$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd490af9-ff16-3d5a-811d-3c00340dee95.roa File: dd490af9-ff16-3d5a-811d-3c00340dee95.roa (raw, json) Hash identifier: 3jmGRcCE8y106XtJ4TT8BtfC17bp9dY2Az1jrU45/8c= Subject key identifier: 76:AC:8E:9B:F5:26:9C:4E:CA:94:95:C5:CD:7D:F0:2E:4B:60:B0:77 Certificate issuer: /CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3 Certificate serial: 010D0C9F4328584D789FCC737B79FAB6E008D700 Authority key identifier: 32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd490af9-ff16-3d5a-811d-3c00340dee95.roa Signing time: Sat 11 Apr 2026 13:00:31 +0000 ROA not before: Sat 11 Apr 2026 13:00:31 +0000 ROA not after: Fri 10 Jul 2026 13:00:31 +0000 asID: 5650 IP address blocks: 131.143.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:78:9f:cc:73:7b:79:fa:b6:e0:08:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3 Validity Not Before: Apr 11 13:00:31 2026 GMT Not After : Jul 10 13:00:31 2026 GMT Subject: CN=92dbc2f4-75fd-4067-83d8-e764dc2ebc0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:fb:95:a6:99:95:2b:c2:e0:c0:cc:a9:41: b7:24:77:9d:0e:80:ec:cc:f9:d8:47:49:34:1e:d8: 09:79:0f:d4:a0:9a:3e:ff:a3:d5:9b:f2:51:c4:24: b5:2f:84:3e:5a:8a:a3:50:53:99:15:28:db:48:8a: 61:d0:62:06:47:f6:24:c6:eb:b8:1e:ba:8b:3b:ca: 20:22:71:5c:b5:d8:23:df:14:4d:d1:53:ac:3d:62: c1:32:81:c0:a4:22:e7:24:f1:49:7f:7b:18:ec:4f: 73:b4:30:f5:67:ea:1b:dc:f7:c2:7e:da:9d:4d:c6: 01:a5:5b:0c:5a:ee:ec:01:6a:62:c1:06:94:2c:54: d2:46:f2:43:f8:b7:44:fa:87:b5:49:5f:1c:ad:73: e6:8c:35:37:8c:b4:ad:df:24:f6:29:ab:14:84:f3: 76:a3:1a:68:8f:db:8c:e9:98:fc:21:38:ae:cf:2a: 39:b8:e2:36:cd:7a:60:a5:4d:6a:23:c2:90:2f:67: 22:55:a6:06:b7:74:ca:18:4d:95:a9:ae:88:ad:d7: 60:07:fc:1e:0f:ae:e2:e3:fc:9b:25:3a:65:a2:1d: 26:b9:fb:6a:36:d9:74:58:d0:53:41:13:cd:9a:84: 89:d9:1c:b6:11:20:b2:85:01:14:b8:dd:a5:c0:96: 62:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AC:8E:9B:F5:26:9C:4E:CA:94:95:C5:CD:7D:F0:2E:4B:60:B0:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd490af9-ff16-3d5a-811d-3c00340dee95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.crl X509v3 Authority Key Identifier: keyid:32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer sbgp-ipAddrBlock: critical IPv4: 131.143.