$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd490af9-ff16-3d5a-811d-3c00340dee95.roa File: dd490af9-ff16-3d5a-811d-3c00340dee95.roa (raw, json) Hash identifier: uEys7nTvFLigrn39QxRLaoaHFXb+KxVgyyad1NhMHCs= Subject key identifier: A8:0C:78:F8:FB:01:C2:6C:10:7C:00:7B:E5:3C:3B:00:0D:81:F6:C4 Certificate issuer: /CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3 Certificate serial: 010D0C9F4328584BB78C0319D02DE7444EB0B2C0 Authority key identifier: 32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd490af9-ff16-3d5a-811d-3c00340dee95.roa Signing time: Sat 01 Nov 2025 16:22:44 +0000 ROA not before: Sat 01 Nov 2025 16:22:44 +0000 ROA not after: Fri 30 Jan 2026 17:22:44 +0000 asID: 5650 IP address blocks: 131.143.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:8c:03:19:d0:2d:e7:44:4e:b0:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd77ff9d-5832-4428-a01c-b3e2faac08f3 Validity Not Before: Nov 1 16:22:44 2025 GMT Not After : Jan 30 17:22:44 2026 GMT Subject: CN=c3f5427d-026f-4989-a750-e59f83865618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:50:dc:a2:e1:1a:a2:91:e0:73:fd:df:d7:1a: e5:7e:1e:98:7a:5f:00:9c:b8:ad:65:99:3b:22:16: c3:88:2b:9a:cc:5d:e3:ff:10:0c:e5:d5:e5:2a:7d: 6f:fe:60:72:dd:ec:1e:57:8a:eb:0c:a3:97:11:45: 08:b8:09:fe:f9:4a:7a:f5:19:e3:a5:ff:34:3f:1f: c6:37:16:b6:d4:31:e3:df:25:51:1a:ed:b4:5c:07: 9c:6f:a3:4d:32:63:1e:9b:4b:7f:56:c3:85:87:af: e7:ba:cc:e1:f6:f6:96:67:f2:2c:c8:de:e4:42:42: 13:ee:eb:d4:5a:f9:31:b7:f4:8e:e7:bb:d6:1c:34: cc:2c:12:0f:b1:b1:2e:1e:ee:79:57:cb:21:ac:2e: 01:d4:7d:fe:4b:33:e9:f6:c0:4e:0b:fb:be:4e:bf: 8a:48:da:7a:04:b1:21:0e:86:49:dc:fb:43:99:d7: 79:57:e9:f5:ec:bf:e5:8a:0e:bd:3d:12:9a:2a:7a: ea:4d:7a:cc:e7:22:ae:29:30:e3:0e:a0:d6:ed:c6: e2:66:01:eb:6d:ed:e3:c2:56:eb:45:fd:66:36:e7: 76:68:99:08:92:a3:40:d1:f9:3b:1a:39:32:ff:79: 72:b0:3b:b0:35:ef:e9:e3:06:2a:39:e8:e3:10:7d: 66:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:0C:78:F8:FB:01:C2:6C:10:7C:00:7B:E5:3C:3B:00:0D:81:F6:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd490af9-ff16-3d5a-811d-3c00340dee95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3/dd77ff9d-5832-4428-a01c-b3e2faac08f3.crl X509v3 Authority Key Identifier: keyid:32:B6:D3:CD:67:A9:E9:21:25:9D:B6:CA:7B:0F:7C:50:04:9A:AB:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd77ff9d-5832-4428-a01c-b3e2faac08f3.cer sbgp-ipAddrBlock: critical IPv4: 131.143.