$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa File: cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa (raw, json) Hash identifier: rNh+v1hCcHJtWr1JYFhzmAPUSPjinLWKaLWgJ7uFJK4= Subject key identifier: 40:61:F7:97:12:D2:C0:17:83:16:F0:B7:0F:29:47:9D:26:05:94:52 Certificate issuer: /CN=0679e601-ff38-42c1-9b52-0b5bad96b962 Certificate serial: 010D0C9F4328584D86954A7D266C35CB1E757000 Authority key identifier: FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 137509 IP address blocks: 131.143.248.0/23 maxlen: 32 207.90.241.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:4a:7d:26:6c:35:cb:1e:75:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0679e601-ff38-42c1-9b52-0b5bad96b962 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=c3c6cd3b-68f7-4288-96a9-c11244af4f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:ce:64:ed:32:d2:3d:5d:30:0e:ff:45:93: e6:84:87:47:b6:68:f9:47:6e:a4:c6:13:20:4d:06: 28:16:65:ee:8f:16:50:0e:9a:e0:16:d6:1d:8d:e6: 6b:39:69:6d:f8:71:d0:79:11:cf:de:ff:92:ee:5e: ce:44:dd:8f:a1:25:13:6b:5c:d3:88:9d:a1:c9:15: ce:00:a8:4c:18:e6:a4:c1:ab:99:d5:ce:17:7c:63: ce:db:3b:05:5a:df:20:c1:29:96:7b:c6:c3:14:4b: 4f:aa:8f:d5:d3:60:72:1a:cc:9e:ca:8c:29:33:75: 95:2a:da:8b:b1:6f:aa:92:a4:ca:af:87:15:33:ac: 12:f4:aa:5c:69:a0:00:6f:4c:3c:2a:70:55:5c:af: 34:c7:dc:a5:f3:fc:69:26:55:94:dd:f3:e7:7d:6b: c6:f1:10:04:b5:57:8c:52:0c:28:4f:d4:41:d5:c0: e5:13:5d:08:fd:06:ca:d1:af:e7:8c:cd:54:78:ef: 08:7e:4e:11:36:1a:c7:82:04:52:a0:44:30:ab:f1: 93:93:ae:d3:47:87:1d:4d:d2:aa:1f:ce:9d:1d:86: 4b:de:61:c7:fc:bc:52:bb:c5:76:a2:28:73:db:32: 63:70:73:8a:c6:b0:06:4f:af:90:b9:b0:fc:33:8a: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:61:F7:97:12:D2:C0:17:83:16:F0:B7:0F:29:47:9D:26:05:94:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl X509v3 Authority Key Identifier: keyid:FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer sbgp-ipAddrBlock: critical IPv4: 131.143.248.0/23 207.90.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:19:3c:f4:93:d7:52:6f:68:fd:65:a9:6a:0f:cf:18:7a:66: d9:e7:05:4c:11:59:0a:62:35:24:cb:34:2c:c3:ca:ef:5a:4e: b7:18:1a:97:81:78:9d:a7:29:a0:b1:f6:d7:71:21:fd:42:bf: 2f:75:fc:1f:e7:da:e3:4c:8e:4c:a3:83:86:b4:76:9d:ee:e4: 69:cd:90:1c:7c:24:4d:c2:29:95:6d:7d:9d:ac:e4:fc:d2:44: 6f:3f:68:e5:7b:61:42:5a:b5:e0:a3:90:fc:22:49:d1:fb:71: 72:ca:3c:b8:bc:c3:ca:0d:9b:d1:69:0a:47:ca:b4:8e:e1:b5: 68:7d:76:ce:45:ff:74:e7:72:dc:ab:d1:ad:07:75:4e:89:fb: 19:81:b2:d0:3b:38:e5:92:6c:e2:3a:98:2f:17:59:fa:bc:4a: ed:e9:fc:84:bc:ec:a8:d5:17:40:09:ab:d6:95:dd:d1:66:50: 33:d8:65:70:31:c0:26:0b:a8:4e:00:1d:31:d7:07:c2:f2:11: 9c:e8:45:de:c5:cd:f0:66:63:f4:12:16:7d:ab:92:10:2d:2d: 54:a1:b2:d1:75:15:51:f4:6c:2a:4f:96:78:80:b8:b8:cf:e6: 24:54:f4:40:96:a2:bb:e8:01:44:72:1f:6a:af:2e:54:04:46: 52:f8:e3:47 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2GlUp9Jmw1yx51cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3OWU2MDEtZmYzOC00MmMxLTliNTItMGI1YmFkOTZi OTYyMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk YzNjNmNkM2ItNjhmNy00Mjg4LTk2YTktYzExMjQ0YWY0ZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulrOZO0y0j1dMA7/RZPmhIdHtmj5R26kxhMg TQYoFmXujxZQDprgFtYdjeZrOWlt+HHQeRHP3v+S7l7ORN2PoSUTa1zTiJ2hyRXO AKhMGOakwauZ1c4XfGPO2zsFWt8gwSmWe8bDFEtPqo/V02ByGsyeyowpM3WVKtqL sW+qkqTKr4cVM6wS9KpcaaAAb0w8KnBVXK80x9yl8/xpJlWU3fPnfWvG8RAEtVeM UgwoT9RB1cDlE10I/QbK0a/njM1UeO8Ifk4RNhrHggRSoEQwq/GTk67TR4cdTdKq H86dHYZL3mHH/LxSu8V2oihz2zJjcHOKxrAGT6+QubD8M4qFjQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEBh95cS0sAXgxbwtw8pR50mBZRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc5 ZTYwMS1mZjM4LTQyYzEtOWI1Mi0wYjViYWQ5NmI5NjIvY2JiOGMwZDctZTUwMS0z ZTgwLWE5ZjUtMGVkZjQ4YTcyZmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDY3OWU2MDEtZmYzOC00MmMxLTli NTItMGI1YmFkOTZiOTYyLzA2NzllNjAxLWZmMzgtNDJjMS05YjUyLTBiNWJhZDk2 Yjk2Mi5jcmwwHwYDVR0jBBgwFoAU/OZG/SXdIEzcQIFTZ7JzsbFaHJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc5ZTYwMS1mZjM4LTQyYzEtOWI1Mi0wYjVi YWQ5NmI5NjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBg4/4AwQA z1rxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALkZPPST11JvaP1lqWoPzxh6ZtnnBUwRWQpiNSTLNCzDyu9a TrcYGpeBeJ2nKaCx9tdxIf1Cvy91/B/n2uNMjkyjg4a0dp3u5GnNkBx8JE3CKZVt fZ2s5PzSRG8/aOV7YUJateCjkPwiSdH7cXLKPLi8w8oNm9FpCkfKtI7htWh9ds5F /3Tnctyr0a0HdU6J+xmBstA7OOWSbOI6mC8XWfq8Su3p/IS87KjVF0AJq9aV3dFm UDPYZXAxwCYLqE4AHTHXB8LyEZzoRd7FzfBmY/QSFn2rkhAtLVShstF1FVH0bCpP lniAuLjP5iRU9ECWorvoAURyH2qvLlQERlL440c= -----END CERTIFICATE-----Generated at Fri Apr 17 16:39:55 2026 by rpki-client