$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa File: be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa (raw, json) Hash identifier: cGKI6KNZKQi+mhHxZGpFDhT745I+jaEOS249jVM74bQ= Subject key identifier: 6E:9D:8E:40:E9:5D:12:F3:05:C7:0B:5B:9C:E1:A4:19:81:5E:51:F3 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584CAE5728DEE2521715996FFC80 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 393740 IP address blocks: 147.124.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:28:de:e2:52:17:15:99:6f:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b8b5d4cc-e327-415f-a445-3ab49601b722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f0:e0:6b:02:a4:a4:16:8c:1f:72:82:ea:b1: e9:97:7d:3e:e4:89:c9:75:f4:21:04:53:9c:27:1f: 07:76:93:49:9e:0d:6b:4c:61:cc:76:3d:ef:a8:f9: d2:62:9e:1f:6b:2c:76:0c:a0:29:38:fb:ad:b0:af: c6:26:96:5b:10:b7:70:1a:69:6f:ac:c9:bb:d1:95: ee:eb:60:19:be:54:dd:17:0f:44:cb:00:80:f5:6b: 08:d8:c5:6e:eb:b0:d5:a6:85:8e:7a:d6:ba:91:88: 8c:f7:14:3a:2d:aa:d8:e2:21:21:52:e0:f1:82:2c: f6:ea:da:e3:da:8c:db:79:26:76:28:48:4f:27:7f: 18:76:d4:5f:bc:d4:20:86:96:79:a7:1b:1c:bd:e3: 0a:a0:ab:51:6f:bc:5b:32:73:dc:d2:86:c7:70:f6: 0a:a7:2d:0c:73:79:90:58:f7:7c:a8:87:c7:f4:62: 07:7d:6f:8a:83:89:92:e8:58:b2:68:d6:a3:b5:dc: 21:63:d1:a2:ec:e9:95:b7:59:79:57:99:94:73:72: e3:89:19:6b:74:db:3a:4f:da:5a:c2:bf:0b:ac:e9: eb:cb:d6:f1:85:b1:48:1f:32:5b:8b:45:23:36:89: 14:d6:47:98:f3:66:89:2e:f7:55:72:b3:e4:ab:56: 57:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9D:8E:40:E9:5D:12:F3:05:C7:0B:5B:9C:E1:A4:19:81:5E:51:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/be3a695a-1cbc-35d9-8476-019ace1c2d1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:5c:29:ea:91:04:02:8a:86:e2:4e:96:95:80:2f:dc:e4:60: 3c:e9:91:99:47:94:8c:74:b7:76:03:54:a1:ab:c7:eb:1e:85: 51:fd:23:1a:8d:23:c2:cc:49:07:12:6c:ba:ab:66:7e:c1:c0: 90:fb:ae:34:75:12:49:79:80:c3:a7:de:53:14:a4:d9:91:13: 8a:eb:78:56:e3:48:fe:b1:d5:15:b4:41:96:5b:eb:3e:dc:40: e8:f8:6b:cf:28:74:d1:4f:77:b5:0e:e8:a5:ee:95:ce:39:32: f7:9f:12:89:58:5f:8e:88:6b:f2:e5:cb:4b:ec:9b:76:66:c7: 7a:c4:8c:47:29:23:53:91:d4:64:9a:62:5f:68:e6:51:93:92: 63:2b:02:34:5b:1c:66:3a:ca:e7:87:90:cf:99:f4:be:69:73: 23:e6:57:2f:bf:7f:a1:54:3c:e5:cd:bf:84:fc:d9:09:04:c0: 5a:43:0e:dd:7f:88:10:91:f1:4c:8f:56:33:bb:f7:7a:f6:66: 4b:79:a9:bb:e5:79:fd:84:08:ec:d9:47:34:2f:13:b4:94:f8: 3c:e5:c3:a1:30:b2:5c:82:b8:6a:f7:62:b9:79:28:55:b3:ec: bf:ee:62:df:a1:07:e5:e5:95:2d:6d:fe:3f:00:cf:fd:30:b0: 69:eb:fd:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVyje4lIXFZlv/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjhiNWQ0Y2MtZTMyNy00MTVmLWE0NDUtM2FiNDk2MDFiNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/DgawKkpBaMH3KC6rHpl30+5InJdfQhBFOc Jx8HdpNJng1rTGHMdj3vqPnSYp4fayx2DKApOPutsK/GJpZbELdwGmlvrMm70ZXu 62AZvlTdFw9EywCA9WsI2MVu67DVpoWOeta6kYiM9xQ6LarY4iEhUuDxgiz26trj 2ozbeSZ2KEhPJ38YdtRfvNQghpZ5pxscveMKoKtRb7xbMnPc0obHcPYKpy0Mc3mQ WPd8qIfH9GIHfW+Kg4mS6FiyaNajtdwhY9Gi7OmVt1l5V5mUc3LjiRlrdNs6T9pa wr8LrOnry9bxhbFIHzJbi0UjNokU1keY82aJLvdVcrPkq1ZXfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6djkDpXRLzBccLW5zhpBmBXlHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvYmUzYTY5NWEtMWNiYy0z NWQ5LTg0NzYtMDE5YWNlMWMyZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk3znMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxcKeqRBAKKhuJOlpWAL9zkYDzpkZlHlIx0t3YDVKGrx+sehVH9IxqN I8LMSQcSbLqrZn7BwJD7rjR1Ekl5gMOn3lMUpNmRE4rreFbjSP6x1RW0QZZb6z7c QOj4a88odNFPd7UO6KXulc45MvefEolYX46Ia/Lly0vsm3Zmx3rEjEcpI1OR1GSa Yl9o5lGTkmMrAjRbHGY6yueHkM+Z9L5pcyPmVy+/f6FUPOXNv4T82QkEwFpDDt1/ iBCR8UyPVjO793r2Zkt5qbvlef2ECOzZRzQvE7SU+Dzlw6EwslyCuGr3Yrl5KFWz 7L/uYt+hB+XllS1t/j8Az/0wsGnr/WE= -----END CERTIFICATE-----Generated at Mon Mar 2 15:09:59 2026 by rpki-client