$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/87c4a881-fd35-3296-a99c-aa20859bb0f6.roa File: 87c4a881-fd35-3296-a99c-aa20859bb0f6.roa (raw, json) Hash identifier: G0i7SvClHnFtUYK9Ec5J1FryFoZft8E5zrr9DL+jVNU= Subject key identifier: 6E:23:DC:5C:D9:65:73:30:DF:31:C6:B4:0F:51:88:2B:E1:0F:4C:63 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584CAE5727C0A03D79698D82FE00 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/87c4a881-fd35-3296-a99c-aa20859bb0f6.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 393740 IP address blocks: 147.124.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:27:c0:a0:3d:79:69:8d:82:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b252121a-4200-469c-b9d2-78b76ee6a0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fa:d9:ff:a3:07:7f:3b:1c:29:8c:0c:f9:4b: b1:d0:4e:ad:6e:e5:7e:45:c6:14:42:ee:3b:92:75: 1a:2e:fa:8f:55:b8:bd:af:e2:85:40:a4:1d:17:44: 65:af:3b:bf:ac:92:80:1a:92:3b:96:b9:0c:be:da: 7c:7c:7e:4a:d9:97:d2:00:93:57:f8:95:07:b0:03: c7:0c:8f:6e:3d:9e:1f:d0:73:cd:87:0c:b2:0a:35: 33:55:c4:b1:00:ac:19:81:70:26:7c:51:75:a5:d3: f9:4b:3b:3b:c2:d8:16:90:64:28:24:c4:8e:e3:0e: 13:81:cd:a3:46:fc:93:88:92:41:df:25:d7:e8:ba: 40:fb:1b:66:72:24:87:95:2a:81:57:76:c5:62:38: f8:4e:0b:58:33:91:bf:7f:b3:f0:b7:2c:36:d1:82: e6:d7:15:5f:1e:16:18:71:f1:91:b4:4d:d5:dc:d2: e3:f2:52:8d:11:cc:e4:e0:6b:9c:d6:04:bb:3f:3e: bd:16:0f:67:82:4c:44:a5:c6:67:f4:4d:cb:1c:4a: fc:ef:ca:f7:df:f3:9d:b2:9a:6c:8a:06:3e:a1:28: b4:93:7c:f5:ac:38:d6:6f:3e:87:ac:b3:57:b8:b7: f6:15:ef:f9:04:35:c9:16:d6:f5:c7:6f:7c:95:36: 71:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:23:DC:5C:D9:65:73:30:DF:31:C6:B4:0F:51:88:2B:E1:0F:4C:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/87c4a881-fd35-3296-a99c-aa20859bb0f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:97:c7:90:de:2a:42:28:5e:93:ae:a9:94:87:6c:f2:ee:d4: 0e:18:04:5a:4c:ba:34:77:9e:80:ad:33:3e:2f:7c:97:93:ef: b9:18:0b:2e:1f:69:a9:89:fc:b8:1a:eb:8e:ed:c8:af:89:35: 31:39:6a:2a:f7:5f:e9:56:cd:18:f4:24:ac:d7:3d:3c:46:fb: bf:93:1e:3b:54:6b:7f:37:6e:85:1f:db:89:5b:0e:b2:6f:d7: d8:87:b4:78:cf:cd:32:1c:19:56:4b:20:17:ad:00:2e:b6:92: 6c:1b:1b:a8:dc:64:04:b4:a1:7e:1c:63:7d:35:67:5d:1e:a9: 03:52:55:bd:a2:a2:b4:36:7e:68:73:28:a4:25:72:0a:0b:c2: 92:0d:48:48:4e:48:97:d2:56:58:7b:69:3f:6a:f0:36:d9:5f: 54:49:ef:52:27:d0:15:c0:46:8a:38:08:a1:fe:6e:db:10:6c: e5:d8:14:ac:6c:78:02:ac:94:32:47:17:3c:97:7d:e0:7a:9a: 53:5c:c3:19:c7:7a:8e:d6:b6:6a:82:f7:81:08:86:eb:44:65: da:83:14:95:3c:f0:11:69:ca:16:75:54:ef:26:68:51:69:41: 3d:16:df:42:9e:31:f0:62:c8:0e:2f:de:69:03:61:a2:1f:e3: d0:6f:18:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVyfAoD15aY2C/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjI1MjEyMWEtNDIwMC00NjljLWI5ZDItNzhiNzZlZTZhMGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPrZ/6MHfzscKYwM+Uux0E6tbuV+RcYUQu47 knUaLvqPVbi9r+KFQKQdF0Rlrzu/rJKAGpI7lrkMvtp8fH5K2ZfSAJNX+JUHsAPH DI9uPZ4f0HPNhwyyCjUzVcSxAKwZgXAmfFF1pdP5Szs7wtgWkGQoJMSO4w4Tgc2j RvyTiJJB3yXX6LpA+xtmciSHlSqBV3bFYjj4TgtYM5G/f7Pwtyw20YLm1xVfHhYY cfGRtE3V3NLj8lKNEczk4Guc1gS7Pz69Fg9ngkxEpcZn9E3LHEr878r33/Odspps igY+oSi0k3z1rDjWbz6HrLNXuLf2Fe/5BDXJFtb1x298lTZxPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4j3FzZZXMw3zHGtA9RiCvhD0xjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvODdjNGE4ODEtZmQzNS0z Mjk2LWE5OWMtYWEyMDg1OWJiMGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk3zqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSXx5DeKkIoXpOuqZSHbPLu1A4YBFpMujR3noCtMz4vfJeT77kYCy4f aamJ/Lga647tyK+JNTE5air3X+lWzRj0JKzXPTxG+7+THjtUa383boUf24lbDrJv 19iHtHjPzTIcGVZLIBetAC62kmwbG6jcZAS0oX4cY301Z10eqQNSVb2iorQ2fmhz KKQlcgoLwpINSEhOSJfSVlh7aT9q8DbZX1RJ71In0BXARoo4CKH+btsQbOXYFKxs eAKslDJHFzyXfeB6mlNcwxnHeo7WtmqC94EIhutEZdqDFJU88BFpyhZ1VO8maFFp QT0W30KeMfBiyA4v3mkDYaIf49BvGLE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:46:03 2026 by rpki-client