$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/749fa281-1ea4-3ef4-aecf-35cea6045162.roa File: 749fa281-1ea4-3ef4-aecf-35cea6045162.roa (raw, json) Hash identifier: WE9L1vquZNwSXJcykzuyj2zLt+tXaE3KkA+kJgz7Wgg= Subject key identifier: 88:32:4B:0A:D6:97:E6:4E:87:1E:E5:CE:51:21:0C:64:E6:3D:F5:D3 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584BCD9B167A659666DA3C179440 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/749fa281-1ea4-3ef4-aecf-35cea6045162.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 393740 IP address blocks: 147.124.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:16:7a:65:96:66:da:3c:17:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=a95b0325-65db-4f5c-bf17-f08735c0c695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d8:f8:4c:4c:a9:a0:d0:35:a3:86:45:8f:33: 40:e7:4d:d8:6b:f6:bb:e9:e0:98:f4:6d:a6:82:89: 6b:30:b8:7e:fc:95:88:5f:b4:eb:20:65:e1:76:cd: 11:87:2e:8f:88:25:32:72:8d:c2:32:92:0c:8c:d4: 3c:cb:e1:13:5e:68:6d:0b:1b:83:fd:77:82:5e:07: 99:c7:fa:d2:1e:cd:dd:d4:5b:01:0c:9a:72:d1:fb: 6b:19:d2:15:d1:b8:b5:7a:de:60:48:18:d3:cf:ca: 06:36:ad:a0:a4:b7:f1:a5:8f:ba:03:a9:b0:bb:33: cc:33:7d:87:2d:95:69:14:17:96:94:11:64:65:ad: e1:72:62:e8:2f:52:ef:dc:fc:c0:27:44:2a:f1:c3: cb:8c:9d:a7:c0:cc:da:47:ec:ed:02:0c:c0:dd:cd: 8d:df:ca:78:a7:cb:98:79:95:3b:6f:48:ac:79:ed: c5:57:7b:9a:70:73:5b:cb:18:4e:d2:4c:67:96:f2: 70:7f:b6:f8:d9:68:cb:bb:b2:0e:a3:c3:9e:89:53: 71:5e:0f:f3:fc:a7:d5:88:52:9a:34:da:71:1a:1c: bc:2c:1b:4a:8c:b5:87:3f:91:dd:55:89:73:fb:9b: 6a:26:ac:d6:69:f3:10:58:c9:3c:c1:50:e7:06:22: c5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:32:4B:0A:D6:97:E6:4E:87:1E:E5:CE:51:21:0C:64:E6:3D:F5:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/749fa281-1ea4-3ef4-aecf-35cea6045162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:2c:41:64:94:7f:55:f4:78:82:32:af:b0:8a:9e:37:f8:b3: 88:52:0a:98:94:b6:7c:f5:32:27:c2:64:88:13:26:6e:37:7d: 2b:28:df:34:4c:bf:d3:60:bd:0f:1f:a9:cc:dd:f5:3f:ad:4b: 79:32:16:d1:f2:e3:f8:ea:d9:d5:5a:c1:53:ba:0c:8a:e3:b3: 50:4f:66:f0:10:32:26:a9:2b:1f:55:c4:45:54:dc:5a:16:21: dd:bb:95:e9:98:c5:1b:98:c7:c7:ae:88:7c:d1:b5:3e:15:c5: 09:1a:bc:d7:fd:f1:9b:08:d2:b1:32:33:4e:c1:57:55:88:e2: 9e:a9:82:5b:12:0c:dc:07:7f:42:d2:b8:a8:6e:a8:f7:55:1f: 45:d0:96:86:7e:8a:b0:c4:81:cf:6e:ef:1e:93:47:09:e0:27: 50:b2:1d:a9:30:cc:cd:14:4a:80:1b:84:05:4b:e7:ba:3a:32: a0:ae:21:bc:b2:66:1e:91:a0:07:98:b0:e1:cf:fc:b7:cd:91: c0:1e:90:73:33:bf:c0:d2:5a:c4:09:db:de:2a:e1:96:1b:4d: 42:4e:a1:ca:1e:ff:4b:b0:2f:45:86:f1:c9:f4:47:4d:7a:c7: c1:82:5f:e5:61:91:cb:fd:48:ce:ff:8c:8e:d6:27:9e:85:18: dd:e4:fc:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmxZ6ZZZm2jwXlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk YTk1YjAzMjUtNjVkYi00ZjVjLWJmMTctZjA4NzM1YzBjNjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNj4TEypoNA1o4ZFjzNA503Ya/a76eCY9G2m golrMLh+/JWIX7TrIGXhds0Rhy6PiCUyco3CMpIMjNQ8y+ETXmhtCxuD/XeCXgeZ x/rSHs3d1FsBDJpy0ftrGdIV0bi1et5gSBjTz8oGNq2gpLfxpY+6A6mwuzPMM32H LZVpFBeWlBFkZa3hcmLoL1Lv3PzAJ0Qq8cPLjJ2nwMzaR+ztAgzA3c2N38p4p8uY eZU7b0isee3FV3uacHNbyxhO0kxnlvJwf7b42WjLu7IOo8OeiVNxXg/z/KfViFKa NNpxGhy8LBtKjLWHP5HdVYlz+5tqJqzWafMQWMk8wVDnBiLFiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgySwrWl+ZOhx7lzlEhDGTmPfXTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvNzQ5ZmEyODEtMWVhNC0z ZWY0LWFlY2YtMzVjZWE2MDQ1MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgsQWSUf1X0eIIyr7CKnjf4s4hSCpiUtnz1MifCZIgTJm43fSso3zRM v9NgvQ8fqczd9T+tS3kyFtHy4/jq2dVawVO6DIrjs1BPZvAQMiapKx9VxEVU3FoW Id27lemYxRuYx8euiHzRtT4VxQkavNf98ZsI0rEyM07BV1WI4p6pglsSDNwHf0LS uKhuqPdVH0XQloZ+irDEgc9u7x6TRwngJ1CyHakwzM0USoAbhAVL57o6MqCuIbyy Zh6RoAeYsOHP/LfNkcAekHMzv8DSWsQJ294q4ZYbTUJOocoe/0uwL0WG8cn0R016 x8GCX+Vhkcv9SM7/jI7WJ56FGN3k/Ec= -----END CERTIFICATE-----Generated at Sun Nov 16 22:10:26 2025 by rpki-client