$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/79ed3811-8c6e-3b95-9f5d-978636481125.roa File: 79ed3811-8c6e-3b95-9f5d-978636481125.roa (raw, json) Hash identifier: TsWvfl7pIc8CAL8YLGETsGYCMDmgGkRTJs5lz9/L/cg= Subject key identifier: 35:56:81:D3:EF:67:FC:2E:8B:A4:78:E6:72:20:44:3F:9C:4B:70:B1 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584BCD9B16FE24990612DDE05880 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/79ed3811-8c6e-3b95-9f5d-978636481125.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 26744 IP address blocks: 147.124.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:16:fe:24:99:06:12:dd:e0:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=3be2a48f-87f7-4374-807d-38c358e15adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:2a:2b:8b:f8:20:84:6c:17:e2:1c:42:9b: cb:53:09:8f:96:63:5e:36:0c:98:26:43:6b:18:aa: f5:30:ca:50:60:0f:bb:ef:33:8c:7d:ad:0d:06:fa: 1b:b8:b4:59:b4:ba:e7:9d:24:4f:d0:f3:14:74:1c: 0e:33:ab:e9:f7:89:d0:31:67:47:8e:d9:a6:27:80: b5:dc:ac:0b:33:7e:f3:f0:cf:a1:8d:ee:4e:ad:c1: 02:a4:16:cf:83:04:97:d6:7a:1e:65:75:0b:97:f0: 3e:69:d3:6b:33:f4:f6:12:55:1d:4d:f7:a0:d4:84: d2:31:4b:28:a9:4e:d4:05:b1:81:27:25:22:81:a0: ab:d2:b1:ee:b0:b8:ca:f5:7d:22:2d:0a:4f:68:75: 82:c0:8c:d3:b8:d4:ad:51:5d:76:f4:e0:dd:67:a3: 0d:93:0a:40:74:bb:a9:32:22:98:ba:c4:81:a0:76: 28:68:24:f8:ea:4f:0f:a5:8e:81:24:1f:c7:85:2a: 69:ef:4e:de:90:d9:65:a0:25:56:b1:23:a7:11:0b: 46:5f:12:00:b1:68:bb:7f:57:b4:c3:2c:eb:79:a2: f9:cc:25:5a:35:c1:a3:f8:30:25:f7:8a:02:e0:5a: 8c:0f:bc:11:e6:c0:5b:3d:b4:70:45:25:ed:05:d6: bd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:56:81:D3:EF:67:FC:2E:8B:A4:78:E6:72:20:44:3F:9C:4B:70:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/79ed3811-8c6e-3b95-9f5d-978636481125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:13:25:76:dd:a8:20:f1:37:9e:d0:f0:16:a3:e2:7d:5e:87: 05:6b:41:77:29:c0:a1:dc:b5:36:f8:88:ce:36:86:6a:f6:48: 31:04:f6:09:d1:15:22:ee:c4:77:79:eb:34:e0:a5:b8:eb:5d: 30:e9:29:0b:8c:ce:40:72:39:e9:e9:cf:a8:df:37:13:c0:3d: 09:a9:f6:46:87:d4:14:2d:10:55:ad:8a:f5:8d:7a:e1:d6:f2: 31:3d:f7:85:da:ba:08:91:93:a3:8f:c7:59:fe:2a:a7:18:3e: ac:8a:35:a4:af:72:6f:dd:be:35:5d:ca:50:cd:43:3f:12:bc: 7e:34:f7:09:71:bb:63:97:f1:83:e3:64:97:9d:6f:c7:cb:53: 22:a9:1c:38:98:cb:83:5e:be:8d:41:87:90:b0:5a:6b:43:6b: ce:97:e8:82:d7:17:cd:20:0c:02:72:9b:77:61:58:89:b3:ae: d0:55:d7:b4:c2:10:8b:ac:c6:f0:b1:1e:69:db:cb:45:a8:c2: db:09:8a:18:85:59:3e:db:5e:9e:c6:e5:c5:00:20:e3:0c:a6: 40:6e:46:22:5c:45:f6:92:2e:09:a2:bc:f7:eb:8f:d0:74:57: b3:af:8b:04:2c:f2:a9:3c:e2:d2:c9:29:a0:10:c2:0f:55:8c: 98:88:57:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmxb+JJkGEt3gWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk M2JlMmE0OGYtODdmNy00Mzc0LTgwN2QtMzhjMzU4ZTE1YWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbIqK4v4IIRsF+IcQpvLUwmPlmNeNgyYJkNr GKr1MMpQYA+77zOMfa0NBvobuLRZtLrnnSRP0PMUdBwOM6vp94nQMWdHjtmmJ4C1 3KwLM37z8M+hje5OrcECpBbPgwSX1noeZXULl/A+adNrM/T2ElUdTfeg1ITSMUso qU7UBbGBJyUigaCr0rHusLjK9X0iLQpPaHWCwIzTuNStUV129ODdZ6MNkwpAdLup MiKYusSBoHYoaCT46k8PpY6BJB/HhSpp707ekNlloCVWsSOnEQtGXxIAsWi7f1e0 wyzreaL5zCVaNcGj+DAl94oC4FqMD7wR5sBbPbRwRSXtBda9/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVWgdPvZ/wui6R45nIgRD+cS3CxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvNzllZDM4MTEtOGM2ZS0z Yjk1LTlmNWQtOTc4NjM2NDgxMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk3zkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoTJXbdqCDxN57Q8Baj4n1ehwVrQXcpwKHctTb4iM42hmr2SDEE9gnR FSLuxHd56zTgpbjrXTDpKQuMzkByOenpz6jfNxPAPQmp9kaH1BQtEFWtivWNeuHW 8jE994XaugiRk6OPx1n+KqcYPqyKNaSvcm/dvjVdylDNQz8SvH409wlxu2OX8YPj ZJedb8fLUyKpHDiYy4Nevo1Bh5CwWmtDa86X6ILXF80gDAJym3dhWImzrtBV17TC EIusxvCxHmnby0WowtsJihiFWT7bXp7G5cUAIOMMpkBuRiJcRfaSLgmivPfrj9B0 V7OviwQs8qk84tLJKaAQwg9VjJiIVww= -----END CERTIFICATE-----Generated at Sun Nov 16 22:09:48 2025 by rpki-client