
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/02ab673e-52f9-333e-984a-1c500fa07f2b.roa
File: 02ab673e-52f9-333e-984a-1c500fa07f2b.roa (raw, json)
Hash identifier: HDR6cQPlwCnlvo5Cl1Doou2NoXaGO1DFOnLu5VNGZiQ=
Subject key identifier: 0E:05:59:83:3A:48:DD:E5:52:ED:29:02:5C:93:55:30:ED:2C:65:FC
Certificate issuer: /CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3
Certificate serial: 010D0C9F4328584D71C2606BEEE31AFF14544E00
Authority key identifier: 32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/02ab673e-52f9-333e-984a-1c500fa07f2b.roa
Signing time: Thu 09 Apr 2026 01:59:34 +0000
ROA not before: Thu 09 Apr 2026 01:59:34 +0000
ROA not after: Wed 08 Jul 2026 01:59:34 +0000
asID: 7029
IP address blocks: 131.143.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 15 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:71:c2:60:6b:ee:e3:1a:ff:14:54:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3
Validity
Not Before: Apr 9 01:59:34 2026 GMT
Not After : Jul 8 01:59:34 2026 GMT
Subject: CN=034fe56d-5891-4e62-909e-1221abb90049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ec:97:13:03:46:65:83:46:4c:8f:e4:83:60:
bc:d7:cd:4b:79:fc:2b:7e:6b:e3:3f:18:7d:88:be:
31:53:46:49:22:4d:68:d9:ba:55:4a:76:57:e0:20:
50:19:11:09:60:ab:9b:98:88:c3:1d:70:a0:f1:ec:
f0:6b:20:6c:a8:c2:2b:c9:7e:8f:9e:1f:29:7d:af:
d8:6c:a7:a7:8c:44:60:7b:0f:85:4f:c2:d8:cb:37:
47:ca:a3:d3:11:25:0f:e2:a8:29:8e:c3:6a:c2:75:
26:24:ff:bf:75:16:cb:35:06:f4:27:07:53:cb:0b:
c5:e0:f2:eb:f9:50:5b:e4:7f:e4:2f:e6:51:02:34:
30:e3:13:ed:2a:68:bf:f4:51:35:62:6c:32:cd:3a:
c8:06:41:fb:d8:63:4e:97:ac:51:f3:f1:7a:11:5d:
c3:e6:65:8e:e1:76:7b:26:23:51:76:ae:df:10:d9:
1b:60:c9:08:53:3b:72:b6:7d:b7:e9:e4:48:13:5c:
d9:9a:63:79:d4:24:cc:66:fe:3a:53:b7:c3:e9:2d:
1d:91:3b:7c:04:04:b4:0c:0c:bf:81:4e:6e:b1:bb:
c6:b5:8b:7d:29:88:c9:2d:b0:6f:f3:0a:46:83:59:
83:91:e0:8c:ca:11:1e:b8:cc:be:62:82:2e:23:b9:
e0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:05:59:83:3A:48:DD:E5:52:ED:29:02:5C:93:55:30:ED:2C:65:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/02ab673e-52f9-333e-984a-1c500fa07f2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.crl
X509v3 Authority Key Identifier:
keyid:32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer
sbgp-ipAddrBlock: critical
IPv4:
131.143.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:f6:bb:21:cc:18:b8:64:0a:76:3c:df:27:c3:be:1e:f9:4b:
8f:c6:91:dc:8a:9c:15:8c:42:8c:e0:73:fa:0e:6b:25:dc:a4:
