 3dc4a1d1-b7f7-341e-b10e-6b2ab978e157.roa (raw, json) Hash identifier: CdrMw+NqYjPl/9T9RU+zN7ULbDKwqP2Q1X+/OWsVZ9o= Subject key identifier: F1:B2:C4:BD:58:2A:D1:E3:5D:68:F5:03:3A:E7:9E:11:70:E8:35:09 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584BCD9B1711A98D20372F47A300 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3dc4a1d1-b7f7-341e-b10e-6b2ab978e157.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 26744 IP address blocks: 147.124.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:17:11:a9:8d:20:37:2f:47:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=43d3be7d-cae8-45e1-9d19-fc31e174b5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fd:eb:ee:3d:2c:d6:d1:3d:f0:74:20:5a:1b: 98:87:a2:d5:37:0f:8f:8f:60:75:93:89:d9:57:b2: 27:ee:4a:2a:de:6b:fc:e4:07:77:e0:da:8f:81:3c: 2a:eb:c1:0b:04:45:2c:b0:b6:9a:cc:39:5f:2c:30: 26:ed:57:0e:77:22:15:76:14:b6:32:93:a8:88:f6: 17:c9:56:59:97:87:aa:06:36:ef:8f:49:05:c8:65: 90:11:91:43:56:86:1f:8a:fe:fb:9c:aa:72:35:f5: 66:e1:9d:09:0c:af:cc:0e:2b:fd:cb:fe:07:1b:3a: 2b:71:3b:1f:ce:48:88:c2:33:3f:7d:d3:ea:53:28: 07:44:f9:ea:80:11:92:be:08:36:82:7f:54:ee:f0: cb:16:ea:9c:e8:f0:c2:74:58:67:07:eb:b3:79:e6: fe:53:35:d0:6a:84:34:20:28:9b:7e:80:ab:66:83: df:0e:8d:b8:82:f5:50:2e:9e:2e:c8:e4:6e:ab:ef: 9c:db:eb:1e:07:09:d7:aa:d1:22:4a:b1:33:7b:2a: ca:42:35:08:11:12:d0:d1:70:76:18:65:f7:ad:5f: b9:c2:7e:a9:01:f0:7c:d9:0a:30:3c:f6:82:03:61: ce:a0:bc:20:b1:ed:cb:92:5e:74:71:68:37:d4:a0: a6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B2:C4:BD:58:2A:D1:E3:5D:68:F5:03:3A:E7:9E:11:70:E8:35:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3dc4a1d1-b7f7-341e-b10e-6b2ab978e157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:e7:4b:f5:7d:85:59:52:20:a9:9a:56:37:d2:89:0d:51:cc: b6:d8:69:a3:21:e1:9c:1e:4c:72:81:21:c3:2a:35:dc:8d:e9: 2e:95:43:8d:51:6b:3c:85:39:78:79:53:43:3d:97:5d:aa:d0: 0b:b0:eb:57:43:b3:73:ae:d8:44:37:5f:97:fe:08:0a:47:1d: 8b:46:9c:2d:98:b0:01:79:19:f3:43:89:95:56:23:dd:6e:b5: c6:db:d9:61:c8:f3:db:77:77:33:9a:9d:bd:8f:06:e8:1f:90: 6f:fc:ba:7a:f9:f1:f1:6e:9b:82:5f:e4:a2:51:39:12:55:5b: fd:31:31:09:ee:64:f2:c3:fd:2d:25:7c:f0:4e:6e:83:5d:d0: bd:b6:19:50:7f:33:dc:05:31:6b:66:96:ea:62:bb:07:a6:06: 9b:e9:d2:a6:c5:8e:78:c7:a9:e9:2f:78:69:d8:07:d9:a2:96: 58:55:97:bc:5e:b4:54:16:07:09:7b:2b:8a:4a:4c:84:c0:0f: 7c:6a:2d:35:de:09:03:d0:0b:6a:57:07:9b:07:84:e1:4f:69: 15:e3:0d:2a:ac:af:07:91:07:18:8a:6d:59:24:cc:e5:96:0d: 4c:cc:32:ee:3c:f2:c1:0e:e9:ff:57:b4:a4:63:dd:e7:c3:3d: f8:8b:f7:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmxcRqY0gNy9HowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk NDNkM2JlN2QtY2FlOC00NWUxLTlkMTktZmMzMWUxNzRiNWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/3r7j0s1tE98HQgWhuYh6LVNw+Pj2B1k4nZ V7In7koq3mv85Ad34NqPgTwq68ELBEUssLaazDlfLDAm7VcOdyIVdhS2MpOoiPYX yVZZl4eqBjbvj0kFyGWQEZFDVoYfiv77nKpyNfVm4Z0JDK/MDiv9y/4HGzorcTsf zkiIwjM/fdPqUygHRPnqgBGSvgg2gn9U7vDLFuqc6PDCdFhnB+uzeeb+UzXQaoQ0 ICibfoCrZoPfDo24gvVQLp4uyORuq++c2+seBwnXqtEiSrEzeyrKQjUIERLQ0XB2 GGX3rV+5wn6pAfB82QowPPaCA2HOoLwgse3Lkl50cWg31KCmJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGyxL1YKtHjXWj1AzrnnhFw6DUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvM2RjNGExZDEtYjdmNy0z NDFlLWIxMGUtNmIyYWI5NzhlMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk3zkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvnS/V9hVlSIKmaVjfSiQ1RzLbYaaMh4ZweTHKBIcMqNdyN6S6VQ41R azyFOXh5U0M9l12q0Auw61dDs3Ou2EQ3X5f+CApHHYtGnC2YsAF5GfNDiZVWI91u tcbb2WHI89t3dzOanb2PBugfkG/8unr58fFum4Jf5KJRORJVW/0xMQnuZPLD/S0l fPBOboNd0L22GVB/M9wFMWtmlupiuwemBpvp0qbFjnjHqekveGnYB9millhVl7xe tFQWBwl7K4pKTITAD3xqLTXeCQPQC2pXB5sHhOFPaRXjDSqsrweRBxiKbVkkzOWW DUzMMu488sEO6f9XtKRj3efDPfiL9/0= -----END CERTIFICATE-----Generated at Sun Nov 16 22:08:10 2025 by rpki-client