$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/ddf8a60d-859f-3b0b-9243-c725f1c33259.roa File: ddf8a60d-859f-3b0b-9243-c725f1c33259.roa (raw, json) Hash identifier: a2Xe4TYYWSlQreXjlTM746T46gRUDMnvW220rBDJQgA= Subject key identifier: E1:10:57:02:CC:68:73:29:68:E2:91:F0:03:0A:33:A5:1B:8F:8C:6A Certificate issuer: /CN=712951d4-501e-451c-a20a-59b6aff3e2d4 Certificate serial: 010D0C9F4328584EA43DDBB474CB8B4EBAFAF500 Authority key identifier: 52:7A:38:8E:28:41:32:8C:92:B2:70:AE:33:9C:BD:2C:75:A3:4E:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/ddf8a60d-859f-3b0b-9243-c725f1c33259.roa Signing time: Mon 27 Jul 2026 20:45:43 +0000 ROA not before: Mon 27 Jul 2026 20:45:43 +0000 ROA not after: Sat 17 Oct 2026 21:00:12 +0000 asID: 133127 IP address blocks: 155.161.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a4:3d:db:b4:74:cb:8b:4e:ba:fa:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712951d4-501e-451c-a20a-59b6aff3e2d4 Validity Not Before: Jul 27 20:45:43 2026 GMT Not After : Oct 17 21:00:12 2026 GMT Subject: CN=301127b3-3024-4063-9f00-9814af88bd07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ba:31:0e:e2:c4:ad:4d:f2:08:bb:e7:ad:4a: dc:c6:e1:e9:00:6d:a5:8e:87:06:f5:5b:c5:b2:0d: bc:23:58:e2:57:cb:b0:ef:f8:f9:84:bf:4a:50:0d: 61:62:4a:6c:1a:5e:2a:74:92:b6:cf:26:4e:eb:94: 8e:6b:93:10:d8:58:4d:f5:17:ed:66:9f:cc:a8:00: 23:13:99:af:25:2a:f6:87:db:b6:f9:91:ff:cd:16: a6:c9:9d:e7:5e:ec:15:dd:dd:9a:07:5b:dc:d6:e5: 7f:56:c5:65:42:5c:76:b4:3a:32:26:6e:35:f4:fb: e3:a3:84:8b:b6:a6:99:09:86:50:e2:8c:df:dc:25: 77:94:56:31:ba:5d:31:d8:65:69:3e:33:69:52:37: 4c:43:ce:74:70:82:e4:b1:43:4f:00:c0:1e:c3:fd: b9:d9:43:9d:00:f8:33:87:8e:51:55:4e:bc:af:a7: 17:99:18:bd:e0:98:67:01:eb:6a:59:fb:c9:53:86: d9:fa:60:d5:cd:ae:c9:03:c9:88:b4:de:62:a0:07: c0:5c:6a:ad:2a:61:9d:d1:21:63:24:6c:44:11:c2: 53:5f:93:ee:95:b9:4a:4c:85:f2:99:5a:7e:15:71: 44:22:4a:8f:d7:3e:fc:d6:e8:ef:40:55:9f:50:e8: 52:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:10:57:02:CC:68:73:29:68:E2:91:F0:03:0A:33:A5:1B:8F:8C:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/ddf8a60d-859f-3b0b-9243-c725f1c33259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4/712951d4-501e-451c-a20a-59b6aff3e2d4.crl X509v3 Authority Key Identifier: keyid:52:7A:38:8E:28:41:32:8C:92:B2:70:AE:33:9C:BD:2C:75:A3:4E:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/712951d4-501e-451c-a20a-59b6aff3e2d4.cer sbgp-ipAddrBlock: critical IPv4: 155.161.