$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/0b40f60e-30b5-3843-ad6a-53e0375d2413.roa File: 0b40f60e-30b5-3843-ad6a-53e0375d2413.roa (raw, json) Hash identifier: bCiRyq2XMjgmgCeHdDmLdJXPrrL51jHPJk7G4kBWl+4= Subject key identifier: 89:38:54:75:A2:5B:AE:9B:AC:BA:31:DE:23:A9:73:AB:72:EF:83:4E Certificate issuer: /CN=7af1a9d7-c226-4beb-8f1e-623878125f52 Certificate serial: 010D0C9F4328584CC1E1D1C224BA96FC8861E440 Authority key identifier: 8A:8D:A3:93:DC:37:54:A6:B8:9A:56:2B:7D:23:6D:F6:14:8B:A9:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/0b40f60e-30b5-3843-ad6a-53e0375d2413.roa Signing time: Thu 05 Feb 2026 02:00:31 +0000 ROA not before: Thu 05 Feb 2026 02:00:31 +0000 ROA not after: Wed 06 May 2026 01:00:31 +0000 asID: 19106 IP address blocks: 143.207.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/7af1a9d7-c226-4beb-8f1e-623878125f52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/7af1a9d7-c226-4beb-8f1e-623878125f52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c1:e1:d1:c2:24:ba:96:fc:88:61:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af1a9d7-c226-4beb-8f1e-623878125f52 Validity Not Before: Feb 5 02:00:31 2026 GMT Not After : May 6 01:00:31 2026 GMT Subject: CN=c974de89-621c-49f6-858e-708a9a45d4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9a:4f:a8:5f:24:5e:88:f0:66:cf:f0:b5:29: 59:5f:68:ff:5d:31:93:84:ce:2b:f4:aa:c2:e4:14: db:49:51:6a:dd:47:c4:3f:25:38:24:e8:6c:ca:10: a8:7e:8f:3a:4e:7e:1e:bb:72:55:26:dd:dc:fa:09: e2:00:6f:e4:6f:fe:db:60:2c:ea:46:f9:3d:24:72: 7f:16:d0:5f:fc:fb:f7:af:a5:87:ab:ec:68:d3:f1: 44:42:73:e0:c9:98:94:6b:ac:f2:ed:33:28:d8:1e: 46:e3:77:62:0f:95:0c:91:23:c5:e8:5d:6a:39:f8: e9:f1:94:d8:5c:19:79:ab:1c:29:eb:e7:64:72:54: a8:50:60:d2:8d:2c:f9:dc:75:68:06:f1:49:e8:51: 24:12:4a:d3:7e:a3:67:ce:ea:29:95:91:79:17:26: 29:f9:44:72:30:fc:5d:7f:84:85:35:d7:49:94:eb: 9e:85:c1:e1:73:59:15:bb:47:77:1a:62:91:b6:e0: 22:5b:5e:69:21:2c:5e:f6:a7:1b:7e:c0:f9:9f:af: 8b:f9:1c:20:6b:4e:c9:01:ec:1f:d9:ac:bf:1f:61: 76:34:93:2d:7d:f0:ae:5e:95:e8:57:6e:1c:07:15: fa:a1:53:47:7a:ed:02:5b:42:2a:2a:c4:84:96:7e: 21:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:38:54:75:A2:5B:AE:9B:AC:BA:31:DE:23:A9:73:AB:72:EF:83:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/0b40f60e-30b5-3843-ad6a-53e0375d2413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/7af1a9d7-c226-4beb-8f1e-623878125f52.crl X509v3 Authority Key Identifier: keyid:8A:8D:A3:93:DC:37:54:A6:B8:9A:56:2B:7D:23:6D:F6:14:8B:A9:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52.cer sbgp-ipAddrBlock: critical IPv4: 143.207.