$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c8758ad6-d79c-3be7-86dd-0f23e82562b2.roa File: c8758ad6-d79c-3be7-86dd-0f23e82562b2.roa (raw, json) Hash identifier: RJtajAy0uN3lUggSYl1hlTublqzWftROjdBkt1mkhNM= Subject key identifier: 0C:C7:62:F4:4B:92:C8:76:9B:77:7B:57:A2:4E:21:F2:A9:CC:22:D1 Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584BC27069774489DD4A77F96D00 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c8758ad6-d79c-3be7-86dd-0f23e82562b2.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 26744 IP address blocks: 147.124.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:69:77:44:89:dd:4a:77:f9:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=37e33a66-b922-4c1f-960f-4a3dbd123992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:1a:90:27:17:4a:04:ad:5b:7f:07:ee:fa: b6:08:38:c9:87:b2:64:16:46:ca:2f:ef:bc:54:36: b4:34:2a:d7:5f:71:1d:6d:44:89:69:60:a4:6d:59: d5:ad:d2:7f:70:ff:0d:ed:a5:ea:c1:ad:e3:00:0a: 85:d1:9b:d7:68:a2:15:b8:60:2c:f6:b3:f4:45:08: 1f:25:53:fb:69:e2:07:f5:5c:3b:df:b1:0f:3e:d8: a6:25:17:b0:b9:03:f4:10:2b:d7:dd:73:16:dc:57: cc:50:28:de:92:39:0d:d1:67:87:4e:48:37:65:70: 62:b4:cb:f0:9a:c8:38:a9:1f:01:fb:05:eb:0a:9d: b8:a5:33:2f:87:48:8b:fb:69:96:bb:e4:dd:27:bf: ba:a5:df:ef:96:35:dd:77:35:b2:2c:fb:7c:5d:9b: 8c:dc:1f:39:34:93:b9:3c:b3:07:4f:59:79:e6:c9: 09:20:55:80:9c:bf:37:29:3e:c9:24:8c:3d:62:ad: ee:cb:d3:f9:bc:bd:c7:93:c1:31:c0:81:31:df:f4: b5:43:79:e6:e5:0b:5a:5b:e4:44:10:06:0c:cb:ad: 3c:10:14:fb:6f:df:ef:11:ff:cf:8c:f6:63:6a:04: cb:c6:7d:b3:a3:49:9f:bc:0d:f3:e0:9a:e6:57:fc: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C7:62:F4:4B:92:C8:76:9B:77:7B:57:A2:4E:21:F2:A9:CC:22:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c8758ad6-d79c-3be7-86dd-0f23e82562b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:61:00:36:19:49:fd:4f:61:42:a9:f4:9c:de:35:59:8a:ec: 68:1a:a1:7d:4a:bd:d3:d5:6d:32:cf:be:7c:39:b0:4c:bd:5b: 6e:64:5c:49:3b:d5:7a:4e:07:04:72:39:32:43:16:40:63:18: 1a:f6:48:07:08:a9:31:d1:91:0c:00:32:29:e5:17:0e:ee:f3: 97:c5:38:ee:be:e3:24:e9:51:90:a3:28:f0:4c:e4:51:b3:8b: 4b:00:76:c9:ea:d9:ca:53:e1:e6:33:1c:66:16:d1:f8:5c:c6: 47:12:06:56:bb:34:7e:d3:75:7e:71:d5:9c:58:b2:11:5d:cd: 98:62:83:c4:10:cd:ce:25:01:5b:c6:6c:74:2f:4e:23:b6:21: 25:8b:32:51:df:d7:8c:9c:1c:57:4b:a3:7d:43:33:a9:ec:cc: 46:ac:3a:52:d6:27:69:3e:34:77:32:dc:f3:77:b9:d5:aa:48: 31:90:30:57:94:df:0e:3b:06:eb:51:7a:26:6a:8a:4b:ff:c8: 1b:0e:5b:d7:f6:d3:8e:c1:5b:ea:6a:1c:fb:05:89:19:1c:a1: c9:8f:a7:44:17:c3:c3:13:a4:fe:fb:c0:e7:08:e2:75:07:be: 82:7f:87:48:91:ec:60:3e:7d:1d:68:b6:25:56:70:bb:c1:53: 25:e4:2d:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcGl3RIndSnf5bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk MzdlMzNhNjYtYjkyMi00YzFmLTk2MGYtNGEzZGJkMTIzOTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqQakCcXSgStW38H7vq2CDjJh7JkFkbKL++8 VDa0NCrXX3EdbUSJaWCkbVnVrdJ/cP8N7aXqwa3jAAqF0ZvXaKIVuGAs9rP0RQgf JVP7aeIH9Vw737EPPtimJRewuQP0ECvX3XMW3FfMUCjekjkN0WeHTkg3ZXBitMvw msg4qR8B+wXrCp24pTMvh0iL+2mWu+TdJ7+6pd/vljXddzWyLPt8XZuM3B85NJO5 PLMHT1l55skJIFWAnL83KT7JJIw9Yq3uy9P5vL3Hk8ExwIEx3/S1Q3nm5QtaW+RE EAYMy608EBT7b9/vEf/PjPZjagTLxn2zo0mfvA3z4JrmV/w1owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzHYvRLksh2m3d7V6JOIfKpzCLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvYzg3NThhZDYtZDc5Yy0z YmU3LTg2ZGQtMGYyM2U4MjU2MmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk3z8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExhADYZSf1PYUKp9JzeNVmK7GgaoX1KvdPVbTLPvnw5sEy9W25kXEk7 1XpOBwRyOTJDFkBjGBr2SAcIqTHRkQwAMinlFw7u85fFOO6+4yTpUZCjKPBM5FGz i0sAdsnq2cpT4eYzHGYW0fhcxkcSBla7NH7TdX5x1ZxYshFdzZhig8QQzc4lAVvG bHQvTiO2ISWLMlHf14ycHFdLo31DM6nszEasOlLWJ2k+NHcy3PN3udWqSDGQMFeU 3w47ButReiZqikv/yBsOW9f2047BW+pqHPsFiRkcocmPp0QXw8MTpP77wOcI4nUH voJ/h0iR7GA+fR1otiVWcLvBUyXkLVQ= -----END CERTIFICATE-----Generated at Wed Nov 5 21:10:08 2025 by rpki-client