81:17:b2:29:23:65:07:00:67:b4:57:3a:4e:1c:ee:29:ba:f7:
8c:78:13:3a:80:22:ed:9f:cf:34:9c:44:ef:a1:a9:29:ba:45:
a6:d9:ff:6a:02:92:97:33:a5:40:58:c3:8e:65:41:50:87:4e:
9d:40:20:2d:89:12:78:e6:f9:2f:f7:ad:f3:c6:00:0d:5a:28:
a6:24:20:fe:9c:8d:7f:ab:51:fd:e0:47:e0:bb:c6:e0:29:71:
e4:e9:c6:e8:58:f7:12:6b:93:7b:c2:a9:34:48:1f:f7:17:50:
38:70:ac:28:b0:d5:3d:4b:a8:e8:05:ef:bd:ce:bb:88:2b:0e:
69:e3:77:3d:6b:ef:d9:fe:19:c6:e5:fc:bb:e9:88:aa:c5:d9:
0c:45:50:9f:0d:e9:a2:4b:71:92:66:20:44:50:7f:90:76:f9:
af:3d:03:ad:6b:32:78:99:52:62:ff:11:4a:08:4b:0b:fc:8c:
d9:1c:51:73:b2:c1:9b:bb:c5:cb:e2:29:94:38:f7:50:15:fe:
05:99:d1:cd:d1:a5:bb:3c:93:99:49:55:05:d3:c5:b7:da:34:
99:4f:90:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xwmBr7uMa/xRUTgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ3N2ZmOWQtNTgzMi00NDI4LWEwMWMtYjNlMmZhYWMw
OGYzMB4XDTI2MDQwOTAxNTkzNFoXDTI2MDcwODAxNTkzNFowLzEtMCsGA1UEAxMk
MDM0ZmU1NmQtNTg5MS00ZTYyLTkwOWUtMTIyMWFiYjkwMDQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeyXEwNGZYNGTI/kg2C8181LefwrfmvjPxh9
iL4xU0ZJIk1o2bpVSnZX4CBQGREJYKubmIjDHXCg8ezwayBsqMIryX6Pnh8pfa/Y
bKenjERgew+FT8LYyzdHyqPTESUP4qgpjsNqwnUmJP+/dRbLNQb0JwdTywvF4PLr
+VBb5H/kL+ZRAjQw4xPtKmi/9FE1YmwyzTrIBkH72GNOl6xR8/F6EV3D5mWO4XZ7
JiNRdq7fENkbYMkIUztytn236eRIE1zZmmN51CTMZv46U7fD6S0dkTt8BAS0DAy/
gU5usbvGtYt9KYjJLbBv8wpGg1mDkeCMyhEeuMy+YoIuI7ngrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA4FWYM6SN3lUu0pAlyTVTDtLGX8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDc3
ZmY5ZC01ODMyLTQ0MjgtYTAxYy1iM2UyZmFhYzA4ZjMvMDJhYjY3M2UtNTJmOS0z
MzNlLTk4NGEtMWM1MDBmYTA3ZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGQ3N2ZmOWQtNTgzMi00NDI4LWEw
MWMtYjNlMmZhYWMwOGYzL2RkNzdmZjlkLTU4MzItNDQyOC1hMDFjLWIzZTJmYWFj
MDhmMy5jcmwwHwYDVR0jBBgwFoAUMrbTzWep6SElnbbKew98UASaq1UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDc3ZmY5ZC01ODMyLTQ0MjgtYTAxYy1iM2Uy
ZmFhYzA4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg4/QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAL2uyHMGLhkCnY83yfDvh75S4/GkdyKnBWMQozgc/oOayXcpIEXsikj
ZQcAZ7RXOk4c7im694x4EzqAIu2fzzScRO+hqSm6RabZ/2oCkpczpUBYw45lQVCH
Tp1AIC2JEnjm+S/3rfPGAA1aKKYkIP6cjX+rUf3gR+C7xuApceTpxuhY9xJrk3vC
qTRIH/cXUDhwrCiw1T1LqOgF773Ou4grDmnjdz1r79n+Gcbl/LvpiKrF2QxFUJ8N
6aJLcZJmIERQf5B2+a89A61rMniZUmL/EUoISwv8jNkcUXOywZu7xcviKZQ491AV
/gWZ0c3Rpbs8k5lJVQXTxbfaNJlPkDo=
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:08:36 2026 by rpki-client