$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa File: be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa (raw, json) Hash identifier: G9g1+iFkdwJe7Prx54Q7/IRt1WZdH42o6IWTmDUD+lQ= Subject key identifier: 62:47:D7:4F:CA:A8:D0:CF:62:08:AA:2C:E5:F8:2F:50:6C:95:90:64 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584BCD9B17992D6802EA37616080 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 393740 IP address blocks: 147.124.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:17:99:2d:68:02:ea:37:61:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=161a18ed-faa9-4829-b162-185e28591af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:83:b5:71:81:aa:55:21:67:b8:28:0a:f2: 0f:35:19:fa:e6:8b:4a:9e:fd:fb:f9:2f:83:88:0a: 62:d3:f9:ec:86:73:90:d2:33:bf:6a:ae:ca:6b:3d: 0d:9b:06:1f:45:5b:89:6b:74:6d:95:ea:44:03:8c: ee:c1:75:a5:01:6c:a7:56:5b:73:03:8e:61:df:21: 8b:7b:8e:56:7f:f7:11:7f:d9:00:a6:08:e2:0b:81: b5:2c:27:a1:6b:f4:2f:74:c5:f0:d0:dc:b5:55:4e: 4a:10:32:76:59:e4:c4:43:e6:3a:21:74:22:05:76: f7:f1:b5:68:46:7d:92:af:10:cb:95:ab:db:21:1e: 59:d4:a4:95:e6:b3:27:d8:0e:63:aa:0e:50:cb:a6: ce:8d:4b:66:36:c1:a7:c5:22:a1:51:c9:47:65:95: 6f:5a:07:1a:2b:e1:09:49:47:a1:3c:2a:92:5e:c5: 1e:82:2b:99:c7:bf:17:6c:c3:7b:51:d9:af:60:90: 4b:66:4a:25:6a:ca:63:97:c8:a1:ee:40:50:05:42: 1a:e8:37:0d:29:6f:e5:42:14:af:bb:ba:22:46:64: dd:78:7e:1d:a4:e8:d7:6f:28:36:be:74:d3:63:ef: fd:b8:9f:b7:c0:ae:aa:eb:e4:00:ea:36:92:2d:7c: c2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:47:D7:4F:CA:A8:D0:CF:62:08:AA:2C:E5:F8:2F:50:6C:95:90:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ac:6f:d1:8b:d3:d3:43:96:18:18:b6:3b:86:bd:cd:73:29: 49:0d:41:b3:93:a3:bf:ba:2a:59:3d:3f:82:84:82:65:f2:6e: 97:dd:b8:0b:6e:d8:d8:b8:bf:5c:30:71:bf:b8:02:f5:af:9f: 59:e4:b7:cb:ab:86:a4:7a:38:8d:0b:57:0d:4e:5f:1e:75:e4: a9:a1:cf:a9:c6:bd:41:04:ce:24:46:83:48:fc:d8:a2:61:54: d2:7d:6f:75:14:02:8b:8a:4d:1b:43:ca:f3:66:e2:89:64:84: 5b:80:5f:10:ae:45:3e:6a:50:b8:03:d9:0e:51:97:40:a5:99: 08:65:43:29:41:1e:3f:ed:4b:56:13:7d:b8:70:1d:97:f6:a7: d9:09:ba:18:da:1c:65:b7:ab:36:a8:9f:35:2c:94:1d:62:be: da:6e:db:bd:a0:25:e5:01:62:0a:7b:06:a5:a4:05:a5:48:11: b3:b8:89:41:0e:c6:33:22:93:35:4c:c5:38:16:a7:2d:2f:1e: 81:52:7a:7b:12:3d:cd:fe:c0:62:de:dc:4a:01:31:d8:f8:5e: 35:40:d5:45:b4:8d:cf:6b:03:de:de:68:21:cd:e0:91:69:e0: ac:d1:8c:a3:41:83:43:84:fc:00:30:54:15:4a:c7:2f:5e:42: 49:f3:13:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmxeZLWgC6jdhYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk MTYxYTE4ZWQtZmFhOS00ODI5LWIxNjItMTg1ZTI4NTkxYWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6+DtXGBqlUhZ7goCvIPNRn65otKnv37+S+D iApi0/nshnOQ0jO/aq7Kaz0NmwYfRVuJa3RtlepEA4zuwXWlAWynVltzA45h3yGL e45Wf/cRf9kApgjiC4G1LCeha/QvdMXw0Ny1VU5KEDJ2WeTEQ+Y6IXQiBXb38bVo Rn2SrxDLlavbIR5Z1KSV5rMn2A5jqg5Qy6bOjUtmNsGnxSKhUclHZZVvWgcaK+EJ SUehPCqSXsUegiuZx78XbMN7UdmvYJBLZkolaspjl8ih7kBQBUIa6DcNKW/lQhSv u7oiRmTdeH4dpOjXbyg2vnTTY+/9uJ+3wK6q6+QA6jaSLXzCWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJH10/KqNDPYgiqLOX4L1BslZBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvYmUzYTY5NWEtMWNiYy0z NWQ5LTg0NzYtMDE5YWNlMWMyZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3znMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqsb9GL09NDlhgYtjuGvc1zKUkNQbOTo7+6Klk9P4KEgmXybpfduAtu 2Ni4v1wwcb+4AvWvn1nkt8urhqR6OI0LVw1OXx515Kmhz6nGvUEEziRGg0j82KJh VNJ9b3UUAouKTRtDyvNm4olkhFuAXxCuRT5qULgD2Q5Rl0ClmQhlQylBHj/tS1YT fbhwHZf2p9kJuhjaHGW3qzaonzUslB1ivtpu272gJeUBYgp7BqWkBaVIEbO4iUEO xjMikzVMxTgWpy0vHoFSensSPc3+wGLe3EoBMdj4XjVA1UW0jc9rA97eaCHN4JFp 4KzRjKNBg0OE/AAwVBVKxy9eQknzE+s= -----END CERTIFICATE-----Generated at Sun Nov 16 22:11:20 2025 by rpki-client