$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/df1d6a36-b880-3ea5-a412-bdc9b2303d86.roa File: df1d6a36-b880-3ea5-a412-bdc9b2303d86.roa (raw, json) Hash identifier: 8ksrc+99h6VTxc3hw0fMq0avUhM1YJiLbyDa3OG0Ips= Subject key identifier: B4:75:8D:07:EC:DD:79:CF:ED:23:E6:A6:E6:73:FD:6B:20:6F:00:6E Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F4328584EB41702CFF689C4AA1BF94080 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/df1d6a36-b880-3ea5-a412-bdc9b2303d86.roa Signing time: Sun 02 Aug 2026 13:00:12 +0000 ROA not before: Sun 02 Aug 2026 13:00:12 +0000 ROA not after: Sat 31 Oct 2026 13:00:12 +0000 asID: 923 IP address blocks: 131.143.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b4:17:02:cf:f6:89:c4:aa:1b:f9:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: Aug 2 13:00:12 2026 GMT Not After : Oct 31 13:00:12 2026 GMT Subject: CN=03a2cc91-606b-4622-bb01-7c09c946a9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b5:7a:64:2f:9d:cf:63:03:b0:50:d9:26:8b: 00:41:37:1e:81:eb:b7:9a:a6:3a:90:7f:cc:64:3e: ab:02:ae:1f:07:be:16:3e:f0:bb:a0:95:e8:ea:c1: 44:43:86:77:5b:92:e2:ba:22:c6:ab:b3:90:eb:a9: 7b:83:25:a7:aa:c5:64:96:e6:20:7a:db:96:9d:03: ce:f7:39:d9:77:fd:94:fb:9d:5d:62:00:50:81:63: 43:98:49:fd:fd:1f:2c:06:19:c4:e1:e2:37:c9:f5: ae:b1:3a:ce:41:bb:cb:ac:6d:97:a7:89:5d:96:fb: 90:15:ed:a0:11:4b:4f:fd:12:30:b2:ec:ba:c2:3c: 01:6f:7e:4e:58:05:d6:68:51:57:7b:1c:e5:69:e5: 53:f4:60:59:06:e3:04:d8:ea:ea:70:6d:02:5a:da: 94:fb:a7:62:1b:51:1f:10:67:74:01:6b:52:eb:92: ef:c1:b0:a0:eb:ee:c1:56:4f:83:7c:df:1f:35:24: db:0f:24:11:19:00:4f:57:d4:2e:54:48:89:03:74: 94:37:09:5a:e8:d6:7e:12:75:13:8f:6b:cd:c5:07: 00:b5:77:a9:73:59:6a:b8:c2:e9:74:3d:92:f7:1a: 7c:d4:cf:0f:15:74:85:8e:99:7b:49:78:f7:d0:1f: 47:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:75:8D:07:EC:DD:79:CF:ED:23:E6:A6:E6:73:FD:6B:20:6F:00:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/df1d6a36-b880-3ea5-a412-bdc9b2303d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: 131.143.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:8c:6c:06:62:9c:39:7d:82:4d:9d:ea:1c:b5:39:62:87:b8: e7:ca:2f:5c:c1:90:4f:e5:11:cb:f8:4b:6b:54:59:bf:1d:37: 79:47:af:b6:6c:78:25:94:ed:a0:4b:10:59:40:2f:31:42:ad: 50:e8:92:b5:cb:31:f0:76:00:a4:8d:c3:3f:d6:40:e9:e8:a1: 60:77:01:bd:f0:56:0d:3d:15:33:5f:a2:52:e5:b8:87:1d:43: b9:44:d8:5c:16:1b:14:71:8c:7b:43:c3:f7:b4:ee:3b:35:e5: af:4e:14:31:4a:ce:4e:40:e0:50:de:5d:a8:d1:60:ca:eb:27: bf:96:e5:9d:aa:0a:35:78:a7:17:5f:39:e0:50:d6:59:e5:52: 0d:57:79:f1:a2:08:b3:ba:14:41:44:4c:5d:0c:7f:c1:3c:1f: 48:af:68:92:48:3e:ff:b5:16:fd:75:fb:e3:fc:fb:d7:79:51: 73:37:1b:d6:f0:7b:72:44:59:18:e4:19:47:8f:a3:a8:dd:e3: 31:d5:18:ab:c2:82:43:35:e9:07:28:8d:5d:c1:da:b1:72:a5: 99:ca:38:e2:74:f7:00:f2:39:13:63:78:68:79:f7:37:a0:35: 00:07:b8:2a:b1:50:70:8e:6d:3c:b8:ac:85:0f:3f:0c:a6:87: 62:d1:0d:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE60FwLP9onEqhv5QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI2MDgwMjEzMDAxMloXDTI2MTAzMTEzMDAxMlowLzEtMCsGA1UEAxMk MDNhMmNjOTEtNjA2Yi00NjIyLWJiMDEtN2MwOWM5NDZhOWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibV6ZC+dz2MDsFDZJosAQTcegeu3mqY6kH/M ZD6rAq4fB74WPvC7oJXo6sFEQ4Z3W5LiuiLGq7OQ66l7gyWnqsVkluYgetuWnQPO 9znZd/2U+51dYgBQgWNDmEn9/R8sBhnE4eI3yfWusTrOQbvLrG2Xp4ldlvuQFe2g EUtP/RIwsuy6wjwBb35OWAXWaFFXexzlaeVT9GBZBuME2OrqcG0CWtqU+6diG1Ef EGd0AWtS65LvwbCg6+7BVk+DfN8fNSTbDyQRGQBPV9QuVEiJA3SUNwla6NZ+EnUT j2vNxQcAtXepc1lquMLpdD2S9xp81M8PFXSFjpl7SXj30B9HbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLR1jQfs3XnP7SPmpuZz/WsgbwBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvZGYxZDZhMzYtYjg4MC0z ZWE1LWE0MTItYmRjOWIyMzAzZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg4/MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2MbAZinDl9gk2d6hy1OWKHuOfKL1zBkE/lEcv4S2tUWb8dN3lHr7Zs eCWU7aBLEFlALzFCrVDokrXLMfB2AKSNwz/WQOnooWB3Ab3wVg09FTNfolLluIcd Q7lE2FwWGxRxjHtDw/e07js15a9OFDFKzk5A4FDeXajRYMrrJ7+W5Z2qCjV4pxdf OeBQ1lnlUg1XefGiCLO6FEFETF0Mf8E8H0ivaJJIPv+1Fv11++P8+9d5UXM3G9bw e3JEWRjkGUePo6jd4zHVGKvCgkM16QcojV3B2rFypZnKOOJ09wDyORNjeGh59zeg NQAHuCqxUHCObTy4rIUPPwymh2LRDT0= -----END CERTIFICATE-----Generated at Tue Aug 11 12:21:31 2026 by rpki-client