$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/087ec3e5-7f63-331f-a693-d6a3371d30fb.roa File: 087ec3e5-7f63-331f-a693-d6a3371d30fb.roa (raw, json) Hash identifier: iS5zPm4W/TKxFgGZCSb4ijUH8QynZxCcPmVvfUC/Qic= Subject key identifier: BE:BC:BD:E7:46:4B:5C:0B:D8:03:3A:65:9B:C3:6D:E0:87:3F:C0:9A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF2E77434FB4A5A8C8A266900 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/087ec3e5-7f63-331f-a693-d6a3371d30fb.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:74:34:fb:4a:5a:8c:8a:26:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=c74d5738-e0af-4aeb-b362-e29f20b38e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:dc:00:1e:a7:58:47:56:2b:ab:b2:4f:b7:26: 64:cd:16:e7:e0:53:55:08:a7:b8:58:26:9c:04:92: b7:c9:2c:9f:65:29:08:cf:51:1b:1c:70:93:be:05: 4e:e9:5b:c6:2c:35:0e:a8:64:12:97:81:aa:b3:41: e4:a1:18:88:11:2a:12:82:9e:17:06:9b:38:85:32: d0:ee:4d:48:e0:be:f0:9f:fe:f2:a0:c4:70:c7:a4: d9:4a:bf:59:10:9e:17:c2:3f:5b:2a:a1:85:f6:ff: 56:44:15:d7:e9:a8:dd:ef:73:55:57:16:cb:4c:0d: 39:32:8a:cb:ac:7b:f5:bd:8b:08:04:7c:02:8b:4a: d9:23:71:65:33:8e:04:e2:d7:00:23:b9:48:b9:85: 77:63:dd:aa:59:f2:8d:9a:75:59:d7:b5:a7:ec:d5: 63:06:11:2b:bf:87:02:0e:1d:ab:9d:92:02:8e:bc: 86:a4:f7:4c:9b:2e:de:a8:9e:68:4c:9d:74:10:cb: 8d:21:c0:08:db:79:52:a5:bf:ea:52:06:c1:4b:4a: 9d:d7:ab:56:7a:01:5c:72:13:04:00:80:79:de:72: 32:74:6f:b9:d6:1e:5c:e4:3a:db:11:49:ca:97:82: 8a:c5:3e:d3:80:25:f2:d4:f6:f0:61:a5:a5:af:69: ce:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BC:BD:E7:46:4B:5C:0B:D8:03:3A:65:9B:C3:6D:E0:87:3F:C0:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/087ec3e5-7f63-331f-a693-d6a3371d30fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:66:9a:cd:d2:be:4e:69:bc:ce:fd:43:71:e0:63:49:26:f2: 63:07:cc:a6:3e:93:ed:cb:18:d4:1a:84:a1:1a:46:f3:8c:d9: c5:04:6d:d8:ff:d6:90:03:73:2c:f2:62:c1:85:ae:44:e8:d3: 15:a6:f3:98:ec:68:e7:16:f1:0c:f9:d5:99:0b:5c:3e:37:2b: a6:48:ad:fb:aa:6e:7c:b1:74:d1:79:93:a1:69:20:c9:61:10: 86:89:99:18:08:80:75:7c:64:2e:fc:9c:32:5c:32:d5:fd:3e: 53:e5:11:b4:ce:40:3b:70:e7:8c:9f:d1:fc:5e:5a:9d:d2:b7: 2d:b7:da:a1:64:73:51:40:f4:0a:f8:1b:4f:e3:a8:21:2a:5e: 3c:75:a0:78:9f:07:40:2c:0a:f4:1f:55:13:2b:61:ba:32:b7: 3f:4f:c3:3c:89:f9:54:82:06:80:ef:67:04:eb:7f:d0:9d:0d: f6:87:d3:c9:03:5b:86:14:31:df:f0:1a:9a:ae:82:0f:46:01: fe:c2:d2:c1:0d:1f:e6:24:bf:6f:76:f4:29:67:26:93:bc:91: f5:ca:b5:66:24:d9:be:e6:b3:a1:37:b3:48:6a:45:34:ed:23: d4:8c:cd:ce:6d:29:9e:b4:fd:ab:9d:83:0d:e1:9d:47:8a:cb: 51:ad:56:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53Q0+0pajIomaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk Yzc0ZDU3MzgtZTBhZi00YWViLWIzNjItZTI5ZjIwYjM4ZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtwAHqdYR1Yrq7JPtyZkzRbn4FNVCKe4WCac BJK3ySyfZSkIz1EbHHCTvgVO6VvGLDUOqGQSl4Gqs0HkoRiIESoSgp4XBps4hTLQ 7k1I4L7wn/7yoMRwx6TZSr9ZEJ4Xwj9bKqGF9v9WRBXX6ajd73NVVxbLTA05MorL rHv1vYsIBHwCi0rZI3FlM44E4tcAI7lIuYV3Y92qWfKNmnVZ17Wn7NVjBhErv4cC Dh2rnZICjryGpPdMmy7eqJ5oTJ10EMuNIcAI23lSpb/qUgbBS0qd16tWegFcchME AIB53nIydG+51h5c5DrbEUnKl4KKxT7TgCXy1PbwYaWlr2nO1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL68vedGS1wL2AM6ZZvDbeCHP8CaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMDg3ZWMzZTUtN2Y2My0z MzFmLWE2OTMtZDZhMzM3MWQzMGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNmms3Svk5pvM79Q3HgY0km8mMHzKY+k+3LGNQahKEaRvOM2cUEbdj/ 1pADcyzyYsGFrkTo0xWm85jsaOcW8Qz51ZkLXD43K6ZIrfuqbnyxdNF5k6FpIMlh EIaJmRgIgHV8ZC78nDJcMtX9PlPlEbTOQDtw54yf0fxeWp3Sty232qFkc1FA9Ar4 G0/jqCEqXjx1oHifB0AsCvQfVRMrYboytz9PwzyJ+VSCBoDvZwTrf9CdDfaH08kD W4YUMd/wGpqugg9GAf7C0sENH+Ykv2929ClnJpO8kfXKtWYk2b7ms6E3s0hqRTTt I9SMzc5tKZ60/audgw3hnUeKy1GtVpY= -----END CERTIFICATE-----Generated at Mon Sep 21 18:30:39 2026 by rpki-client