$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/03198728-8c41-30ee-b9e7-0c0bed23b10d.roa File: 03198728-8c41-30ee-b9e7-0c0bed23b10d.roa (raw, json) Hash identifier: T64pMTIW52B9IaaRRW9R83Vy1eXPg7tDHVVZUSuEiJw= Subject key identifier: 1D:06:30:27:E9:A9:D5:D3:93:20:04:97:3D:D0:E0:95:3E:92:DA:E5 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF2E7747693FFA72760929D00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/03198728-8c41-30ee-b9e7-0c0bed23b10d.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:74:76:93:ff:a7:27:60:92:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=9354fc64-6965-4655-8e58-ebfd9f2b700f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0f:2c:5a:02:35:d7:90:f3:82:42:f8:b6:a7: b2:b1:66:26:62:d2:f6:a4:e8:cc:51:65:80:c0:ff: 3d:40:5a:75:8a:fe:91:05:38:5e:83:a9:b7:d6:db: 1e:9d:95:7c:5c:69:3b:78:82:67:f9:0e:7e:36:de: 3e:40:82:a8:6a:5a:69:95:bd:96:db:99:76:42:8d: 71:32:44:2a:2a:5e:31:c0:0a:71:85:4b:44:f3:23: 68:39:e1:d0:9d:5f:b0:23:df:c0:d5:21:54:0a:12: 4b:cc:7f:05:b5:e5:71:78:58:5d:34:df:a3:b0:b5: 0e:9d:41:c9:73:f1:bd:c9:09:51:90:93:ac:50:ff: 7d:46:12:4e:a6:05:ef:41:7c:08:e8:71:eb:85:bc: e3:57:de:a6:3e:de:f4:c9:12:28:6a:03:ab:d5:1e: db:fa:a1:ec:b1:b1:02:c2:51:62:e5:e6:84:97:79: e5:c6:5c:c9:9f:d4:89:d2:cd:b4:91:e9:d7:09:40: 36:6e:0b:3d:04:cc:5e:f1:94:ff:87:38:6f:75:ff: 6b:4d:b4:d6:26:89:c2:05:fa:ba:74:7a:62:8b:4f: 27:2e:bd:6e:c8:23:82:c5:4e:46:9e:d0:c3:4c:8c: 5a:9d:d2:ef:63:68:58:85:bb:a2:d5:ed:1b:12:6f: 13:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:06:30:27:E9:A9:D5:D3:93:20:04:97:3D:D0:E0:95:3E:92:DA:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/03198728-8c41-30ee-b9e7-0c0bed23b10d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:37:82:13:48:b3:f2:3d:6e:ac:98:79:37:27:6b:51:58:08: 02:69:a0:f0:a0:72:08:0c:b8:86:52:89:94:43:bb:f1:48:18: c3:71:e4:a7:25:85:51:46:6a:3b:07:4a:c5:1f:67:bd:fa:60: 35:53:0e:65:ac:72:81:8a:0b:c2:3e:5b:d4:79:5a:8d:61:19: 90:da:37:2f:c3:9c:4f:b1:65:54:04:00:20:56:9f:ed:e6:32: b3:be:c9:39:ac:2f:ca:63:d9:62:c3:27:ed:7c:9a:86:70:fd: 5c:42:21:75:34:aa:56:fa:78:d4:3b:c4:28:21:f5:01:f0:cf: 1e:38:4d:74:2e:b4:6a:ae:51:b9:f4:b6:50:71:c8:6f:e5:b5: d9:8b:4c:05:d3:95:4f:8c:87:f0:73:7a:9c:c5:10:9a:e7:1b: d1:63:ee:78:47:46:4f:a4:9b:f1:02:74:4a:41:25:32:60:5e: 6a:39:b3:2f:5a:04:39:f5:74:88:de:29:bb:56:ec:b2:d2:4a: df:e3:12:91:ce:b2:7b:ae:60:66:25:ae:55:40:fa:64:bd:f5: 14:ba:dc:ec:4b:7d:8b:1f:55:24:95:f6:da:96:3d:6d:92:9e: 46:37:df:bd:cc:cc:9f:2d:b7:7d:6e:17:86:06:d6:22:93:dd: f0:24:10:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53R2k/+nJ2CSnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk OTM1NGZjNjQtNjk2NS00NjU1LThlNTgtZWJmZDlmMmI3MDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw8sWgI115DzgkL4tqeysWYmYtL2pOjMUWWA wP89QFp1iv6RBTheg6m31tsenZV8XGk7eIJn+Q5+Nt4+QIKoalpplb2W25l2Qo1x MkQqKl4xwApxhUtE8yNoOeHQnV+wI9/A1SFUChJLzH8FteVxeFhdNN+jsLUOnUHJ c/G9yQlRkJOsUP99RhJOpgXvQXwI6HHrhbzjV96mPt70yRIoagOr1R7b+qHssbEC wlFi5eaEl3nlxlzJn9SJ0s20kenXCUA2bgs9BMxe8ZT/hzhvdf9rTbTWJonCBfq6 dHpii08nLr1uyCOCxU5GntDDTIxandLvY2hYhbui1e0bEm8TPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0GMCfpqdXTkyAElz3Q4JU+ktrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMDMxOTg3MjgtOGM0MS0z MGVlLWI5ZTctMGMwYmVkMjNiMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg317MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo3ghNIs/I9bqyYeTcna1FYCAJpoPCgcggMuIZSiZRDu/FIGMNx5Kcl hVFGajsHSsUfZ736YDVTDmWscoGKC8I+W9R5Wo1hGZDaNy/DnE+xZVQEACBWn+3m MrO+yTmsL8pj2WLDJ+18moZw/VxCIXU0qlb6eNQ7xCgh9QHwzx44TXQutGquUbn0 tlBxyG/ltdmLTAXTlU+Mh/BzepzFEJrnG9Fj7nhHRk+km/ECdEpBJTJgXmo5sy9a BDn1dIjeKbtW7LLSSt/jEpHOsnuuYGYlrlVA+mS99RS63OxLfYsfVSSV9tqWPW2S nkY3373MzJ8tt31uF4YG1iKT3fAkEDE= -----END CERTIFICATE-----Generated at Tue Sep 22 21:51:33 2026 by rpki-client