$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/812e356d-8c19-3fdf-82cb-0f7c188e4f37.roa File: 812e356d-8c19-3fdf-82cb-0f7c188e4f37.roa (raw, json) Hash identifier: n8jf2i6wfWDnmWxskTWwzWi/PQ3sZUMLV360bghtIvI= Subject key identifier: 61:36:65:FC:57:01:A1:7E:AA:48:5A:ED:F5:53:C7:1C:F2:91:AB:83 Certificate issuer: /CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3 Certificate serial: 010D0C9F4328584DF3BD214839A980ED6B63E180 Authority key identifier: 32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/812e356d-8c19-3fdf-82cb-0f7c188e4f37.roa Signing time: Mon 25 May 2026 15:24:05 +0000 ROA not before: Mon 25 May 2026 15:24:05 +0000 ROA not after: Sun 23 Aug 2026 15:24:05 +0000 asID: 399955 IP address blocks: 131.143.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f3:bd:21:48:39:a9:80:ed:6b:63:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3 Validity Not Before: May 25 15:24:05 2026 GMT Not After : Aug 23 15:24:05 2026 GMT Subject: CN=10208340-ebab-4ce7-9b5f-7b514cbf84cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a6:0d:5c:73:9a:d4:ed:84:ed:94:78:ba:0d: 70:fd:f3:51:7d:a3:c0:6f:8b:f0:41:88:06:17:51: 70:ef:9c:88:77:95:e4:f2:e7:c2:89:06:90:4a:d4: e1:56:9d:0c:8b:3e:66:06:e5:2a:89:c7:c4:ad:63: ea:11:91:61:84:3a:8f:b4:3b:7b:35:1f:d1:4c:fb: cc:3d:46:58:4e:55:e5:89:3f:a4:a5:8c:b4:23:2c: 00:90:48:e9:a4:40:ae:94:55:08:d6:6f:9a:a5:5e: c2:df:ff:43:0f:f9:d0:a3:08:a4:d9:df:f9:5d:2f: eb:f9:aa:63:61:9d:04:21:6d:16:96:05:f9:40:76: 9b:98:58:57:78:b2:30:39:7d:28:06:e7:44:4b:be: 12:a7:c5:cf:61:ff:2f:85:62:22:79:8c:8a:47:e5: 46:c8:78:0e:26:cc:e3:77:ea:4c:5a:14:94:7e:e6: 7d:39:04:4b:fd:72:12:ca:13:43:d6:2b:49:9c:20: da:36:55:3d:6b:a4:3f:67:74:1c:1d:ef:b0:4a:0b: 62:00:43:94:b7:22:c7:c9:79:8e:ac:cc:cb:52:ec: 0d:3f:5f:dd:79:24:90:dc:a7:c8:4c:ac:82:db:5b: de:e0:f1:6f:0f:48:fb:f9:df:b0:5b:00:62:d3:d5: d4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:36:65:FC:57:01:A1:7E:AA:48:5A:ED:F5:53:C7:1C:F2:91:AB:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/812e356d-8c19-3fdf-82cb-0f7c188e4f37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.crl X509v3 Authority Key Identifier: keyid:32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer sbgp-ipAddrBlock: critical IPv4: 131.143.