$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/b8971932-6684-3b08-bdaa-aa9c6fb84f19.roa File: b8971932-6684-3b08-bdaa-aa9c6fb84f19.roa (raw, json) Hash identifier: G7vdZULWpGc5AMi533p/TbYAyajfz6CGa2xYDPIFNac= Subject key identifier: A1:2B:63:E5:97:17:13:1E:13:11:F5:CC:A2:0A:49:AD:70:B3:72:8D Certificate issuer: /CN=0679e601-ff38-42c1-9b52-0b5bad96b962 Certificate serial: 010D0C9F4328584CDCD37CD7B022044B236FC400 Authority key identifier: FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/b8971932-6684-3b08-bdaa-aa9c6fb84f19.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 62963 IP address blocks: 131.143.248.0/23 maxlen: 32 207.90.241.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:d3:7c:d7:b0:22:04:4b:23:6f:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0679e601-ff38-42c1-9b52-0b5bad96b962 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=f5d90f9a-5e82-47f2-a026-a2f7d25b4451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:75:0a:72:b6:5e:72:46:6b:6d:e6:a0:bf: b9:45:18:e8:c8:0a:05:64:7c:9c:f8:95:db:0a:5f: 6c:a1:d8:b9:3f:21:10:dd:a2:27:e1:95:97:fa:6b: 50:8c:e3:79:a0:27:97:a6:98:66:51:2b:a2:17:e7: b4:35:36:36:27:9a:f2:ba:ba:93:66:ba:36:66:96: 47:7f:a0:77:8a:ef:93:71:61:db:1c:66:75:b2:25: 88:a8:0a:2a:6b:1b:99:cb:83:23:81:f4:e2:93:0a: 3a:fc:43:3b:71:48:0e:db:7f:15:c9:9e:b9:6e:63: 2c:8d:28:d7:7d:1c:b7:d5:91:52:a6:22:0f:23:33: 4c:79:ee:e1:65:90:89:e3:94:28:9f:18:0f:2e:c4: 55:23:cb:da:17:48:7f:7b:cf:dd:c7:46:b2:52:e2: 6f:bd:dd:97:32:97:ff:ee:e2:a0:28:95:d4:86:47: f5:4c:ba:61:bc:93:66:d0:3f:ed:7c:87:bb:08:35: 09:79:9e:54:dd:4a:32:1a:d2:df:08:f1:b7:13:59: b1:e9:8d:1d:d4:8d:7d:e9:e3:20:ca:b0:e3:65:81: 7e:34:2c:3b:83:87:5f:a1:de:ee:84:6a:7e:23:1e: b0:b4:3f:f3:3a:5f:9a:d3:2e:b5:42:c3:06:30:eb: 46:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2B:63:E5:97:17:13:1E:13:11:F5:CC:A2:0A:49:AD:70:B3:72:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/b8971932-6684-3b08-bdaa-aa9c6fb84f19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl X509v3 Authority Key Identifier: keyid:FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer sbgp-ipAddrBlock: critical IPv4: 131.143.248.0/23 207.90.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:29:f8:3f:d6:ce:6b:d6:10:88:89:bc:52:3a:74:79:b9:58: 37:e3:71:c0:66:86:b3:91:42:9a:e2:a4:32:ee:a4:b1:cc:58: 95:c9:e9:27:55:ab:31:24:51:68:ce:ce:b1:c8:b7:0a:db:58: d6:c5:f9:7f:93:16:74:df:b8:ea:96:48:28:a8:c8:54:4a:c7: 6b:72:26:99:01:6d:36:b7:08:e2:96:d3:98:b7:01:44:c7:f3: f1:9f:c3:cb:4b:e4:30:10:41:ed:33:26:b0:12:67:98:b3:45: 86:6d:cd:27:33:5a:fb:0c:6c:28:b4:21:ea:c4:32:3d:3e:41: 27:73:ed:aa:ce:6d:e1:20:20:96:3c:d1:30:46:e0:2d:14:16: 12:60:76:aa:db:39:ea:8e:40:b0:c8:1e:72:0f:5e:4f:81:e6: 5e:04:b9:4c:78:b4:07:a5:33:0d:5d:95:20:f0:be:46:8b:d3: 74:19:a7:b1:de:f8:00:f8:58:22:66:ff:2c:6b:40:e2:11:29: 2a:da:e5:99:01:2a:19:32:13:db:16:66:c0:34:8c:f8:b1:c0: e1:2d:23:90:07:09:41:8e:ed:a4:4a:31:00:af:5c:6f:c3:d4: 48:e8:64:c2:ea:bb:70:7f:23:1d:ad:b9:77:81:57:70:11:58: 43:4f:bf:88 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzc03zXsCIESyNvxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3OWU2MDEtZmYzOC00MmMxLTliNTItMGI1YmFkOTZi OTYyMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk ZjVkOTBmOWEtNWU4Mi00N2YyLWEwMjYtYTJmN2QyNWI0NDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfN1CnK2XnJGa23moL+5RRjoyAoFZHyc+JXb Cl9sodi5PyEQ3aIn4ZWX+mtQjON5oCeXpphmUSuiF+e0NTY2J5ryurqTZro2ZpZH f6B3iu+TcWHbHGZ1siWIqAoqaxuZy4MjgfTikwo6/EM7cUgO238VyZ65bmMsjSjX fRy31ZFSpiIPIzNMee7hZZCJ45QonxgPLsRVI8vaF0h/e8/dx0ayUuJvvd2XMpf/ 7uKgKJXUhkf1TLphvJNm0D/tfIe7CDUJeZ5U3UoyGtLfCPG3E1mx6Y0d1I196eMg yrDjZYF+NCw7g4dfod7uhGp+Ix6wtD/zOl+a0y61QsMGMOtGpwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKErY+WXFxMeExH1zKIKSa1ws3KNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc5 ZTYwMS1mZjM4LTQyYzEtOWI1Mi0wYjViYWQ5NmI5NjIvYjg5NzE5MzItNjY4NC0z YjA4LWJkYWEtYWE5YzZmYjg0ZjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDY3OWU2MDEtZmYzOC00MmMxLTli NTItMGI1YmFkOTZiOTYyLzA2NzllNjAxLWZmMzgtNDJjMS05YjUyLTBiNWJhZDk2 Yjk2Mi5jcmwwHwYDVR0jBBgwFoAU/OZG/SXdIEzcQIFTZ7JzsbFaHJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc5ZTYwMS1mZjM4LTQyYzEtOWI1Mi0wYjVi YWQ5NmI5NjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBg4/4AwQA z1rxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABIp+D/WzmvWEIiJvFI6dHm5WDfjccBmhrORQpripDLupLHM WJXJ6SdVqzEkUWjOzrHItwrbWNbF+X+TFnTfuOqWSCioyFRKx2tyJpkBbTa3COKW 05i3AUTH8/Gfw8tL5DAQQe0zJrASZ5izRYZtzSczWvsMbCi0IerEMj0+QSdz7arO beEgIJY80TBG4C0UFhJgdqrbOeqOQLDIHnIPXk+B5l4EuUx4tAelMw1dlSDwvkaL 03QZp7He+AD4WCJm/yxrQOIRKSra5ZkBKhkyE9sWZsA0jPixwOEtI5AHCUGO7aRK MQCvXG/D1EjoZMLqu3B/Ix2tuXeBV3ARWENPv4g= -----END CERTIFICATE-----Generated at Tue Mar 3 00:58:07 2026 by rpki-client