$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/01e1c647-3188-3539-9f24-1da3ee8799c3.roa File: 01e1c647-3188-3539-9f24-1da3ee8799c3.roa (raw, json) Hash identifier: W7l4kiBWgNXfPECQ3LoRnFYNZJZqF8IX2/2iSbhHEsI= Subject key identifier: 31:BD:DC:28:4B:D6:8D:F5:51:10:6E:07:04:EF:38:F3:A2:99:D6:A9 Certificate issuer: /CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3 Certificate serial: 010D0C9F4328584DF3BD51888E90AF92B812C280 Authority key identifier: 32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/01e1c647-3188-3539-9f24-1da3ee8799c3.roa Signing time: Mon 25 May 2026 15:24:27 +0000 ROA not before: Mon 25 May 2026 15:24:27 +0000 ROA not after: Sun 23 Aug 2026 15:24:27 +0000 asID: 6079 IP address blocks: 131.143.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f3:bd:51:88:8e:90:af:92:b8:12:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3 Validity Not Before: May 25 15:24:27 2026 GMT Not After : Aug 23 15:24:27 2026 GMT Subject: CN=cdfd70c5-0454-4082-bf2e-257f05c7c028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:58:98:bd:16:78:58:1f:dc:26:b4:a0:ca:fc: 11:21:97:1b:fb:f5:96:34:a1:18:d6:b7:92:f2:15: 6f:f3:72:9e:8d:ab:07:22:ee:5d:b2:2a:85:b3:9d: af:8e:02:7f:dd:99:8c:2e:40:5e:33:7f:81:b6:05: 63:1e:9d:19:0a:1c:ab:6e:fe:16:c1:a2:4b:8e:b3: d6:90:bc:3a:93:16:75:41:e6:7d:95:16:a2:0f:71: e4:17:e6:56:0f:5b:07:3c:73:3a:bd:a4:b5:16:60: e1:7a:64:2e:25:3d:98:85:f7:72:f1:2a:71:69:d9: d8:04:3c:95:46:06:73:44:b5:c7:96:40:9d:62:57: d5:56:23:73:0a:44:68:9b:ed:34:5e:a1:16:11:ca: 02:cb:98:60:b6:06:22:cc:c7:fa:ea:81:81:e7:02: e6:20:6d:07:9e:34:c7:b5:4a:32:e3:9d:86:2a:3d: c5:8d:43:77:94:63:39:c1:be:33:c9:bc:a3:cd:3f: e3:90:68:cc:f7:89:84:8c:ac:41:89:b3:28:9c:fc: f3:ec:7b:ac:83:50:58:68:8e:88:43:3d:0f:cc:00: 69:3c:20:c7:73:b5:aa:02:20:78:b7:eb:cf:71:1b: 72:b5:61:9c:d9:85:35:32:c6:ee:b0:a9:c7:64:96: e7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BD:DC:28:4B:D6:8D:F5:51:10:6E:07:04:EF:38:F3:A2:99:D6:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/01e1c647-3188-3539-9f24-1da3ee8799c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.crl X509v3 Authority Key Identifier: keyid:32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer sbgp-ipAddrBlock: critical IPv4: 131.143.