$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/14101aa2-6fde-3978-964f-46e75495d447.roa File: 14101aa2-6fde-3978-964f-46e75495d447.roa (raw, json) Hash identifier: j8pvIKUpeH+HMvlOu2Z2BrAP4VLdQ0Bpdbx2iXaWHJI= Subject key identifier: 14:FA:7C:31:11:C7:D9:0E:8B:85:F0:4A:A9:F9:DB:95:C5:73:FA:B4 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF2E773FAF64E3A60104AE280 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/14101aa2-6fde-3978-964f-46e75495d447.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:73:fa:f6:4e:3a:60:10:4a:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=371b8d3b-0b67-468b-acca-ad93b2e2143d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fa:54:18:6d:51:1f:e6:61:d4:6c:63:87:5e: 90:2e:a5:98:38:cd:31:4b:63:da:db:ec:35:7b:54: 19:7b:04:0e:47:6e:70:0e:9a:dd:fa:ad:42:31:c2: 48:8c:3b:b7:69:30:52:93:2f:bd:f5:cd:de:ef:ef: bb:d5:fb:84:a6:eb:e3:ac:3a:7f:92:51:20:3c:0c: 8b:c2:20:f5:86:4e:56:c6:87:30:4f:1c:17:91:4b: 4a:66:e2:20:05:c4:5f:11:80:9b:fa:aa:f2:a2:a5: 71:91:c9:70:66:07:ba:e9:94:ff:88:2d:24:57:38: f0:ee:81:35:ec:dd:c8:0b:30:9a:bc:70:49:e0:02: e6:d5:ec:59:86:1c:2c:f3:0b:cc:04:27:50:2e:e4: d6:87:33:d4:d6:84:44:4f:da:0a:84:2b:b2:b8:19: 89:58:f5:45:dc:cf:c7:73:d9:35:0e:9d:d4:80:07: ff:b6:3a:0a:05:ba:3c:48:d8:5c:72:71:a8:32:90: a6:dc:69:9f:bc:88:d4:3e:ab:29:ab:76:8f:e7:64: c2:52:b4:ef:9d:09:31:f8:b1:fe:fb:9b:43:81:9a: 8e:95:2b:3c:dd:13:d3:20:ab:aa:72:0f:b5:1c:93: 5b:cd:ad:58:93:ad:eb:51:3c:cb:61:19:9a:79:c6: 98:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FA:7C:31:11:C7:D9:0E:8B:85:F0:4A:A9:F9:DB:95:C5:73:FA:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/14101aa2-6fde-3978-964f-46e75495d447.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:bf:3a:bc:47:13:dd:86:4b:e6:90:fe:45:15:f0:cb:4a:82: 70:ab:ed:8d:eb:20:4b:90:7a:a3:f7:44:ed:89:be:b3:3b:90: ad:4b:6b:1e:81:50:8e:01:52:c2:54:4d:4d:43:76:d1:55:2e: 67:f8:03:cb:a4:96:0e:45:9f:37:6e:aa:6b:45:90:5a:8c:de: 99:42:d0:6a:f7:6f:6e:b4:a3:b3:67:66:a3:37:58:7a:6d:16: f4:13:10:27:a0:4b:9c:3e:f4:e7:e7:23:6f:63:3a:8e:15:73: 65:86:24:78:cb:2a:2c:12:ba:e9:b6:26:b1:b2:ed:31:f3:9b: 18:cb:96:f1:94:6f:48:32:9a:5f:de:24:09:95:29:2e:2f:52: ba:78:38:d5:ba:74:92:2b:a9:ef:e1:50:95:06:2c:df:2e:07: 2b:82:61:84:5c:77:75:38:76:c1:56:e6:f3:d9:ee:23:11:a1: 41:79:d0:4c:5f:9b:5d:66:8c:89:0a:70:a8:dd:22:71:8e:dd: 92:ff:6a:94:81:8a:5d:71:b8:1b:b6:dd:52:cb:c6:67:56:c8: d6:a1:4a:0d:83:ae:c1:7d:b3:ff:31:cb:3a:0c:2e:b3:d8:67: 4f:78:92:a1:dc:16:6b:0b:d1:6e:3c:fb:bc:3c:3f:52:e6:97: e2:2b:fd:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53P69k46YBBK4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk MzcxYjhkM2ItMGI2Ny00NjhiLWFjY2EtYWQ5M2IyZTIxNDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPpUGG1RH+Zh1Gxjh16QLqWYOM0xS2Pa2+w1 e1QZewQOR25wDprd+q1CMcJIjDu3aTBSky+99c3e7++71fuEpuvjrDp/klEgPAyL wiD1hk5WxocwTxwXkUtKZuIgBcRfEYCb+qryoqVxkclwZge66ZT/iC0kVzjw7oE1 7N3ICzCavHBJ4ALm1exZhhws8wvMBCdQLuTWhzPU1oRET9oKhCuyuBmJWPVF3M/H c9k1Dp3UgAf/tjoKBbo8SNhccnGoMpCm3GmfvIjUPqspq3aP52TCUrTvnQkx+LH+ +5tDgZqOlSs83RPTIKuqcg+1HJNbza1Yk63rUTzLYRmaecaYywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBT6fDERx9kOi4XwSqn525XFc/q0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMTQxMDFhYTItNmZkZS0z OTc4LTk2NGYtNDZlNzU0OTVkNDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg315MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC/OrxHE92GS+aQ/kUV8MtKgnCr7Y3rIEuQeqP3RO2JvrM7kK1Lax6B UI4BUsJUTU1DdtFVLmf4A8uklg5FnzduqmtFkFqM3plC0Gr3b260o7NnZqM3WHpt FvQTECegS5w+9OfnI29jOo4Vc2WGJHjLKiwSuum2JrGy7THzmxjLlvGUb0gyml/e JAmVKS4vUrp4ONW6dJIrqe/hUJUGLN8uByuCYYRcd3U4dsFW5vPZ7iMRoUF50Exf m11mjIkKcKjdInGO3ZL/apSBil1xuBu23VLLxmdWyNahSg2DrsF9s/8xyzoMLrPY Z094kqHcFmsL0W48+7w8P1Lml+Ir/TQ= -----END CERTIFICATE-----Generated at Mon Sep 21 23:49:08 2026 by rpki-client