$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/863b3edd-5665-31ac-9d3b-2dc8e704039b.roa File: 863b3edd-5665-31ac-9d3b-2dc8e704039b.roa (raw, json) Hash identifier: fXFNQRviE6KSH022BeNULFcxM3PhOGrBSTLXD2d65ms= Subject key identifier: FA:C4:0A:37:B3:20:18:C6:DD:EC:FF:2D:43:D4:FA:39:2F:6B:90:7D Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584BC2706A983178245587E45F00 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/863b3edd-5665-31ac-9d3b-2dc8e704039b.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 26744 IP address blocks: 147.124.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:6a:98:31:78:24:55:87:e4:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=3956a18e-ad6c-46a3-aa30-85c6964740d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:2c:c4:4c:a1:b8:b4:a8:32:88:b5:99:39: ac:38:3e:bf:51:5f:78:c4:78:ed:23:26:66:7b:d3: b3:3e:e2:c9:a4:5b:f6:3d:08:35:31:98:a9:20:d9: 9c:01:d9:82:4f:f8:11:34:f4:02:ae:f5:9b:bc:f2: d7:63:dc:ef:25:96:98:c9:80:7a:86:4f:b2:3e:46: 12:73:54:f0:29:75:39:3d:d3:a2:7e:40:ab:f0:7f: 47:b9:75:ab:1b:6f:9b:f3:90:40:eb:fa:0b:41:76: 21:2b:8e:94:4e:82:05:c4:54:6e:32:a7:c5:bd:5b: 5d:35:63:9b:67:51:0f:7a:f0:0a:98:57:a0:15:7c: 06:0f:3d:75:17:14:b8:ee:01:3d:ce:9e:35:09:a8: 12:86:b0:78:20:f3:ed:61:8c:bd:42:b2:ef:89:f8: 21:9a:53:08:65:11:3a:f7:57:f7:d6:00:db:68:80: bc:0c:05:27:49:3e:9b:f4:98:e0:b2:0d:87:18:0a: b9:d4:e8:86:a0:8f:82:cd:8e:83:29:23:9b:01:12: 65:0a:aa:58:08:f2:dc:56:b0:1a:05:c0:02:6a:2f: 76:68:51:77:06:eb:c9:6d:2d:f7:e9:29:b9:8f:67: d3:c1:23:fe:f5:48:87:a4:6d:1a:32:f8:0c:1c:e9: 48:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C4:0A:37:B3:20:18:C6:DD:EC:FF:2D:43:D4:FA:39:2F:6B:90:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/863b3edd-5665-31ac-9d3b-2dc8e704039b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:6a:85:d0:8f:ed:cb:bb:b9:24:bc:8e:e8:22:58:4a:b8:c5: 3b:3f:8a:f5:6d:fd:07:01:33:c6:97:db:45:78:42:7c:d5:8c: 51:52:07:0e:94:4d:f5:06:a7:a1:85:f0:63:4d:4b:c6:7c:e7: 3d:b2:86:c3:27:b3:6a:44:36:d7:06:8c:70:20:37:b6:02:f9: 6c:a4:a7:94:12:68:82:a0:5f:7c:0a:9f:09:13:8a:5b:07:d2: 09:c5:74:9e:c0:b0:e1:b1:fb:f4:c8:59:0e:db:f7:0e:b7:a4: 33:a0:ff:6c:53:1b:56:ca:4d:6c:fd:30:cd:6b:b3:cd:7c:0c: 2e:b4:8f:84:e2:3f:13:45:43:91:82:20:b5:cd:d4:31:05:3f: 11:00:33:b1:50:1f:1f:51:b3:ba:47:50:48:a3:ed:72:45:19: 8c:b4:37:e3:c5:4b:a4:94:80:89:6e:a9:f3:75:0b:06:1c:d4: e8:98:4c:1e:20:ee:35:2a:1d:6b:04:73:77:e4:34:6f:c8:27: b6:fa:28:5b:e7:db:38:40:90:00:c2:33:db:55:f6:39:ab:57: ab:3b:05:18:cc:48:94:6b:84:c5:38:2c:0b:4b:ff:20:98:e2: 57:f0:2d:2f:1a:f0:8d:25:b6:c5:c3:9b:1f:fe:55:2b:33:c5: 38:b3:24:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcGqYMXgkVYfkXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk Mzk1NmExOGUtYWQ2Yy00NmEzLWFhMzAtODVjNjk2NDc0MGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOcsxEyhuLSoMoi1mTmsOD6/UV94xHjtIyZm e9OzPuLJpFv2PQg1MZipINmcAdmCT/gRNPQCrvWbvPLXY9zvJZaYyYB6hk+yPkYS c1TwKXU5PdOifkCr8H9HuXWrG2+b85BA6/oLQXYhK46UToIFxFRuMqfFvVtdNWOb Z1EPevAKmFegFXwGDz11FxS47gE9zp41CagShrB4IPPtYYy9QrLvifghmlMIZRE6 91f31gDbaIC8DAUnST6b9Jjgsg2HGAq51OiGoI+CzY6DKSObARJlCqpYCPLcVrAa BcACai92aFF3BuvJbS336Sm5j2fTwSP+9UiHpG0aMvgMHOlIAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrECjezIBjG3ez/LUPU+jkva5B9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvODYzYjNlZGQtNTY2NS0z MWFjLTlkM2ItMmRjOGU3MDQwMzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3zyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdqhdCP7cu7uSS8jugiWEq4xTs/ivVt/QcBM8aX20V4QnzVjFFSBw6U TfUGp6GF8GNNS8Z85z2yhsMns2pENtcGjHAgN7YC+Wykp5QSaIKgX3wKnwkTilsH 0gnFdJ7AsOGx+/TIWQ7b9w63pDOg/2xTG1bKTWz9MM1rs818DC60j4TiPxNFQ5GC ILXN1DEFPxEAM7FQHx9Rs7pHUEij7XJFGYy0N+PFS6SUgIluqfN1CwYc1OiYTB4g 7jUqHWsEc3fkNG/IJ7b6KFvn2zhAkADCM9tV9jmrV6s7BRjMSJRrhMU4LAtL/yCY 4lfwLS8a8I0ltsXDmx/+VSszxTizJDo= -----END CERTIFICATE-----Generated at Wed Nov 5 21:10:58 2025 by rpki-client