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5e:1d:41:ff:16:45:fb:a1:11:66:35:7e:ca:cd:9a:d2:ac: 7b:b3:bc:03:3d:4d:3d:e3:74:91:e1:5a:1d:61:ec:59:28:00: 3f:e4:39:0c:5d:70:51:be:78:6f:1b:75:21:46:c8:28:83:64: 73:29:6e:86:41:07:c5:17:b9:b0:54:3c:da:e7:6d:e6:79:13: 14:b0:10:30:43:e2:91:b0:93:ac:f2:3b:60:32:26:b3:c5:6e: 26:c1:55:31:ed:79:e6:dd:a6:db:2a:99:f9:b9:01:07:3a:1f: 3d:e5:10:de:2f:5b:d9:3a:82:b7:1f:05:a2:47:c7:2f:dc:03: 15:b6:67:f9:92:0f:35:a1:6d:14:a3:88:84:b4:0c:a0:a6:92: ad:30:5a:66:c8:f7:c3:72:4f:d8:7a:40:bf:04:61:5d:15:d5: eb:39:19:9f:58:38:a1:4c:66:a5:54:93:ff:49:23:d9:d1:43: d6:36:94:9e:a6:a9:73:c3:67:7d:04:54:b2:3b:0c:ab:f4:6c: 95:89:a9:bb:1e:1d:37:e4:67:f0:84:af:ab:b2:85:76:f5:be: 62:68:f6:25:13:16:bf:1e:9c:10:12:5f:6b:29:57:1c:0d:b2: fd:3c:72:56:6d:67:76:cf:ec:19:c7:99:e8:34:c3:93:41:4a: 5c:d2:dc:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3zvVGIjpCvkrgSwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3N2ZmOWQtNTgzMi00NDI4LWEwMWMtYjNlMmZhYWMw OGYzMB4XDTI2MDUyNTE1MjQyN1oXDTI2MDgyMzE1MjQyN1owLzEtMCsGA1UEAxMk Y2RmZDcwYzUtMDQ1NC00MDgyLWJmMmUtMjU3ZjA1YzdjMDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFiYvRZ4WB/cJrSgyvwRIZcb+/WWNKEY1reS 8hVv83KejasHIu5dsiqFs52vjgJ/3ZmMLkBeM3+BtgVjHp0ZChyrbv4WwaJLjrPW kLw6kxZ1QeZ9lRaiD3HkF+ZWD1sHPHM6vaS1FmDhemQuJT2Yhfdy8SpxadnYBDyV RgZzRLXHlkCdYlfVViNzCkRom+00XqEWEcoCy5hgtgYizMf66oGB5wLmIG0HnjTH tUoy452GKj3FjUN3lGM5wb4zybyjzT/jkGjM94mEjKxBibMonPzz7Husg1BYaI6I Qz0PzABpPCDHc7WqAiB4t+vPcRtytWGc2YU1MsbusKnHZJbnJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDG93ChL1o31URBuBwTvOPOimdapMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDc3 ZmY5ZC01ODMyLTQ0MjgtYTAxYy1iM2UyZmFhYzA4ZjMvMDFlMWM2NDctMzE4OC0z NTM5LTlmMjQtMWRhM2VlODc5OWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGQ3N2ZmOWQtNTgzMi00NDI4LWEw MWMtYjNlMmZhYWMwOGYzL2RkNzdmZjlkLTU4MzItNDQyOC1hMDFjLWIzZTJmYWFj MDhmMy5jcmwwHwYDVR0jBBgwFoAUMrbTzWep6SElnbbKew98UASaq1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDc3ZmY5ZC01ODMyLTQ0MjgtYTAxYy1iM2Uy ZmFhYzA4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg4/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1eHUH/FkX7oRFmNX7KzZrSrHuzvAM9TT3jdJHhWh1h7FkoAD/kOQxd cFG+eG8bdSFGyCiDZHMpboZBB8UXubBUPNrnbeZ5ExSwEDBD4pGwk6zyO2AyJrPF bibBVTHteebdptsqmfm5AQc6Hz3lEN4vW9k6grcfBaJHxy/cAxW2Z/mSDzWhbRSj iIS0DKCmkq0wWmbI98NyT9h6QL8EYV0V1es5GZ9YOKFMZqVUk/9JI9nRQ9Y2lJ6m qXPDZ30EVLI7DKv0bJWJqbseHTfkZ/CEr6uyhXb1vmJo9iUTFr8enBASX2spVxwN sv08clZtZ3bP7BnHmeg0w5NBSlzS3BI= -----END CERTIFICATE-----Generated at Thu May 28 13:33:22 2026 by rpki-client