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:8a:23:70:a7:0f:f9:29:22:72:b1:22:4e:ea:e6:fa:41:bf: 8d:b9:68:28:88:d4:5f:1b:45:a9:ac:50:7a:ad:b8:7b:d0:f6: 47:36:77:b6:78:91:b1:fc:a6:24:03:85:6f:1e:7e:9f:5a:2d: 48:8a:ba:01:b8:a1:88:f9:3c:82:9c:44:9e:dd:c4:5b:97:79: 40:83:32:dc:ad:3f:a3:d7:16:51:60:f0:ef:2d:59:59:03:0d: 15:66:67:05:03:59:8f:35:a8:1c:a4:ca:93:31:cc:a3:f8:c3: 1b:e3:eb:38:ae:1c:71:a7:b1:67:9a:ef:d1:7d:64:eb:70:35: 42:b1:6e:f1:c8:7b:9e:17:64:00:27:48:24:db:2b:5d:f8:60: ff:91:10:df:68:36:97:e6:f9:0f:c5:4f:ba:f3:1f:aa:61:d0: 27:3f:b0:41:f4:7c:40:87:09:a5:b5:55:ff:47:ed:d9:90:42: 8a:dd:eb:e8:78:46:18:62:1e:f5:ae:36:a5:83:81:c8:0c:f4: 93:d5:f5:c8:3f:83:06:f3:94:c8:5c:6a:bb:91:9e:5b:cb:db: f6:f5:de:ec:04:ea:9b:18:ef:d8:5a:d7:1e:0c:4b:63:19:4e: e6:66:36:ae:1c:8c:96:51:a7:97:81:68:7c:6d:50:96:cd:e8: 6a:0b:fe:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3zvSFIOamA7Wtj4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3N2ZmOWQtNTgzMi00NDI4LWEwMWMtYjNlMmZhYWMw OGYzMB4XDTI2MDUyNTE1MjQwNVoXDTI2MDgyMzE1MjQwNVowLzEtMCsGA1UEAxMk MTAyMDgzNDAtZWJhYi00Y2U3LTliNWYtN2I1MTRjYmY4NGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6YNXHOa1O2E7ZR4ug1w/fNRfaPAb4vwQYgG F1Fw75yId5Xk8ufCiQaQStThVp0Miz5mBuUqicfErWPqEZFhhDqPtDt7NR/RTPvM PUZYTlXliT+kpYy0IywAkEjppECulFUI1m+apV7C3/9DD/nQowik2d/5XS/r+apj YZ0EIW0WlgX5QHabmFhXeLIwOX0oBudES74Sp8XPYf8vhWIieYyKR+VGyHgOJszj d+pMWhSUfuZ9OQRL/XISyhND1itJnCDaNlU9a6Q/Z3QcHe+wSgtiAEOUtyLHyXmO rMzLUuwNP1/deSSQ3KfITKyC21ve4PFvD0j7+d+wWwBi09XURwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGE2ZfxXAaF+qkha7fVTxxzykauDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDc3 ZmY5ZC01ODMyLTQ0MjgtYTAxYy1iM2UyZmFhYzA4ZjMvODEyZTM1NmQtOGMxOS0z ZmRmLTgyY2ItMGY3YzE4OGU0ZjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGQ3N2ZmOWQtNTgzMi00NDI4LWEw MWMtYjNlMmZhYWMwOGYzL2RkNzdmZjlkLTU4MzItNDQyOC1hMDFjLWIzZTJmYWFj MDhmMy5jcmwwHwYDVR0jBBgwFoAUMrbTzWep6SElnbbKew98UASaq1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDc3ZmY5ZC01ODMyLTQ0MjgtYTAxYy1iM2Uy ZmFhYzA4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg4/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGKI3CnD/kpInKxIk7q5vpBv425aCiI1F8bRamsUHqtuHvQ9kc2d7Z4 kbH8piQDhW8efp9aLUiKugG4oYj5PIKcRJ7dxFuXeUCDMtytP6PXFlFg8O8tWVkD DRVmZwUDWY81qBykypMxzKP4wxvj6ziuHHGnsWea79F9ZOtwNUKxbvHIe54XZAAn SCTbK134YP+REN9oNpfm+Q/FT7rzH6ph0Cc/sEH0fECHCaW1Vf9H7dmQQord6+h4 RhhiHvWuNqWDgcgM9JPV9cg/gwbzlMhcaruRnlvL2/b13uwE6psY79ha1x4MS2MZ TuZmNq4cjJZRp5eBaHxtUJbN6GoL/mk= -----END CERTIFICATE-----Generated at Thu May 28 13:32:46 2026 by rpki-client