$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/65b76c03-234d-329e-a05c-0710c292420d.roa File: 65b76c03-234d-329e-a05c-0710c292420d.roa (raw, json) Hash identifier: swgzGCCdxIX8BEfISChE/85pEKFaTGm7YTcnmhqeDq4= Subject key identifier: C0:46:4B:23:9E:08:90:A5:AB:6D:BD:46:53:9E:FA:CB:5E:7C:8F:88 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584BCD9B168F82FCFCAEBF4B17E8 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/65b76c03-234d-329e-a05c-0710c292420d.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 393740 IP address blocks: 147.124.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:16:8f:82:fc:fc:ae:bf:4b:17:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=5345d057-7698-4172-a19f-0ba726f8ad54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8e:4d:8f:7e:9f:1c:fc:27:e8:cd:0f:3c:87: ea:b4:e6:79:cd:df:01:6c:e6:8d:29:1e:c2:5e:c1: f7:d1:73:52:89:67:89:7d:dc:ee:e2:bc:4c:8c:e2: d5:22:0e:d8:43:aa:7a:86:70:af:d9:d4:aa:6c:0e: 89:ee:c3:40:e2:b3:23:54:6a:56:19:4e:09:be:4b: 82:13:af:25:8c:f2:f0:32:8f:c6:db:b9:75:64:93: bb:8d:75:51:e2:ad:8e:76:24:10:5f:bf:c3:49:0e: 1a:50:8a:ad:c5:ef:9d:45:c2:16:14:d7:7e:0c:fa: cd:d4:0c:d2:7a:9a:72:97:6c:18:4d:7c:4d:a0:5e: ea:19:90:e1:ba:a5:69:0f:51:06:47:3b:35:f1:b1: 72:eb:01:c2:37:da:b8:e2:d2:92:6e:61:c6:01:67: 44:58:e6:05:12:cd:6b:f3:82:86:37:e7:34:3a:c7: b3:be:47:c6:c3:e6:6e:d1:2e:9e:91:95:15:3a:67: 22:45:b8:6d:4c:65:ff:20:69:4e:9f:66:98:f7:9e: ce:15:75:be:f9:3c:d5:7b:57:36:93:e2:cf:cb:52: 09:29:02:c9:c5:84:fb:46:6b:c8:46:02:01:a5:9a: f7:20:ec:f5:c5:9f:ca:27:d0:21:0b:0a:59:35:59: 36:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:46:4B:23:9E:08:90:A5:AB:6D:BD:46:53:9E:FA:CB:5E:7C:8F:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/65b76c03-234d-329e-a05c-0710c292420d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:b2:41:0d:a8:b6:9b:8c:47:c7:f5:0d:ef:ec:0b:f7:0d:d2: aa:77:fa:10:d4:de:57:9e:88:32:63:57:87:5a:70:79:08:81: ea:fe:50:ce:8b:f5:88:26:c9:4f:5c:9a:02:62:49:e0:e8:3b: d5:6b:b3:d9:ce:f3:25:f5:75:f2:31:ac:0e:5d:4c:a5:ac:92: 14:6d:f5:f3:49:62:bb:dd:7e:6c:5b:ab:42:e7:03:96:2c:51: 00:a1:91:1b:bc:72:93:01:6f:af:6e:58:27:71:f0:8f:03:57: 3c:ae:46:b9:eb:d2:9b:42:0c:f2:27:3e:43:be:3b:f3:29:8b: 01:0b:b6:84:71:97:24:2d:29:2c:6c:25:2b:67:13:d4:20:62: 62:8e:e1:2e:21:08:0f:b1:b3:89:63:1d:9b:9d:2a:9c:a9:c9: 33:87:97:36:f5:25:4d:51:6a:43:90:4b:f0:d5:97:bc:cf:f8: 18:cf:0b:a2:5e:ac:ef:52:18:ff:44:8a:f6:02:81:4f:08:5c: 5e:e2:ce:3f:66:1e:24:9c:06:6c:10:b3:df:89:61:f4:a4:d3: f6:3d:2d:e3:7e:34:46:a7:ed:b5:bf:36:77:78:e8:f6:bd:d0: 27:e0:bc:64:c3:1e:c1:58:97:9f:eb:7b:b8:de:fa:9d:65:28: 4e:10:e8:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmxaPgvz8rr9LF+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTM0NWQwNTctNzY5OC00MTcyLWExOWYtMGJhNzI2ZjhhZDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI5Nj36fHPwn6M0PPIfqtOZ5zd8BbOaNKR7C XsH30XNSiWeJfdzu4rxMjOLVIg7YQ6p6hnCv2dSqbA6J7sNA4rMjVGpWGU4JvkuC E68ljPLwMo/G27l1ZJO7jXVR4q2OdiQQX7/DSQ4aUIqtxe+dRcIWFNd+DPrN1AzS eppyl2wYTXxNoF7qGZDhuqVpD1EGRzs18bFy6wHCN9q44tKSbmHGAWdEWOYFEs1r 84KGN+c0OsezvkfGw+Zu0S6ekZUVOmciRbhtTGX/IGlOn2aY957OFXW++TzVe1c2 k+LPy1IJKQLJxYT7RmvIRgIBpZr3IOz1xZ/KJ9AhCwpZNVk2vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBGSyOeCJClq229RlOe+stefI+IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvNjViNzZjMDMtMjM0ZC0z MjllLWEwNWMtMDcxMGMyOTI0MjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMOyQQ2otpuMR8f1De/sC/cN0qp3+hDU3leeiDJjV4dacHkIger+UM6L 9YgmyU9cmgJiSeDoO9Vrs9nO8yX1dfIxrA5dTKWskhRt9fNJYrvdfmxbq0LnA5Ys UQChkRu8cpMBb69uWCdx8I8DVzyuRrnr0ptCDPInPkO+O/MpiwELtoRxlyQtKSxs JStnE9QgYmKO4S4hCA+xs4ljHZudKpypyTOHlzb1JU1RakOQS/DVl7zP+BjPC6Je rO9SGP9EivYCgU8IXF7izj9mHiScBmwQs9+JYfSk0/Y9LeN+NEan7bW/Nnd46Pa9 0CfgvGTDHsFYl5/re7je+p1lKE4Q6OA= -----END CERTIFICATE-----Generated at Sun Nov 16 22:08:46 2025 by rpki-client