$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/ca4eb768-fe9e-3f83-879e-ee6c652fa19d.roa File: ca4eb768-fe9e-3f83-879e-ee6c652fa19d.roa (raw, json) Hash identifier: LTLWWub4WPLwJZ5MUmv4HRDaA8uSgpUYbtdDTi53phQ= Subject key identifier: 5A:D9:92:B6:89:C2:46:E3:91:A1:95:93:8D:B8:DA:13:F0:28:77:E2 Certificate issuer: /CN=f63b7eb8-acba-44a7-b922-bd22a4513564 Certificate serial: 010D0C9F4328584F0C078011B6BE4CC2B379F2C0 Authority key identifier: DD:15:DE:7C:46:31:9A:F3:CF:DA:3D:DA:D9:D5:18:98:2C:71:0B:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/ca4eb768-fe9e-3f83-879e-ee6c652fa19d.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 211188 IP address blocks: 131.143.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/f63b7eb8-acba-44a7-b922-bd22a4513564.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/f63b7eb8-acba-44a7-b922-bd22a4513564.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:80:11:b6:be:4c:c2:b3:79:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63b7eb8-acba-44a7-b922-bd22a4513564 Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=c3235f80-1a95-4857-84a5-b71dd66d012d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ec:25:88:76:b5:62:2a:9c:b3:ec:b1:8d:a3: b4:77:0d:a0:ba:81:01:ba:ac:50:b2:fb:f6:7f:f8: d9:6c:0b:a5:5e:ac:e0:30:f7:42:99:bc:69:ee:8e: 28:2a:a8:4a:64:e0:cd:11:38:33:1e:a1:c8:5f:78: ea:a7:91:e1:5e:16:21:fb:d9:79:18:f1:a1:31:b6: 85:b9:9c:0d:95:39:01:2c:73:a4:ff:ac:94:c9:66: 59:b3:de:37:85:65:c6:76:4c:f8:ba:3d:01:8d:13: df:89:81:de:75:87:f9:bb:2e:ca:4c:2d:8b:0e:27: b0:96:5f:9e:a7:98:82:81:b4:18:7f:11:8a:f1:96: 4c:f6:4e:4c:5b:e6:88:29:38:f2:4e:e0:47:d1:28: 8b:94:34:8c:01:35:da:be:50:a5:d4:58:0c:de:12: 00:f3:12:02:ec:bb:42:bf:2d:3a:45:a8:21:84:03: 6c:9e:05:ae:65:76:18:80:0e:5b:0f:0f:6f:e7:96: 90:24:90:82:b2:1e:29:26:44:b5:8d:e4:f0:df:d7: d3:1e:35:6d:24:91:00:1f:d3:76:fa:27:8e:4b:58: 53:da:a6:22:a3:43:4b:22:82:fc:74:8c:be:fe:d1: 91:81:2e:f1:bb:15:26:70:a2:51:0d:3c:87:d7:e2: 78:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D9:92:B6:89:C2:46:E3:91:A1:95:93:8D:B8:DA:13:F0:28:77:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/ca4eb768-fe9e-3f83-879e-ee6c652fa19d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/f63b7eb8-acba-44a7-b922-bd22a4513564.crl X509v3 Authority Key Identifier: keyid:DD:15:DE:7C:46:31:9A:F3:CF:DA:3D:DA:D9:D5:18:98:2C:71:0B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564.cer sbgp-ipAddrBlock: critical IPv4: 131.143.