$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3dc4a1d1-b7f7-341e-b10e-6b2ab978e157.roa File: 3dc4a1d1-b7f7-341e-b10e-6b2ab978e157.roa (raw, json) Hash identifier: /VYOEs1BjAF9grAoOmfUpw+9qRGXR5lx3dO2e+O0VvA= Subject key identifier: D8:F3:7C:45:3E:13:9A:C5:5E:3F:06:7B:7A:57:42:1A:5A:DA:5F:5A Certificate issuer: /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Certificate serial: 010D0C9F4328584AECC1392B06DDFDEB41D15900 Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3dc4a1d1-b7f7-341e-b10e-6b2ab978e157.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 26744 IP address blocks: 147.124.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:39:2b:06:dd:fd:eb:41:d1:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e51eabb8-3546-4a67-a159-84ff6b4d1ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:77:aa:10:57:36:e3:57:a6:12:05:61:21:7d: 8c:f8:df:40:df:fe:1b:58:3e:4a:75:e1:19:14:81: 61:2d:30:8a:6a:a3:c9:02:4c:47:4c:a2:b2:5e:fd: f1:e4:84:8d:48:e5:19:dc:7e:9f:ae:61:c9:99:cb: 98:52:73:ad:a3:92:f4:15:da:58:da:a3:11:0a:48: 02:52:9f:79:dc:8c:ed:ad:18:35:5e:f1:d1:bd:74: ad:b6:e3:ee:e4:55:d6:43:64:8a:40:d0:f8:d4:90: dd:85:06:4a:36:54:7e:63:59:ce:df:1c:32:55:3b: 27:5a:da:76:cb:e5:d1:a9:1c:5c:f7:ea:f2:d8:78: 45:c1:30:91:e8:72:5b:4a:1e:5f:d0:50:ca:97:49: c1:2a:55:7c:5a:39:1a:dc:74:7b:d7:bd:f4:0d:d0: 53:ca:c2:23:b7:b8:55:9a:3b:fe:6b:8c:da:4f:b3: b9:1d:c2:ae:ca:2a:68:9a:e2:ec:12:96:4a:f7:a1: 23:69:da:e5:61:79:1a:5f:5a:f1:8a:ac:48:bd:46: 4d:91:0d:b9:ec:c9:ed:26:ad:48:b3:06:27:de:6a: 91:47:c6:e8:43:b7:9b:3a:2b:c7:69:65:bb:36:99: 70:fc:bd:c9:d2:e2:b5:cf:db:0c:64:42:9a:c0:39: f5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F3:7C:45:3E:13:9A:C5:5E:3F:06:7B:7A:57:42:1A:5A:DA:5F:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/3dc4a1d1-b7f7-341e-b10e-6b2ab978e157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl X509v3 Authority Key Identifier: keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer sbgp-ipAddrBlock: critical IPv4: 147.124.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:22:0b:dc:13:ad:87:66:17:1d:0b:57:d5:7f:4f:02:00:9c: c6:2b:dc:76:d0:dd:f8:07:24:db:29:bb:0c:73:d9:fc:c0:4f: 8c:f5:92:56:39:d7:3f:57:6c:15:e5:1e:09:31:a6:7f:5a:2c: 52:37:2b:21:4c:92:04:54:63:d1:59:5a:c7:55:3b:2d:84:b5: 58:54:af:ba:d6:a2:96:12:90:23:95:44:49:ea:1c:07:c9:19: e8:5c:44:c3:e0:d8:2f:ae:d6:eb:ba:8a:1d:9a:17:8a:d6:ce: 3e:30:07:e3:c2:8f:ca:d4:ff:5c:48:54:0e:e9:97:8c:a3:8d: 83:78:89:9c:f6:0e:9a:1e:ba:c4:e2:d3:08:81:80:05:e0:b8: 5f:81:07:e9:a4:9d:ff:b8:5e:ad:35:79:ef:92:c7:07:d8:2f: 5d:80:27:2a:f6:c5:aa:28:c5:ce:66:a8:48:01:bd:19:d0:0b: 70:06:90:fe:d3:e6:19:bf:85:31:54:5b:af:55:b1:00:16:f0: 0c:fb:d3:ff:99:12:02:e5:47:62:66:4f:7b:cd:45:45:b3:34: 09:eb:aa:3c:51:46:c7:32:67:06:9c:ae:91:05:27:db:57:1a: 47:59:8f:19:eb:29:dd:fd:9e:38:94:ff:74:ed:d9:78:ef:72: c9:f7:d9:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTkrBt3960HRWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj ZjFhMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTUxZWFiYjgtMzU0Ni00YTY3LWExNTktODRmZjZiNGQxZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHeqEFc241emEgVhIX2M+N9A3/4bWD5KdeEZ FIFhLTCKaqPJAkxHTKKyXv3x5ISNSOUZ3H6frmHJmcuYUnOto5L0FdpY2qMRCkgC Up953IztrRg1XvHRvXSttuPu5FXWQ2SKQND41JDdhQZKNlR+Y1nO3xwyVTsnWtp2 y+XRqRxc9+ry2HhFwTCR6HJbSh5f0FDKl0nBKlV8Wjka3HR71730DdBTysIjt7hV mjv+a4zaT7O5HcKuyipomuLsEpZK96EjadrlYXkaX1rxiqxIvUZNkQ257MntJq1I swYn3mqRR8boQ7ebOivHaWW7Nplw/L3J0uK1z9sMZEKawDn1AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjzfEU+E5rFXj8Ge3pXQhpa2l9aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4 NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvM2RjNGExZDEtYjdmNy0z NDFlLWIxMGUtNmIyYWI5NzhlMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk3zkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwiC9wTrYdmFx0LV9V/TwIAnMYr3HbQ3fgHJNspuwxz2fzAT4z1klY5 1z9XbBXlHgkxpn9aLFI3KyFMkgRUY9FZWsdVOy2EtVhUr7rWopYSkCOVREnqHAfJ GehcRMPg2C+u1uu6ih2aF4rWzj4wB+PCj8rU/1xIVA7pl4yjjYN4iZz2DpoeusTi 0wiBgAXguF+BB+mknf+4Xq01ee+SxwfYL12AJyr2xaooxc5mqEgBvRnQC3AGkP7T 5hm/hTFUW69VsQAW8Az70/+ZEgLlR2JmT3vNRUWzNAnrqjxRRscyZwacrpEFJ9tX GkdZjxnrKd39njiU/3Tt2Xjvcsn32RU= -----END CERTIFICATE-----Generated at Sun Aug 24 06:56:50 2025 by rpki-client