$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/ca4eb768-fe9e-3f83-879e-ee6c652fa19d.roa File: ca4eb768-fe9e-3f83-879e-ee6c652fa19d.roa (raw, json) Hash identifier: PrSUMyDDjMU2Kou6a0lEXD4exGcQH/qk28wA6defjxU= Subject key identifier: 72:45:31:54:A8:81:79:71:13:E0:2B:FF:9C:25:47:31:BF:C6:50:31 Certificate issuer: /CN=f63b7eb8-acba-44a7-b922-bd22a4513564 Certificate serial: 010D0C9F4328584FADF333A7368A3AD63A727180 Authority key identifier: DD:15:DE:7C:46:31:9A:F3:CF:DA:3D:DA:D9:D5:18:98:2C:71:0B:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/ca4eb768-fe9e-3f83-879e-ee6c652fa19d.roa Signing time: Sat 31 Oct 2026 01:00:13 +0000 ROA not before: Sat 31 Oct 2026 01:00:13 +0000 ROA not after: Fri 29 Jan 2027 02:00:13 +0000 asID: 211188 IP address blocks: 131.143.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/f63b7eb8-acba-44a7-b922-bd22a4513564.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/f63b7eb8-acba-44a7-b922-bd22a4513564.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Nov 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ad:f3:33:a7:36:8a:3a:d6:3a:72:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63b7eb8-acba-44a7-b922-bd22a4513564 Validity Not Before: Oct 31 01:00:13 2026 GMT Not After : Jan 29 02:00:13 2027 GMT Subject: CN=ef3a4676-9150-4a56-aa02-e6e578b5a702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ee:e6:8f:6a:89:08:3c:76:0a:3d:9d:d4:f2: 2d:2a:cc:98:db:64:ae:f1:33:20:2e:0c:5e:0d:7c: 1a:a0:d8:00:ce:03:0a:4f:49:8e:46:7b:fd:d6:f2: 76:a9:9c:cf:07:ba:91:57:25:a8:11:4e:a5:39:32: 9c:46:8d:33:e9:9d:62:78:c8:d0:c0:06:43:eb:7f: 86:48:1f:69:ca:d4:a9:ab:87:ec:fe:92:dd:4d:45: f0:0e:63:f8:6a:96:9b:57:ac:34:96:46:65:f9:65: c8:0e:ab:d6:3c:47:b9:c0:a5:0b:33:e9:f7:9b:6e: dd:ae:72:a5:2c:4b:70:53:bf:59:90:91:7f:88:86: f1:75:47:7a:5c:ad:25:8a:43:78:d3:e6:3e:eb:76: 09:7c:59:ec:af:19:35:58:30:97:3b:78:17:9d:f4: 5f:67:bd:d0:f7:69:95:55:59:71:da:64:12:40:66: 1e:7d:dd:c8:4e:04:1d:5d:73:fe:93:da:12:88:8c: 13:f6:df:c5:91:c7:d9:a7:13:02:5c:75:42:7c:43: 2d:31:b2:23:d3:b4:c9:4c:40:82:1f:82:d5:b6:42: 51:22:36:67:ff:1d:e9:c6:04:b2:a3:d2:a6:0e:a8: f1:22:69:ff:10:b5:a9:fa:63:13:2f:b3:56:1d:21: ac:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:45:31:54:A8:81:79:71:13:E0:2B:FF:9C:25:47:31:BF:C6:50:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/ca4eb768-fe9e-3f83-879e-ee6c652fa19d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/f63b7eb8-acba-44a7-b922-bd22a4513564.crl X509v3 Authority Key Identifier: keyid:DD:15:DE:7C:46:31:9A:F3:CF:DA:3D:DA:D9:D5:18:98:2C:71:0B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564.cer sbgp-ipAddrBlock: critical IPv4: 131.143.