$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa File: cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa (raw, json) Hash identifier: KxydEwqCA4oXhVzksQrh00dzzSp1qSosqMMj4CpI1gM= Subject key identifier: A6:5B:5A:8E:6A:E3:19:87:55:8F:A3:A1:BD:F9:50:6B:A1:21:EC:50 Certificate issuer: /CN=0679e601-ff38-42c1-9b52-0b5bad96b962 Certificate serial: 010D0C9F4328584CDCD3A63EE280BB638909AC00 Authority key identifier: FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 137509 IP address blocks: 131.143.248.0/23 maxlen: 32 207.90.241.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:d3:a6:3e:e2:80:bb:63:89:09:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0679e601-ff38-42c1-9b52-0b5bad96b962 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=6ed0c171-8bde-4af2-8721-7463815ae4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:25:2a:5e:16:11:88:d0:de:4b:70:47:2d:c2: 28:a4:d2:f0:8f:92:a8:0f:09:a0:d5:b2:96:db:ba: 70:03:74:9f:11:fb:18:e9:b5:80:c1:e4:99:81:8e: f6:5e:eb:c7:b3:2c:ab:20:c3:f4:5d:39:e2:ed:55: 32:d4:aa:7d:eb:bf:e3:77:62:37:4c:16:c1:4b:2b: b4:31:dc:3c:74:58:c0:5c:94:6a:f8:61:12:15:bf: 90:1d:23:6f:f7:da:27:1d:c3:23:6f:a2:6e:88:8e: ba:cc:00:ad:ef:57:1f:c9:3a:ef:70:0b:88:39:2e: fb:15:41:c6:98:86:96:65:bb:51:60:56:92:c2:df: 75:f3:83:78:10:10:cc:a2:bd:35:88:88:bf:a0:4d: ec:4f:54:04:cd:2f:db:eb:36:55:4a:d7:8f:8a:37: 55:ce:78:de:e1:6d:ea:9c:4a:75:fe:24:dc:be:0c: 68:d9:88:39:99:90:2d:6f:0d:4c:78:fd:94:b1:f3: 5d:a8:3d:fb:28:2c:85:e5:4a:b1:91:56:1c:52:21: eb:c7:26:f4:23:ff:b9:db:52:c0:39:61:98:7e:5b: d8:1b:93:c6:b0:53:9c:e6:d3:2b:56:64:77:91:3b: a3:ad:8d:a0:41:f4:e2:2f:fa:54:0d:b1:d2:6f:0c: c0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5B:5A:8E:6A:E3:19:87:55:8F:A3:A1:BD:F9:50:6B:A1:21:EC:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl X509v3 Authority Key Identifier: keyid:FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer sbgp-ipAddrBlock: critical IPv4: 131.143.248.0/23 207.90.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:fe:fa:80:5a:94:b9:05:19:7b:69:d3:ef:6b:f9:20:55:0e: a0:0f:9d:7f:82:82:57:b6:92:6e:d1:c7:2d:26:54:26:88:44: f3:16:5d:53:d4:81:20:3f:3e:14:04:99:a6:78:9c:64:ee:18: cf:90:88:9a:dc:cc:87:33:93:b3:30:f5:d0:7e:f7:f0:81:a3: ea:7a:ec:e7:4f:08:90:36:f3:fa:cc:f8:07:11:7f:44:b4:08: 74:9b:3a:e8:48:e7:39:a2:1b:b1:12:bf:27:d1:43:2b:a2:5c: 36:da:f0:0c:06:0b:6d:be:c1:9b:57:ba:36:17:16:3e:a0:9b: 85:cc:09:38:13:d6:f2:99:89:38:9f:43:96:0d:35:e5:c4:84: 89:e6:1b:30:ca:ed:3a:8c:5a:fb:97:48:ca:73:6a:77:e5:0d: 22:57:74:59:63:0f:50:22:07:df:3d:7e:09:23:f9:64:27:ee: 8d:09:3c:cf:f1:ea:d8:5f:62:03:1a:30:41:8c:44:76:be:62: 69:d4:1d:03:d1:0d:34:d5:7e:4f:45:be:f3:05:d2:c2:8a:2d: 0f:ac:a6:7f:c9:45:51:11:2a:ba:5e:7f:3d:13:0d:74:90:77: 13:a4:b6:15:ce:16:f6:ba:22:c5:90:c7:29:5b:0e:95:24:34: 1b:7f:ac:08 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzc06Y+4oC7Y4kJrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3OWU2MDEtZmYzOC00MmMxLTliNTItMGI1YmFkOTZi OTYyMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk NmVkMGMxNzEtOGJkZS00YWYyLTg3MjEtNzQ2MzgxNWFlNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCUqXhYRiNDeS3BHLcIopNLwj5KoDwmg1bKW 27pwA3SfEfsY6bWAweSZgY72XuvHsyyrIMP0XTni7VUy1Kp967/jd2I3TBbBSyu0 Mdw8dFjAXJRq+GESFb+QHSNv99onHcMjb6JuiI66zACt71cfyTrvcAuIOS77FUHG mIaWZbtRYFaSwt9184N4EBDMor01iIi/oE3sT1QEzS/b6zZVStePijdVznje4W3q nEp1/iTcvgxo2Yg5mZAtbw1MeP2UsfNdqD37KCyF5UqxkVYcUiHrxyb0I/+521LA OWGYflvYG5PGsFOc5tMrVmR3kTujrY2gQfTiL/pUDbHSbwzAVwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKZbWo5q4xmHVY+job35UGuhIexQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc5 ZTYwMS1mZjM4LTQyYzEtOWI1Mi0wYjViYWQ5NmI5NjIvY2JiOGMwZDctZTUwMS0z ZTgwLWE5ZjUtMGVkZjQ4YTcyZmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDY3OWU2MDEtZmYzOC00MmMxLTli NTItMGI1YmFkOTZiOTYyLzA2NzllNjAxLWZmMzgtNDJjMS05YjUyLTBiNWJhZDk2 Yjk2Mi5jcmwwHwYDVR0jBBgwFoAU/OZG/SXdIEzcQIFTZ7JzsbFaHJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjc5ZTYwMS1mZjM4LTQyYzEtOWI1Mi0wYjVi YWQ5NmI5NjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBg4/4AwQA z1rxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADb++oBalLkFGXtp0+9r+SBVDqAPnX+Cgle2km7Rxy0mVCaI RPMWXVPUgSA/PhQEmaZ4nGTuGM+QiJrczIczk7Mw9dB+9/CBo+p67OdPCJA28/rM +AcRf0S0CHSbOuhI5zmiG7ESvyfRQyuiXDba8AwGC22+wZtXujYXFj6gm4XMCTgT 1vKZiTifQ5YNNeXEhInmGzDK7TqMWvuXSMpzanflDSJXdFljD1AiB989fgkj+WQn 7o0JPM/x6thfYgMaMEGMRHa+YmnUHQPRDTTVfk9FvvMF0sKKLQ+spn/JRVERKrpe fz0TDXSQdxOkthXOFva6IsWQxylbDpUkNBt/rAg= -----END CERTIFICATE-----Generated at Mon Mar 2 20:36:41 2026 by rpki-client