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f8:66:0b:76:b6:fa:1c:7a:2e:63:24:10:71:6c:30:b4:0e: 5e:94:9d:29:5c:e7:4b:a0:5a:19:02:48:62:19:c7:a7:51:c3: 54:9a:72:c7:d7:a6:2c:d1:0a:22:ab:22:f0:52:ae:ff:88:9f: 1a:b1:e4:d5:e9:2a:6f:b6:2a:e4:85:84:82:c1:43:de:a7:fb: f5:4d:31:77:67:6d:8f:8a:7d:73:1f:bc:34:15:65:74:99:6a: af:b0:d3:25:a0:10:49:a7:69:cb:af:67:b9:31:06:05:5b:43: a1:7b:62:82:65:8e:59:69:d1:76:8d:bd:28:cf:87:8c:f5:ab: da:cb:12:7b:61:ba:37:12:1e:bd:86:ca:69:a5:4a:0c:e7:35: 64:80:18:88:44:23:cd:85:36:d6:d3:63:d2:9d:52:a1:8a:b2: 22:a4:00:b2:69:98:90:cb:05:07:70:87:92:3b:f0:1f:66:2f: b3:c9:db:96:f7:be:5b:84:61:99:9a:f4:1c:13:55:9d:0a:4f: d1:18:01:8a:3a:64:2e:45:41:b5:ec:cf:e2:4c:86:99:0e:d1: d1:5d:11:b8:42:89:e4:2d:98:81:8b:61:40:ea:4e:44:68:ee: 73:50:43:4c:02:31:f0:2f:7f:56:50:ae:5f:ea:ff:4b:e0:1a: cb:0e:20:3f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6kPdu0dMuLTrr69QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzEyOTUxZDQtNTAxZS00NTFjLWEyMGEtNTliNmFmZjNl MmQ0MB4XDTI2MDcyNzIwNDU0M1oXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk MzAxMTI3YjMtMzAyNC00MDYzLTlmMDAtOTgxNGFmODhiZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkroxDuLErU3yCLvnrUrcxuHpAG2ljocG9VvF sg28I1jiV8uw7/j5hL9KUA1hYkpsGl4qdJK2zyZO65SOa5MQ2FhN9RftZp/MqAAj E5mvJSr2h9u2+ZH/zRamyZ3nXuwV3d2aB1vc1uV/VsVlQlx2tDoyJm419Pvjo4SL tqaZCYZQ4ozf3CV3lFYxul0x2GVpPjNpUjdMQ850cILksUNPAMAew/252UOdAPgz h45RVU68r6cXmRi94JhnAetqWfvJU4bZ+mDVza7JA8mItN5ioAfAXGqtKmGd0SFj JGxEEcJTX5PulblKTIXymVp+FXFEIkqP1z781ujvQFWfUOhSEQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOEQVwLMaHMpaOKR8AMKM6Ubj4xqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MTI5 NTFkNC01MDFlLTQ1MWMtYTIwYS01OWI2YWZmM2UyZDQvZGRmOGE2MGQtODU5Zi0z YjBiLTkyNDMtYzcyNWYxYzMzMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzEyOTUxZDQtNTAxZS00NTFjLWEy MGEtNTliNmFmZjNlMmQ0LzcxMjk1MWQ0LTUwMWUtNDUxYy1hMjBhLTU5YjZhZmYz ZTJkNC5jcmwwHwYDVR0jBBgwFoAUUno4jihBMoySsnCuM5y9LHWjTnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83MTI5NTFkNC01MDFlLTQ1MWMtYTIwYS01OWI2 YWZmM2UyZDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAm6EwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALPhmC3a2+hx6LmMkEHFsMLQOXpSdKVznS6BaGQJIYhnHp1HDVJpyx9em LNEKIqsi8FKu/4ifGrHk1ekqb7Yq5IWEgsFD3qf79U0xd2dtj4p9cx+8NBVldJlq r7DTJaAQSadpy69nuTEGBVtDoXtigmWOWWnRdo29KM+HjPWr2ssSe2G6NxIevYbK aaVKDOc1ZIAYiEQjzYU21tNj0p1SoYqyIqQAsmmYkMsFB3CHkjvwH2Yvs8nblve+ W4RhmZr0HBNVnQpP0RgBijpkLkVBtezP4kyGmQ7R0V0RuEKJ5C2YgYthQOpORGju c1BDTAIx8C9/VlCuX+r/S+Aayw4gPw== -----END CERTIFICATE-----Generated at Wed Jul 29 13:33:24 2026 by rpki-client