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e8:21:37:7d:c2:ea:6e:3d:1f:34:21:69:a6:a6:7a:10:f3: e1:51:15:69:18:97:12:5d:b0:0c:33:5f:bf:cf:c3:00:45:3f: ab:74:2f:80:f7:ad:03:85:ae:41:95:e0:38:a3:bc:fb:44:b7: dc:1d:d4:29:76:44:fa:db:f0:0b:34:81:b7:c0:b4:bf:63:d2: b5:b6:cd:15:ae:f4:dc:f3:94:66:65:1a:18:e5:c5:ae:af:a3: 1d:6f:13:4b:5f:7f:4d:53:f1:f3:e6:61:27:3c:53:20:4f:9a: f5:6c:6f:9a:c8:af:b3:2f:30:86:79:6c:dc:48:84:ea:65:c2: 5c:8b:18:e9:b5:79:15:ff:5a:88:66:42:0c:24:9c:6d:82:d1: d4:39:1d:b9:a8:cf:f8:b3:1f:e3:b5:b5:ed:f8:87:a1:29:ce: 1e:f0:f0:62:0f:7b:ef:42:97:f3:2c:0a:bb:d8:96:fd:58:ab: 7e:f4:9f:78:19:55:50:92:19:1c:96:b5:51:3b:23:59:6d:b4: 94:d3:c0:01:22:96:d3:f5:a9:e2:79:36:02:36:5c:12:a7:0d: 79:0c:59:c5:c5:48:76:d4:8d:3a:98:85:5c:b5:74:69:28:1f: be:92:95:b9:af:89:8c:e0:ad:65:52:81:fd:2a:14:ad:4a:64: 2b:8f:29:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE14n8xze3n6tuAI1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3N2ZmOWQtNTgzMi00NDI4LWEwMWMtYjNlMmZhYWMw OGYzMB4XDTI2MDQxMTEzMDAzMVoXDTI2MDcxMDEzMDAzMVowLzEtMCsGA1UEAxMk OTJkYmMyZjQtNzVmZC00MDY3LTgzZDgtZTc2NGRjMmViYzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ37laaZlSvC4MDMqUG3JHedDoDszPnYR0k0 HtgJeQ/UoJo+/6PVm/JRxCS1L4Q+WoqjUFOZFSjbSIph0GIGR/Ykxuu4HrqLO8og InFctdgj3xRN0VOsPWLBMoHApCLnJPFJf3sY7E9ztDD1Z+ob3PfCftqdTcYBpVsM Wu7sAWpiwQaULFTSRvJD+LdE+oe1SV8crXPmjDU3jLSt3yT2KasUhPN2oxpoj9uM 6Zj8ITiuzyo5uOI2zXpgpU1qI8KQL2ciVaYGt3TKGE2Vqa6IrddgB/weD67i4/yb JTploh0muftqNtl0WNBTQRPNmoSJ2Ry2ESCyhQEUuN2lwJZi+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHasjpv1JpxOypSVxc198C5LYLB3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDc3 ZmY5ZC01ODMyLTQ0MjgtYTAxYy1iM2UyZmFhYzA4ZjMvZGQ0OTBhZjktZmYxNi0z ZDVhLTgxMWQtM2MwMDM0MGRlZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGQ3N2ZmOWQtNTgzMi00NDI4LWEw MWMtYjNlMmZhYWMwOGYzL2RkNzdmZjlkLTU4MzItNDQyOC1hMDFjLWIzZTJmYWFj MDhmMy5jcmwwHwYDVR0jBBgwFoAUMrbTzWep6SElnbbKew98UASaq1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDc3ZmY5ZC01ODMyLTQ0MjgtYTAxYy1iM2Uy ZmFhYzA4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg4/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGToITd9wupuPR80IWmmpnoQ8+FRFWkYlxJdsAwzX7/PwwBFP6t0L4D3 rQOFrkGV4DijvPtEt9wd1Cl2RPrb8As0gbfAtL9j0rW2zRWu9NzzlGZlGhjlxa6v ox1vE0tff01T8fPmYSc8UyBPmvVsb5rIr7MvMIZ5bNxIhOplwlyLGOm1eRX/Wohm QgwknG2C0dQ5Hbmoz/izH+O1te34h6Epzh7w8GIPe+9Cl/MsCrvYlv1Yq370n3gZ VVCSGRyWtVE7I1lttJTTwAEiltP1qeJ5NgI2XBKnDXkMWcXFSHbUjTqYhVy1dGko H76SlbmviYzgrWVSgf0qFK1KZCuPKek= -----END CERTIFICATE-----Generated at Mon Apr 13 12:09:03 2026 by rpki-client