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:7e:4d:f5:5b:0c:07:bc:fa:bd:ec:72:28:e0:bb:72:21:7a: c4:d1:a5:a2:d5:e4:59:db:c2:e3:a7:93:0d:25:db:0e:04:d1: 86:3f:a0:35:9d:75:c7:5b:d6:f5:5b:dd:84:95:52:86:2e:b1: 0c:f5:1d:d6:4e:bf:e4:a1:71:bf:f7:c5:c1:4c:67:2f:fa:12: 04:32:89:80:bc:cb:a9:af:41:d2:79:ce:d6:f5:4b:64:7f:94: ff:3d:28:00:4d:d6:8c:e8:db:8c:6f:43:49:35:44:24:ba:ce: cf:3d:24:19:23:b7:1a:88:45:60:dd:06:62:06:73:a9:7e:e3: 7a:0b:e5:bf:be:ec:ac:0b:65:ac:ca:02:d8:8f:c4:e1:dc:64: 0e:86:e8:2b:03:14:12:da:c3:7d:3e:08:44:b6:33:d1:83:3a: 0a:85:a2:4a:9c:2a:56:cf:cc:a9:63:4d:3d:e8:ae:e8:53:ea: 40:19:33:48:57:50:6a:a0:55:a1:07:be:00:11:a4:f5:8f:3c: dc:f9:43:96:08:ce:57:a2:86:c4:07:a0:49:09:d2:81:bb:e8: 0b:39:55:d3:72:92:95:e2:aa:cd:e4:8a:a2:ef:99:8e:1f:16: 52:ed:3c:1a:8d:3c:69:19:dd:e0:d5:2c:5d:7e:cc:d3:0b:67: f1:2c:ae:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+t8zOnNoo61jpycYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzYjdlYjgtYWNiYS00NGE3LWI5MjItYmQyMmE0NTEz NTY0MB4XDTI2MTAzMTAxMDAxM1oXDTI3MDEyOTAyMDAxM1owLzEtMCsGA1UEAxMk ZWYzYTQ2NzYtOTE1MC00YTU2LWFhMDItZTZlNTc4YjVhNzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+7mj2qJCDx2Cj2d1PItKsyY22Su8TMgLgxe DXwaoNgAzgMKT0mORnv91vJ2qZzPB7qRVyWoEU6lOTKcRo0z6Z1ieMjQwAZD63+G SB9pytSpq4fs/pLdTUXwDmP4apabV6w0lkZl+WXIDqvWPEe5wKULM+n3m27drnKl LEtwU79ZkJF/iIbxdUd6XK0likN40+Y+63YJfFnsrxk1WDCXO3gXnfRfZ73Q92mV VVlx2mQSQGYefd3ITgQdXXP+k9oSiIwT9t/FkcfZpxMCXHVCfEMtMbIj07TJTECC H4LVtkJRIjZn/x3pxgSyo9KmDqjxImn/ELWp+mMTL7NWHSGsbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJFMVSogXlxE+Ar/5wlRzG/xlAxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNjNi N2ViOC1hY2JhLTQ0YTctYjkyMi1iZDIyYTQ1MTM1NjQvY2E0ZWI3NjgtZmU5ZS0z ZjgzLTg3OWUtZWU2YzY1MmZhMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjYzYjdlYjgtYWNiYS00NGE3LWI5 MjItYmQyMmE0NTEzNTY0L2Y2M2I3ZWI4LWFjYmEtNDRhNy1iOTIyLWJkMjJhNDUx MzU2NC5jcmwwHwYDVR0jBBgwFoAU3RXefEYxmvPP2j3a2dUYmCxxC5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNjNiN2ViOC1hY2JhLTQ0YTctYjkyMi1iZDIy YTQ1MTM1NjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg4+LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEh+TfVbDAe8+r3scijgu3IhesTRpaLV5FnbwuOnkw0l2w4E0YY/oDWd dcdb1vVb3YSVUoYusQz1HdZOv+Shcb/3xcFMZy/6EgQyiYC8y6mvQdJ5ztb1S2R/ lP89KABN1ozo24xvQ0k1RCS6zs89JBkjtxqIRWDdBmIGc6l+43oL5b++7KwLZazK AtiPxOHcZA6G6CsDFBLaw30+CES2M9GDOgqFokqcKlbPzKljTT3oruhT6kAZM0hX UGqgVaEHvgARpPWPPNz5Q5YIzleihsQHoEkJ0oG76As5VdNykpXiqs3kiqLvmY4f FlLtPBqNPGkZ3eDVLF1+zNMLZ/EsrnA= -----END CERTIFICATE-----Generated at Sat Nov 14 21:46:05 2026 by rpki-client