$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/02ab673e-52f9-333e-984a-1c500fa07f2b.roa File: 02ab673e-52f9-333e-984a-1c500fa07f2b.roa (raw, json) Hash identifier: 7DqunQjbmQymmsjgZDsssZG7hfE2xuU2Z2NIUB/qbjI= Subject key identifier: C2:29:8F:09:CF:EC:9D:81:02:1A:96:00:F8:12:85:52:12:7A:78:3C Certificate issuer: /CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3 Certificate serial: 010D0C9F4328584F963880A042F45285F4324100 Authority key identifier: 32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/02ab673e-52f9-333e-984a-1c500fa07f2b.roa Signing time: Thu 22 Oct 2026 13:00:13 +0000 ROA not before: Thu 22 Oct 2026 13:00:13 +0000 ROA not after: Wed 20 Jan 2027 14:00:13 +0000 asID: 7029 IP address blocks: 131.143.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:38:80:a0:42:f4:52:85:f4:32:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3 Validity Not Before: Oct 22 13:00:13 2026 GMT Not After : Jan 20 14:00:13 2027 GMT Subject: CN=39d834a8-c245-4f56-ab53-7aefa3faf556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:67:86:48:34:a9:44:d4:6e:e8:3a:e5:4f:68: 31:87:56:7e:59:de:d4:3f:d3:74:0f:4e:4e:e0:74: 17:bb:c2:b5:c3:9b:59:16:be:4c:80:fa:bd:bf:da: c7:b5:8f:10:b6:c6:39:d6:6a:5f:97:76:d4:7c:e0: bc:cf:ed:d4:34:71:55:43:37:91:73:b6:df:fb:a9: 56:0a:9b:f3:7a:3b:f4:82:3a:9d:30:36:eb:17:48: eb:5b:42:58:60:76:b7:2e:3c:44:b2:72:f4:9c:37: 1d:ca:f6:7f:b9:d9:6c:ff:53:4e:c4:70:5a:fb:26: e6:28:ac:3a:bd:ac:3a:6e:58:c4:d4:f2:54:37:73: a9:4e:7c:e2:d6:de:35:4b:0a:13:fb:ff:d9:b1:b0: 95:d6:4d:90:4b:60:7a:a2:19:4e:f4:02:fb:13:e3: f2:22:b0:63:c3:ca:df:03:4d:7b:68:c4:c5:82:30: 86:0c:7c:34:16:06:83:7c:c9:2e:6b:c1:6e:3f:69: 2b:1f:68:86:11:0e:18:63:39:42:62:76:13:c7:4d: 8f:70:ef:6c:f6:0e:6f:71:a5:e0:6d:9d:7e:6c:a4: 8f:39:3c:ca:fb:0e:1b:e5:be:f1:d9:be:7d:c2:23: f6:25:de:a1:df:6f:6a:ef:0b:c7:78:08:bf:c6:23: a9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:29:8F:09:CF:EC:9D:81:02:1A:96:00:F8:12:85:52:12:7A:78:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/02ab673e-52f9-333e-984a-1c500fa07f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.crl X509v3 Authority Key Identifier: keyid:32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer sbgp-ipAddrBlock: critical IPv4: 131.143.