$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/875e931c-406d-3c9d-b4d8-40127179412a.roa File: 875e931c-406d-3c9d-b4d8-40127179412a.roa (raw, json) Hash identifier: HT/cfbZK5mJx5DLOWbNd86s2rmwOsFTz3FrCypkQ5hs= Subject key identifier: 80:37:6E:8C:C7:81:DB:DD:E7:8A:BB:CD:88:CF:59:8C:CA:D3:A2:DB Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584CA32C6DFFA4815A727FF6A9E0 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/875e931c-406d-3c9d-b4d8-40127179412a.roa Signing time: Sun 25 Jan 2026 02:00:31 +0000 ROA not before: Sun 25 Jan 2026 02:00:31 +0000 ROA not after: Sat 25 Apr 2026 01:00:31 +0000 asID: 26744 IP address blocks: 147.124.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a3:2c:6d:ff:a4:81:5a:72:7f:f6:a9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Jan 25 02:00:31 2026 GMT Not After : Apr 25 01:00:31 2026 GMT Subject: CN=bafbe236-3a20-4c44-aa60-f5e611f3e020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c9:72:e9:62:b8:ac:bf:d8:0a:40:7a:0a:87: 1e:40:84:d8:1b:e5:c6:f5:7e:8a:be:ee:d6:e5:52: ce:19:88:34:39:23:7d:6d:48:cb:eb:61:f6:28:e0: aa:73:d2:83:d7:04:ab:f3:2e:b5:bc:ca:bb:cd:ed: cc:3c:64:4e:97:2e:4b:29:d6:14:56:11:5e:bb:ef: c9:92:49:9e:33:07:4c:62:26:48:c5:8b:63:99:98: 53:b3:12:fa:16:85:95:a4:8c:04:b8:be:c1:ea:fc: 68:cf:c9:6f:9b:33:a3:2d:ae:0a:ff:3d:94:e1:fd: 0e:0f:bc:8e:e6:c0:f7:3d:c7:8d:db:39:3e:af:11: 98:94:74:97:20:41:f2:fa:5b:c8:df:f0:79:ac:16: 4e:dd:68:a0:b4:52:9e:54:e8:51:48:9a:be:be:dd: d3:d0:ad:78:92:e1:4e:23:3e:02:58:60:9d:9a:bd: 98:00:4d:56:5d:27:af:0a:84:64:bb:dd:90:33:86: 45:c4:df:2b:f2:1c:d0:36:54:51:75:f5:7a:4d:bd: c5:f3:bc:5a:04:8b:24:3e:a0:ba:00:01:7c:35:b3: 12:c2:a2:43:25:0c:df:f5:d6:97:72:9d:66:4f:9c: 4e:1d:44:cd:03:4a:5e:f4:f5:55:08:e6:70:41:0d: 6c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:37:6E:8C:C7:81:DB:DD:E7:8A:BB:CD:88:CF:59:8C:CA:D3:A2:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/875e931c-406d-3c9d-b4d8-40127179412a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:b3:4b:50:60:49:34:8f:e9:6c:e5:1c:51:64:6c:3c:59:d5: 48:7e:13:b8:9f:d0:50:56:5a:81:bd:b3:a1:bb:be:be:8b:3f: ea:d2:38:87:19:0d:cc:f9:1b:b0:d0:9a:20:8f:f7:56:01:5a: 62:62:02:df:01:1d:70:eb:56:e9:76:fb:72:a8:f5:80:96:80: 04:0e:35:ee:e3:b2:8b:9d:4d:0f:aa:87:41:56:a0:53:96:b9: 4f:22:09:73:6f:26:59:89:0a:eb:60:38:79:7a:9f:db:c1:12: 16:e5:ad:30:c3:94:6c:c6:bb:21:aa:d7:52:8f:8e:f0:92:8f: 06:e7:97:d4:06:3f:4b:e0:95:9e:42:80:82:65:02:55:ea:39: 09:53:48:9c:3e:8c:81:79:55:75:23:d1:a9:fb:05:ff:9e:35: dc:76:04:5a:bb:16:72:f8:7a:fe:19:98:37:5d:38:11:40:34: 8f:02:43:c8:5f:be:25:3d:4a:4f:30:1a:73:a2:18:5e:0a:5d: 9f:18:49:37:0a:42:9c:57:e2:d2:0b:e9:60:34:4d:3b:eb:41: d9:a0:ae:79:cb:83:76:eb:53:21:47:d8:5e:db:95:d1:af:cd: 50:18:35:ee:c8:c5:cd:7c:4f:32:bd:45:53:1b:40:a3:7d:15: a9:56:f7:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyjLG3/pIFacn/2qeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI2MDEyNTAyMDAzMVoXDTI2MDQyNTAxMDAzMVowLzEtMCsGA1UEAxMk YmFmYmUyMzYtM2EyMC00YzQ0LWFhNjAtZjVlNjExZjNlMDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8ly6WK4rL/YCkB6CoceQITYG+XG9X6Kvu7W 5VLOGYg0OSN9bUjL62H2KOCqc9KD1wSr8y61vMq7ze3MPGROly5LKdYUVhFeu+/J kkmeMwdMYiZIxYtjmZhTsxL6FoWVpIwEuL7B6vxoz8lvmzOjLa4K/z2U4f0OD7yO 5sD3PceN2zk+rxGYlHSXIEHy+lvI3/B5rBZO3WigtFKeVOhRSJq+vt3T0K14kuFO Iz4CWGCdmr2YAE1WXSevCoRku92QM4ZFxN8r8hzQNlRRdfV6Tb3F87xaBIskPqC6 AAF8NbMSwqJDJQzf9daXcp1mT5xOHUTNA0pe9PVVCOZwQQ1szwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIA3bozHgdvd54q7zYjPWYzK06LbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvODc1ZTkzMWMtNDA2ZC0z YzlkLWI0ZDgtNDAxMjcxNzk0MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk3z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKzS1BgSTSP6WzlHFFkbDxZ1Uh+E7if0FBWWoG9s6G7vr6LP+rSOIcZ Dcz5G7DQmiCP91YBWmJiAt8BHXDrVul2+3Ko9YCWgAQONe7jsoudTQ+qh0FWoFOW uU8iCXNvJlmJCutgOHl6n9vBEhblrTDDlGzGuyGq11KPjvCSjwbnl9QGP0vglZ5C gIJlAlXqOQlTSJw+jIF5VXUj0an7Bf+eNdx2BFq7FnL4ev4ZmDddOBFANI8CQ8hf viU9Sk8wGnOiGF4KXZ8YSTcKQpxX4tIL6WA0TTvrQdmgrnnLg3brUyFH2F7bldGv zVAYNe7Ixc18TzK9RVMbQKN9FalW9yY= -----END CERTIFICATE-----Generated at Mon Mar 2 09:45:59 2026 by rpki-client