$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/b8971932-6684-3b08-bdaa-aa9c6fb84f19.roa File: b8971932-6684-3b08-bdaa-aa9c6fb84f19.roa (raw, json) Hash identifier: 5nX2ZtCBfJ2jjqMIrXxWCI8VjSZKEYP7lQTtcjBohQE= Subject key identifier: 4B:8D:AE:84:A3:4B:33:DE:BE:76:DA:E1:5F:1A:FD:24:4B:20:53:57 Certificate issuer: /CN=0679e601-ff38-42c1-9b52-0b5bad96b962 Certificate serial: 010D0C9F4328584D651527EE844E6333EC29F6A0 Authority key identifier: FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/b8971932-6684-3b08-bdaa-aa9c6fb84f19.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 62963 IP address blocks: 131.143.248.0/23 maxlen: 32 207.90.241.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:27:ee:84:4e:63:33:ec:29:f6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0679e601-ff38-42c1-9b52-0b5bad96b962 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=e93c05a1-c9e1-43d7-8f3e-e992b1091bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f8:08:48:44:ed:4d:36:31:b2:f9:78:54:b5: 1d:4d:c4:08:d8:ee:59:01:76:7d:e0:26:e9:94:5e: 0d:bd:86:be:71:02:ce:80:35:89:27:c6:39:83:f3: 07:d2:9a:bb:83:9a:47:89:d8:53:c8:e9:cf:56:94: 22:47:2c:a7:01:8b:d1:59:fd:b9:d0:4e:60:d9:be: ab:a6:84:f3:24:c1:67:cd:80:37:f2:d6:d5:54:0b: ef:ae:64:18:e7:f8:78:41:f2:2e:f3:54:22:e3:7d: b1:5d:82:56:01:14:91:04:bf:cf:2d:d2:f6:7e:49: 83:38:de:18:44:63:a9:b9:29:1c:3e:d5:30:6a:34: 1d:1d:77:dd:b0:4d:95:89:4f:a7:fa:66:c5:26:ec: ec:6b:de:d9:65:a3:e0:2a:4d:3c:7c:d6:fc:dc:d8: f9:8f:f0:28:6b:4e:a4:cc:9b:1b:cb:78:bb:54:cf: bf:8d:f0:eb:87:0a:70:0a:fc:6a:27:80:e4:fe:40: 94:6a:27:b8:11:be:46:3e:42:4b:2f:7e:0e:c8:4a: e3:76:0c:7c:bd:25:25:68:41:4c:cf:c3:0d:4f:29: 77:e9:c8:a9:62:b7:e7:f4:94:6b:b9:2c:97:89:f0: 5e:86:af:ee:60:27:df:3c:9b:6e:b4:60:ca:41:19: 2e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8D:AE:84:A3:4B:33:DE:BE:76:DA:E1:5F:1A:FD:24:4B:20:53:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/b8971932-6684-3b08-bdaa-aa9c6fb84f19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl X509v3 Authority Key Identifier: keyid:FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer sbgp-ipAddrBlock: critical IPv4: 131.143.248.0/23 207.90.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e8:02:82:51:6d:5b:d6:ec:07:dc:4b:e3:7d:e4:7d:5a:51: 96:a0:b0:fc:1d:05:de:f4:d1:c1:36:6c:18:11:16:09:98:b5: 28:c6:b6:a3:0e:f7:c3:3a:6a:01:c0:41:cb:a7:4f:66:d4:1e: f1:ca:2f:90:00:08:3c:6a:30:ac:1f:dd:e4:93:20:83:01:1c: f6:ff:95:2a:ec:fd:20:a4:ff:6f:a3:fb:ac:4f:b8:8d:98:de: 84:c5:a1:ef:eb:14:e2:8b:15:f4:14:10:dc:74:45:a4:5e:91: bd:4e:21:37:bf:1e:c3:da:e8:42:df:7c:76:16:09:b0:67:01: ba:70:ec:7a:29:4c:40:b3:78:2b:8d:5b:b6:bb:a2:d1:83:73: 8b:5a:4d:88:46:79:69:1b:70:05:af:35:89:c3:71:d6:40:1c: 74:25:32:e1:94:77:04:dc:d4:c7:12:c8:00:43:1c:2f:1e:fe: e0:54:d6:83:de:74:43:11:e0:c7:dd:88:52:18:3d:e5:98:5a: d3:6f:f2:28:6f:f8:47:3a:20:0c:be:ca:74:bb:66:8c:37:d2: 94:64:58:a9:8d:0c:7d:f8:e6:36:97:d9:3a:79:75:65:70:09: 89:46:23:3c:18:23:80:99:1b:e7:7d:14:d7:26:d8:a3:20:f2: 4e:26:e4:d6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1lFSfuhE5jM+wp9qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3OWU2MDEtZmYzOC00MmMxLTliNTItMGI1YmFkOTZi OTYyMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ZTkzYzA1YTEtYzllMS00M2Q3LThmM2UtZTk5MmIxMDkxYmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PgISETtTTYxsvl4VLUdTcQI2O5ZAXZ94Cbp lF4NvYa+cQLOgDWJJ8Y5g/MH0pq7g5pHidhTyOnPVpQiRyynAYvRWf250E5g2b6r poTzJMFnzYA38tbVVAvvrmQY5/h4QfIu81Qi432xXYJWARSRBL/PLdL2fkmDON4Y RGOpuSkcPtUwajQdHXfdsE2ViU+n+mbFJuzsa97ZZaPgKk08fNb83Nj5j/Aoa06k zJsby3i7VM+/jfDrhwpwCvxqJ4Dk/kCUaie4Eb5GPkJLL34OyErjdgx8vSUlaEFM z8MNTyl36cipYrfn9JRruSyXifBehq/uYCffPJtutGDKQRkucwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEuNroSjSzPevnba4V8a/SRLIFNXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc5 ZTYwMS1mZjM4LTQyYzEtOWI1Mi0wYjViYWQ5NmI5NjIvYjg5NzE5MzItNjY4NC0z YjA4LWJkYWEtYWE5YzZmYjg0ZjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDY3OWU2MDEtZmYzOC00MmMxLTli NTItMGI1YmFkOTZiOTYyLzA2NzllNjAxLWZmMzgtNDJjMS05YjUyLTBiNWJhZDk2 Yjk2Mi5jcmwwHwYDVR0jBBgwFoAU/OZG/SXdIEzcQIFTZ7JzsbFaHJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc5ZTYwMS1mZjM4LTQyYzEtOWI1Mi0wYjVi YWQ5NmI5NjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBg4/4AwQA z1rxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADvoAoJRbVvW7AfcS+N95H1aUZagsPwdBd700cE2bBgRFgmY tSjGtqMO98M6agHAQcunT2bUHvHKL5AACDxqMKwf3eSTIIMBHPb/lSrs/SCk/2+j +6xPuI2Y3oTFoe/rFOKLFfQUENx0RaRekb1OITe/HsPa6ELffHYWCbBnAbpw7Hop TECzeCuNW7a7otGDc4taTYhGeWkbcAWvNYnDcdZAHHQlMuGUdwTc1McSyABDHC8e /uBU1oPedEMR4MfdiFIYPeWYWtNv8ihv+Ec6IAy+ynS7Zow30pRkWKmNDH345jaX 2Tp5dWVwCYlGIzwYI4CZG+d9FNcm2KMg8k4m5NY= -----END CERTIFICATE-----Generated at Fri Apr 17 21:17:43 2026 by rpki-client