$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/df1d6a36-b880-3ea5-a412-bdc9b2303d86.roa File: df1d6a36-b880-3ea5-a412-bdc9b2303d86.roa (raw, json) Hash identifier: jqDpJDpMcmK++vaeE/ob9PGRgX5dHBJVxRY3h3ssbTI= Subject key identifier: 11:9A:60:E8:2A:36:6F:58:21:7E:7D:C5:C5:23:8E:0F:1B:A1:30:70 Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F4328584E11B437BC8F6C2AC701056F00 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/df1d6a36-b880-3ea5-a412-bdc9b2303d86.roa Signing time: Fri 05 Jun 2026 09:00:12 +0000 ROA not before: Fri 05 Jun 2026 09:00:12 +0000 ROA not after: Thu 03 Sep 2026 09:00:12 +0000 asID: 923 IP address blocks: 131.143.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:11:b4:37:bc:8f:6c:2a:c7:01:05:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: Jun 5 09:00:12 2026 GMT Not After : Sep 3 09:00:12 2026 GMT Subject: CN=a3c8ec8a-526e-4a56-a8f3-7a6690a22d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d9:40:13:6c:19:e6:a7:fa:4b:24:79:0c:47: f6:5c:e1:3c:d6:dd:31:a0:09:e0:12:de:03:02:c2: 95:76:6f:8c:2a:e4:99:a2:3d:6c:34:2d:55:7d:48: 25:ad:39:a6:2a:9a:98:89:23:4e:ae:ac:4b:70:7d: 64:79:8e:44:00:8f:76:91:b9:53:db:41:5b:5c:c0: 61:41:ce:41:ff:9c:17:a2:97:e7:f3:87:0a:63:01: 6a:3c:f9:54:33:4e:b6:5a:3a:76:a0:78:7d:32:e9: 82:2c:76:09:d2:f6:b8:9f:ce:91:62:d3:97:45:c2: 6b:04:4a:26:6a:33:68:82:c0:00:5b:02:18:9c:1e: d7:50:78:54:30:30:e7:da:2e:72:4e:76:17:99:50: f7:60:79:72:b4:d9:92:0d:b3:3f:e3:a1:17:72:b3: e0:a3:af:68:a7:4b:b0:88:a3:5f:6b:93:44:b5:5b: 18:68:2d:7a:5f:66:c3:95:89:a7:4a:c8:52:ad:e0: 81:48:89:ef:0b:0b:15:73:e3:79:ae:f8:18:c2:d9: 6f:41:39:00:4d:39:d9:76:19:9b:29:16:9a:23:bf: d7:f8:6a:5b:db:26:39:63:2f:f3:17:5f:2d:b1:eb: fb:e0:57:4e:7c:ba:28:ee:bc:74:cc:33:68:de:b2: 10:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9A:60:E8:2A:36:6F:58:21:7E:7D:C5:C5:23:8E:0F:1B:A1:30:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/df1d6a36-b880-3ea5-a412-bdc9b2303d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: 131.143.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:86:cf:99:fe:4c:de:d3:07:9b:5a:6b:27:ea:77:2e:fc:b0: f2:f9:28:06:2c:a2:95:af:b0:97:91:27:5c:ab:2b:8b:a0:90: a5:c0:c8:bb:7f:0a:1b:e0:76:e4:38:db:b2:9e:70:35:45:29: b4:af:f7:f5:e6:3b:6a:25:33:6e:bc:51:55:7a:ee:58:8a:69: 84:ac:bc:e9:92:6b:a2:01:88:58:50:c5:c3:d0:d4:d0:33:a3: d3:e1:d0:f7:b2:8c:21:c0:98:40:56:ac:44:bd:31:97:57:24: e4:39:5f:a1:3a:96:db:0d:04:9d:04:87:46:8c:2c:63:1d:de: 67:37:18:7e:25:7f:fc:36:e7:72:29:01:f8:b3:f9:a1:6f:2c: 9f:2f:d2:50:c0:99:86:6f:d8:7a:98:95:e5:0d:d2:6a:1f:de: 25:fd:b1:b2:25:b1:38:f5:1a:94:fa:43:c7:17:87:e6:16:22: 20:b9:ac:82:8a:54:7a:36:3d:d9:20:a8:b4:00:4c:9f:37:5e: a0:a4:e5:f6:83:11:de:9a:4d:cd:cb:8c:57:1e:80:b0:3d:ff: 52:59:6c:2c:42:6f:2a:67:66:25:74:dd:8b:f4:b0:79:93:27: 28:30:56:9a:ca:86:f9:ec:22:a1:07:6c:f0:8f:79:18:6c:58: 76:26:33:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4RtDe8j2wqxwEFbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI2MDYwNTA5MDAxMloXDTI2MDkwMzA5MDAxMlowLzEtMCsGA1UEAxMk YTNjOGVjOGEtNTI2ZS00YTU2LWE4ZjMtN2E2NjkwYTIyZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtlAE2wZ5qf6SyR5DEf2XOE81t0xoAngEt4D AsKVdm+MKuSZoj1sNC1VfUglrTmmKpqYiSNOrqxLcH1keY5EAI92kblT20FbXMBh Qc5B/5wXopfn84cKYwFqPPlUM062Wjp2oHh9MumCLHYJ0va4n86RYtOXRcJrBEom ajNogsAAWwIYnB7XUHhUMDDn2i5yTnYXmVD3YHlytNmSDbM/46EXcrPgo69op0uw iKNfa5NEtVsYaC16X2bDlYmnSshSreCBSInvCwsVc+N5rvgYwtlvQTkATTnZdhmb KRaaI7/X+Gpb2yY5Yy/zF18tsev74FdOfLoo7rx0zDNo3rIQ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGaYOgqNm9YIX59xcUjjg8boTBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvZGYxZDZhMzYtYjg4MC0z ZWE1LWE0MTItYmRjOWIyMzAzZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg4/MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2Gz5n+TN7TB5taayfqdy78sPL5KAYsopWvsJeRJ1yrK4ugkKXAyLt/ ChvgduQ427KecDVFKbSv9/XmO2olM268UVV67liKaYSsvOmSa6IBiFhQxcPQ1NAz o9Ph0PeyjCHAmEBWrES9MZdXJOQ5X6E6ltsNBJ0Eh0aMLGMd3mc3GH4lf/w253Ip Afiz+aFvLJ8v0lDAmYZv2HqYleUN0mof3iX9sbIlsTj1GpT6Q8cXh+YWIiC5rIKK VHo2PdkgqLQATJ83XqCk5faDEd6aTc3LjFcegLA9/1JZbCxCbypnZiV03Yv0sHmT JygwVprKhvnsIqEHbPCPeRhsWHYmM1Y= -----END CERTIFICATE-----Generated at Sat Jun 13 21:14:58 2026 by rpki-client