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:6d:a0:c1:f3:46:7d:a7:38:6d:7e:57:a9:da:f6:88:ec:1d: dd:b5:b1:98:82:02:89:81:ef:d8:a5:b0:10:ef:a6:1f:48:a4: dc:e2:e8:9b:bb:0f:88:e1:5f:45:c1:e9:3d:6a:30:fc:eb:2c: 21:af:8e:db:42:d4:18:6e:27:3d:6f:5d:2c:94:4c:05:36:eb: 78:c6:ff:32:0f:90:ac:f4:3d:9c:c4:17:ba:03:9f:87:a8:4b: b2:b5:ff:05:a5:1e:44:90:3b:a9:14:78:05:6e:1d:bc:cc:f8: c1:ff:5e:e2:3b:8a:9d:4c:64:0f:45:e8:f3:0b:1c:45:36:bb: cf:39:1f:c8:68:fd:11:d4:22:d5:35:02:bf:74:23:e6:d0:21: 4b:68:5e:7d:ed:1d:b9:be:df:5d:d3:8c:fd:16:dc:c1:a3:cc: 23:8e:b1:93:1d:97:53:49:38:d5:4a:2c:f4:27:03:1d:ae:da: 2a:66:b8:87:3b:3b:12:fa:23:58:3a:fa:e2:59:b6:c0:b5:f6: 56:87:48:d3:0e:1a:ec:de:cf:cf:5b:ba:2c:52:a7:97:26:90: 59:51:10:53:c5:c7:d4:40:80:70:e7:f2:c6:7c:8a:2b:a4:e2: 6d:b3:af:51:8b:8c:cc:11:d6:52:01:f5:74:48:e5:c6:19:74: 3b:2a:9f:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+WOICgQvRShfQyQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3N2ZmOWQtNTgzMi00NDI4LWEwMWMtYjNlMmZhYWMw OGYzMB4XDTI2MTAyMjEzMDAxM1oXDTI3MDEyMDE0MDAxM1owLzEtMCsGA1UEAxMk MzlkODM0YTgtYzI0NS00ZjU2LWFiNTMtN2FlZmEzZmFmNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2eGSDSpRNRu6DrlT2gxh1Z+Wd7UP9N0D05O 4HQXu8K1w5tZFr5MgPq9v9rHtY8QtsY51mpfl3bUfOC8z+3UNHFVQzeRc7bf+6lW Cpvzejv0gjqdMDbrF0jrW0JYYHa3LjxEsnL0nDcdyvZ/udls/1NOxHBa+ybmKKw6 vaw6bljE1PJUN3OpTnzi1t41SwoT+//ZsbCV1k2QS2B6ohlO9AL7E+PyIrBjw8rf A017aMTFgjCGDHw0FgaDfMkua8FuP2krH2iGEQ4YYzlCYnYTx02PcO9s9g5vcaXg bZ1+bKSPOTzK+w4b5b7x2b59wiP2Jd6h329q7wvHeAi/xiOpUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIpjwnP7J2BAhqWAPgShVISeng8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDc3 ZmY5ZC01ODMyLTQ0MjgtYTAxYy1iM2UyZmFhYzA4ZjMvMDJhYjY3M2UtNTJmOS0z MzNlLTk4NGEtMWM1MDBmYTA3ZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGQ3N2ZmOWQtNTgzMi00NDI4LWEw MWMtYjNlMmZhYWMwOGYzL2RkNzdmZjlkLTU4MzItNDQyOC1hMDFjLWIzZTJmYWFj MDhmMy5jcmwwHwYDVR0jBBgwFoAUMrbTzWep6SElnbbKew98UASaq1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDc3ZmY5ZC01ODMyLTQ0MjgtYTAxYy1iM2Uy ZmFhYzA4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg4/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGltoMHzRn2nOG1+V6na9ojsHd21sZiCAomB79ilsBDvph9IpNzi6Ju7 D4jhX0XB6T1qMPzrLCGvjttC1BhuJz1vXSyUTAU263jG/zIPkKz0PZzEF7oDn4eo S7K1/wWlHkSQO6kUeAVuHbzM+MH/XuI7ip1MZA9F6PMLHEU2u885H8ho/RHUItU1 Ar90I+bQIUtoXn3tHbm+313TjP0W3MGjzCOOsZMdl1NJONVKLPQnAx2u2ipmuIc7 OxL6I1g6+uJZtsC19laHSNMOGuzez89buixSp5cmkFlREFPFx9RAgHDn8sZ8iiuk 4m2zr1GLjMwR1lIB9XRI5cYZdDsqn+I= -----END CERTIFICATE-----Generated at Sun Nov 15 17:40:00 2026 by rpki-client