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:e7:34:9b:26:3e:bc:00:43:7f:22:4e:3d:5f:ed:99:6a:eb: dd:65:3a:90:ff:d8:1e:3f:68:43:b0:ba:ab:ee:f1:50:e6:64: e5:00:b1:55:e7:94:08:75:f0:de:1a:52:55:57:44:21:aa:f5: 01:f5:1d:d3:78:6c:b1:20:93:ec:d9:12:59:6b:56:72:df:4b: 3d:67:de:7b:3e:3f:6c:9a:6b:9d:f7:8a:9d:3a:9d:fc:44:29: c7:52:5e:d1:04:6d:5f:f2:ff:3b:20:92:90:48:be:55:0c:d3: 7b:2f:1d:84:9c:32:b1:c8:9b:89:52:46:08:69:ae:d9:a6:7e: 53:e1:a0:35:91:ce:da:47:c3:fe:6d:0e:ed:84:51:5a:da:83: b7:cb:4f:aa:fd:af:09:c8:db:bf:67:f7:09:3c:90:0e:fe:81: f5:12:45:47:82:21:d5:6d:21:ff:f3:f3:b5:c2:fd:db:ef:a0: 07:d4:b2:0f:a7:df:7f:d9:b3:a4:64:f2:9d:50:b7:ac:7e:23: 8c:88:65:31:ce:b7:0b:3c:67:98:d0:c7:f9:26:c1:33:4a:56: f5:d1:ab:76:fe:1e:39:79:0c:6d:de:52:ad:56:aa:d9:7a:b3: 94:66:2a:4b:46:71:38:41:bd:19:bf:6d:44:34:44:f1:cc:6c: 90:f9:da:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3jAMZ0C3nRE6wssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3N2ZmOWQtNTgzMi00NDI4LWEwMWMtYjNlMmZhYWMw OGYzMB4XDTI1MTEwMTE2MjI0NFoXDTI2MDEzMDE3MjI0NFowLzEtMCsGA1UEAxMk YzNmNTQyN2QtMDI2Zi00OTg5LWE3NTAtZTU5ZjgzODY1NjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1DcouEaopHgc/3f1xrlfh6Yel8AnLitZZk7 IhbDiCuazF3j/xAM5dXlKn1v/mBy3eweV4rrDKOXEUUIuAn++Up69Rnjpf80Px/G Nxa21DHj3yVRGu20XAecb6NNMmMem0t/VsOFh6/nuszh9vaWZ/IsyN7kQkIT7uvU Wvkxt/SO57vWHDTMLBIPsbEuHu55V8shrC4B1H3+SzPp9sBOC/u+Tr+KSNp6BLEh DoZJ3PtDmdd5V+n17L/lig69PRKaKnrqTXrM5yKuKTDjDqDW7cbiZgHrbe3jwlbr Rf1mNud2aJkIkqNA0fk7Gjky/3lysDuwNe/p4wYqOejjEH1mQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgMePj7AcJsEHwAe+U8OwANgfbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDc3 ZmY5ZC01ODMyLTQ0MjgtYTAxYy1iM2UyZmFhYzA4ZjMvZGQ0OTBhZjktZmYxNi0z ZDVhLTgxMWQtM2MwMDM0MGRlZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGQ3N2ZmOWQtNTgzMi00NDI4LWEw MWMtYjNlMmZhYWMwOGYzL2RkNzdmZjlkLTU4MzItNDQyOC1hMDFjLWIzZTJmYWFj MDhmMy5jcmwwHwYDVR0jBBgwFoAUMrbTzWep6SElnbbKew98UASaq1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDc3ZmY5ZC01ODMyLTQ0MjgtYTAxYy1iM2Uy ZmFhYzA4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg4/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/nNJsmPrwAQ38iTj1f7Zlq691lOpD/2B4/aEOwuqvu8VDmZOUAsVXn lAh18N4aUlVXRCGq9QH1HdN4bLEgk+zZEllrVnLfSz1n3ns+P2yaa533ip06nfxE KcdSXtEEbV/y/zsgkpBIvlUM03svHYScMrHIm4lSRghprtmmflPhoDWRztpHw/5t Du2EUVrag7fLT6r9rwnI279n9wk8kA7+gfUSRUeCIdVtIf/z87XC/dvvoAfUsg+n 33/Zs6Rk8p1Qt6x+I4yIZTHOtws8Z5jQx/kmwTNKVvXRq3b+Hjl5DG3eUq1Wqtl6 s5RmKktGcThBvRm/bUQ0RPHMbJD52tA= -----END CERTIFICATE-----Generated at Wed Nov 5 02:16:06 2025 by rpki-client