$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3a3a1822-20e7-3c17-8785-5540cec75af6.roa File: 3a3a1822-20e7-3c17-8785-5540cec75af6.roa (raw, json) Hash identifier: WObqzbd6VQky6rXvNUVzaeQLu0yrTiAhoHSIMQ/x3TM= Subject key identifier: FD:87:0A:41:22:6C:50:99:E8:91:FE:AA:3B:B9:FD:FD:C7:DD:C9:45 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584CA32C6E2F62AA4A351B550B00 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3a3a1822-20e7-3c17-8785-5540cec75af6.roa Signing time: Sun 25 Jan 2026 02:00:31 +0000 ROA not before: Sun 25 Jan 2026 02:00:31 +0000 ROA not after: Sat 25 Apr 2026 01:00:31 +0000 asID: 26744 IP address blocks: 147.124.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a3:2c:6e:2f:62:aa:4a:35:1b:55:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Jan 25 02:00:31 2026 GMT Not After : Apr 25 01:00:31 2026 GMT Subject: CN=71bafc55-1d62-44e7-b341-23e02f3e3572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:86:4b:b1:38:b5:e5:63:a1:5c:65:fd:ed:0b: 79:d7:f0:22:af:b6:b5:88:a6:c8:98:5a:95:60:07: 87:54:fa:22:04:23:2d:8d:a9:50:2a:15:46:d8:53: 45:28:25:40:43:1d:3f:5b:1b:a0:27:99:87:00:c3: d1:86:96:52:40:de:12:aa:9d:d4:4b:39:fb:a4:da: 5c:b4:82:ca:97:9d:e9:4f:71:4b:0d:9c:6e:ac:25: 50:cb:bc:8f:b9:3b:3d:08:75:d6:e1:4a:00:98:95: 3e:ec:06:46:17:20:6c:11:40:8f:0f:80:f9:40:2f: 62:1d:71:c2:38:fe:af:55:a1:cc:72:4f:72:3b:43: ec:66:60:df:f6:89:b0:c5:03:1c:b3:06:ec:74:b2: 53:a3:9c:fe:81:53:79:a7:15:e9:70:49:a8:a7:28: 63:54:05:17:ad:32:4a:86:85:8c:58:e7:7f:13:f5: 9f:fb:ac:d9:a7:43:20:80:db:03:eb:29:9a:9c:fd: 7c:18:e1:62:60:a8:6c:87:73:33:b4:72:18:d6:95: 56:97:83:36:e3:20:37:5f:c0:ad:c1:f7:f1:cf:ef: e6:89:67:18:8b:9e:f8:33:70:a6:c6:ad:5a:27:a0: dc:47:22:dc:28:2e:35:4b:2c:41:1c:b0:ae:d7:66: ca:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:87:0A:41:22:6C:50:99:E8:91:FE:AA:3B:B9:FD:FD:C7:DD:C9:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3a3a1822-20e7-3c17-8785-5540cec75af6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e8:bd:c0:43:d2:6f:db:23:56:31:56:18:f1:4b:96:41:d1: c9:dc:86:7d:99:23:c8:8c:0c:9d:69:2e:78:8e:14:02:b8:b9: b8:01:c7:29:1d:3f:98:ff:f1:b2:a6:5b:8a:02:08:10:d7:83: 8d:9f:57:15:b1:d5:ab:a8:69:90:d2:c6:6b:2e:18:c6:6c:d2: 68:ea:5d:88:6b:ae:f8:8b:d7:b7:34:4c:22:fe:bc:31:53:b2: 25:71:6a:0f:06:5f:57:1b:c1:23:ff:c7:d8:ac:9d:ba:42:f0: fe:6c:5e:58:1e:aa:07:1c:0a:f9:dc:4a:19:ad:d4:bb:cc:ed: e9:2b:72:84:05:c5:fe:a6:30:74:c3:dc:96:05:ed:7a:3b:9f: d9:f1:ef:46:43:06:79:25:37:50:f1:56:5b:a0:54:b9:de:73: cf:f7:c4:47:a6:24:76:68:10:b5:5f:72:93:2d:5a:b1:e0:11: 00:95:1f:29:64:65:96:b6:eb:f3:ca:89:9d:36:97:38:2d:d6: 74:d5:c7:ce:03:d2:3f:93:19:08:8e:61:24:19:c5:8f:55:ab: 39:e2:1e:ef:b6:0d:5a:f4:d4:f0:60:d9:db:55:a2:79:2d:aa: 43:8c:b6:43:93:00:ba:72:80:8a:27:6d:2f:4e:28:dc:94:89: d1:61:f5:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyjLG4vYqpKNRtVCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI2MDEyNTAyMDAzMVoXDTI2MDQyNTAxMDAzMVowLzEtMCsGA1UEAxMk NzFiYWZjNTUtMWQ2Mi00NGU3LWIzNDEtMjNlMDJmM2UzNTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoZLsTi15WOhXGX97Qt51/Air7a1iKbImFqV YAeHVPoiBCMtjalQKhVG2FNFKCVAQx0/WxugJ5mHAMPRhpZSQN4Sqp3USzn7pNpc tILKl53pT3FLDZxurCVQy7yPuTs9CHXW4UoAmJU+7AZGFyBsEUCPD4D5QC9iHXHC OP6vVaHMck9yO0PsZmDf9omwxQMcswbsdLJTo5z+gVN5pxXpcEmopyhjVAUXrTJK hoWMWOd/E/Wf+6zZp0MggNsD6ymanP18GOFiYKhsh3MztHIY1pVWl4M24yA3X8Ct wffxz+/miWcYi574M3Cmxq1aJ6DcRyLcKC41SyxBHLCu12bK0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2HCkEibFCZ6JH+qju5/f3H3clFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvM2EzYTE4MjItMjBlNy0z YzE3LTg3ODUtNTU0MGNlYzc1YWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk3z2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITovcBD0m/bI1YxVhjxS5ZB0cnchn2ZI8iMDJ1pLniOFAK4ubgBxykd P5j/8bKmW4oCCBDXg42fVxWx1auoaZDSxmsuGMZs0mjqXYhrrviL17c0TCL+vDFT siVxag8GX1cbwSP/x9isnbpC8P5sXlgeqgccCvncShmt1LvM7ekrcoQFxf6mMHTD 3JYF7Xo7n9nx70ZDBnklN1DxVlugVLnec8/3xEemJHZoELVfcpMtWrHgEQCVHylk ZZa26/PKiZ02lzgt1nTVx84D0j+TGQiOYSQZxY9VqzniHu+2DVr01PBg2dtVonkt qkOMtkOTALpygIonbS9OKNyUidFh9Sg= -----END CERTIFICATE-----Generated at Mon Mar 2 12:43:02 2026 by rpki-client