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:b0:95:d2:50:07:81:c3:f9:4b:5c:8a:1c:df:29:0c:1b:a3: 57:f9:74:27:4f:5a:fb:6f:c8:9b:4d:bf:21:80:84:3f:0f:15: 6f:66:4d:01:03:10:86:cc:a4:d1:37:5c:26:7e:ee:d0:26:81: 43:ad:10:98:df:01:bb:4b:68:7a:f8:55:06:e0:4e:e0:c5:a4: 9f:2a:33:8c:38:d1:d2:42:6c:19:81:14:8e:1f:f5:ec:5f:92: 3a:c7:69:6e:76:e4:6b:1b:53:6b:e3:d5:62:df:12:3d:80:6f: bb:43:ba:bb:60:08:71:f6:eb:8d:13:38:f6:bc:2e:fa:8e:89: dc:1c:98:db:6e:8b:ea:3a:0b:77:27:ee:80:7a:24:d4:23:c1: 8c:99:b7:36:93:df:e9:69:5b:f9:a3:23:dc:25:f9:bb:21:e7: d5:6f:aa:1b:23:5e:7c:3a:d9:ca:33:5f:2a:f5:e0:2c:05:b2: 9d:9f:04:f3:e9:8c:f5:76:1e:8e:8a:69:6f:b3:fa:3d:c3:8f: ac:f7:65:6d:72:fb:61:27:ca:ac:76:ad:be:90:00:5b:96:6c: 1d:c7:7c:ee:8f:62:45:08:90:e1:37:7f:28:28:25:73:db:a2: fc:a7:bf:6e:15:38:42:07:31:3d:4b:48:81:df:97:5f:5c:45: 6b:ea:c6:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB4ARtr5MwrN58sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzYjdlYjgtYWNiYS00NGE3LWI5MjItYmQyMmE0NTEz NTY0MB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk YzMyMzVmODAtMWE5NS00ODU3LTg0YTUtYjcxZGQ2NmQwMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApewliHa1Yiqcs+yxjaO0dw2guoEBuqxQsvv2 f/jZbAulXqzgMPdCmbxp7o4oKqhKZODNETgzHqHIX3jqp5HhXhYh+9l5GPGhMbaF uZwNlTkBLHOk/6yUyWZZs943hWXGdkz4uj0BjRPfiYHedYf5uy7KTC2LDiewll+e p5iCgbQYfxGK8ZZM9k5MW+aIKTjyTuBH0SiLlDSMATXavlCl1FgM3hIA8xIC7LtC vy06RaghhANsngWuZXYYgA5bDw9v55aQJJCCsh4pJkS1jeTw39fTHjVtJJEAH9N2 +ieOS1hT2qYio0NLIoL8dIy+/tGRgS7xuxUmcKJRDTyH1+J4wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrZkraJwkbjkaGVk4242hPwKHfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNjNi N2ViOC1hY2JhLTQ0YTctYjkyMi1iZDIyYTQ1MTM1NjQvY2E0ZWI3NjgtZmU5ZS0z ZjgzLTg3OWUtZWU2YzY1MmZhMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjYzYjdlYjgtYWNiYS00NGE3LWI5 MjItYmQyMmE0NTEzNTY0L2Y2M2I3ZWI4LWFjYmEtNDRhNy1iOTIyLWJkMjJhNDUx MzU2NC5jcmwwHwYDVR0jBBgwFoAU3RXefEYxmvPP2j3a2dUYmCxxC5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNjNiN2ViOC1hY2JhLTQ0YTctYjkyMi1iZDIy YTQ1MTM1NjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg4+LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6wldJQB4HD+UtcihzfKQwbo1f5dCdPWvtvyJtNvyGAhD8PFW9mTQED EIbMpNE3XCZ+7tAmgUOtEJjfAbtLaHr4VQbgTuDFpJ8qM4w40dJCbBmBFI4f9exf kjrHaW525GsbU2vj1WLfEj2Ab7tDurtgCHH2640TOPa8LvqOidwcmNtui+o6C3cn 7oB6JNQjwYyZtzaT3+lpW/mjI9wl+bsh59VvqhsjXnw62cozXyr14CwFsp2fBPPp jPV2Ho6KaW+z+j3Dj6z3ZW1y+2Enyqx2rb6QAFuWbB3HfO6PYkUIkOE3fygoJXPb ovynv24VOEIHMT1LSIHfl19cRWvqxlE= -----END CERTIFICATE-----Generated at Tue Sep 22 15:54:19 2026 by rpki-client