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:91:7f:1c:92:56:76:7f:54:33:0e:de:de:7a:05:87:24:f2: 88:20:c1:53:b6:de:5c:20:cf:50:58:18:17:e9:94:ce:dd:c2: 28:e6:d0:53:db:39:68:fd:0b:91:8a:73:5e:f3:75:65:7d:1e: f1:23:83:d2:0f:f6:24:6d:3c:93:97:36:a6:0c:45:70:5c:b3: 35:0e:95:38:1f:a7:eb:9f:f2:11:a8:b1:23:39:08:ca:b6:e8: c1:20:f3:a1:13:50:77:24:6a:45:6a:5a:d4:d2:d0:8c:9e:b8: ed:19:4d:c5:4a:38:c6:e5:48:de:5f:78:fa:a1:12:0e:1b:8d: 64:c8:87:52:ae:d9:c7:0f:56:c1:ed:7b:dd:6d:92:2f:31:e3: 2a:3e:1e:02:59:01:e5:05:70:17:01:ae:15:c8:57:ba:6a:ae: 65:b6:b8:bd:07:15:55:70:81:9f:eb:f2:52:37:f2:ed:12:1b: 25:83:4b:cb:e4:26:b9:fb:34:18:88:ff:a0:46:06:70:6c:e2: 45:2a:70:6f:c6:c7:1d:61:d7:d7:cb:91:79:12:25:6e:65:d5: ec:f6:b1:6a:bf:86:03:1e:6f:50:db:10:34:a5:79:7a:d5:f2: be:be:6d:71:13:a2:6a:d0:80:22:b6:e3:eb:c0:13:eb:fd:52: ce:03:e5:d8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEzB4dHCJLqW/Ihh5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FmMWE5ZDctYzIyNi00YmViLThmMWUtNjIzODc4MTI1 ZjUyMB4XDTI2MDIwNTAyMDAzMVoXDTI2MDUwNjAxMDAzMVowLzEtMCsGA1UEAxMk Yzk3NGRlODktNjIxYy00OWY2LTg1OGUtNzA4YTlhNDVkNGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5pPqF8kXojwZs/wtSlZX2j/XTGThM4r9KrC 5BTbSVFq3UfEPyU4JOhsyhCofo86Tn4eu3JVJt3c+gniAG/kb/7bYCzqRvk9JHJ/ FtBf/Pv3r6WHq+xo0/FEQnPgyZiUa6zy7TMo2B5G43diD5UMkSPF6F1qOfjp8ZTY XBl5qxwp6+dkclSoUGDSjSz53HVoBvFJ6FEkEkrTfqNnzuoplZF5FyYp+URyMPxd f4SFNddJlOuehcHhc1kVu0d3GmKRtuAiW15pISxe9qcbfsD5n6+L+Rwga07JAewf 2ay/H2F2NJMtffCuXpXoV24cBxX6oVNHeu0CW0IqKsSEln4hcQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIk4VHWiW66brLox3iOpc6ty74NOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83YWYx YTlkNy1jMjI2LTRiZWItOGYxZS02MjM4NzgxMjVmNTIvMGI0MGY2MGUtMzBiNS0z ODQzLWFkNmEtNTNlMDM3NWQyNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2FmMWE5ZDctYzIyNi00YmViLThm MWUtNjIzODc4MTI1ZjUyLzdhZjFhOWQ3LWMyMjYtNGJlYi04ZjFlLTYyMzg3ODEy NWY1Mi5jcmwwHwYDVR0jBBgwFoAUio2jk9w3VKa4mlYrfSNt9hSLqWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83YWYxYTlkNy1jMjI2LTRiZWItOGYxZS02MjM4 NzgxMjVmNTIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj88wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAWJF/HJJWdn9UMw7e3noFhyTyiCDBU7beXCDPUFgYF+mUzt3CKObQU9s5 aP0LkYpzXvN1ZX0e8SOD0g/2JG08k5c2pgxFcFyzNQ6VOB+n65/yEaixIzkIyrbo wSDzoRNQdyRqRWpa1NLQjJ647RlNxUo4xuVI3l94+qESDhuNZMiHUq7Zxw9Wwe17 3W2SLzHjKj4eAlkB5QVwFwGuFchXumquZba4vQcVVXCBn+vyUjfy7RIbJYNLy+Qm ufs0GIj/oEYGcGziRSpwb8bHHWHX18uReRIlbmXV7Paxar+GAx5vUNsQNKV5etXy vr5tcROiatCAIrbj68AT6/1SzgPl2A== -----END CERTIFICATE-----Generated at Mon Mar 2 18:34:30 2026 by rpki-client