$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/194b8d23-1a34-3d35-882a-848632a85b0b.roa File: 194b8d23-1a34-3d35-882a-848632a85b0b.roa (raw, json) Hash identifier: 5i6fdQDbISflFp4IhxLndGK7qecCoc2PaNGtI1OXe7U= Subject key identifier: F0:45:65:50:BA:39:FA:05:39:41:1E:9D:DA:8C:10:42:E0:DF:81:D0 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB02D04FB43CE999EB4B1C940 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/194b8d23-1a34-3d35-882a-848632a85b0b.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 54113 IP address blocks: 131.125.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:04:fb:43:ce:99:9e:b4:b1:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=6a078260-4cfe-4c7c-9ed0-c2885125bb01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:d6:77:db:96:ba:5c:2b:d7:25:d3:c9:96: 28:5e:f2:27:5b:cc:0e:63:01:de:e3:c7:8c:f0:54: 7f:33:22:e6:21:ce:2c:2f:4d:74:a1:e1:3d:50:89: 0d:f1:ff:a5:d6:c7:c8:ee:50:2c:6d:fb:7f:b8:ca: 9a:7b:1a:c6:b2:9a:1b:b5:93:53:5e:8e:41:a0:12: 91:39:09:49:3b:69:f6:b2:89:b0:26:99:d5:47:70: 34:bd:fb:c6:de:ee:a6:d8:87:04:1b:f0:fe:46:60: 39:a0:67:50:6b:11:d8:b9:f5:5a:fb:86:c2:8f:92: 96:6c:df:e0:94:6d:19:ab:85:d7:05:cd:ce:0e:e8: 01:8a:b3:fc:f1:51:89:01:3a:8a:09:8e:b1:a6:18: 06:70:af:ef:ed:8b:9b:75:30:e9:0f:7e:5b:10:40: 8a:eb:ca:30:a4:89:43:37:6b:a8:c2:ba:4a:0b:fd: f3:b7:f5:f5:14:46:c0:68:e8:32:e2:89:7a:a0:f7: cc:e0:af:4d:b2:45:00:1a:ba:7d:1d:e0:10:65:55: 9f:23:d9:0e:e1:6f:c5:b1:15:07:a5:d2:9f:c0:5a: 4a:2b:f9:4e:fa:ca:8a:ae:6c:41:38:ac:b8:a4:02: 3c:cb:0d:86:69:d4:76:a9:a0:1d:aa:4a:6c:54:04: 64:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:45:65:50:BA:39:FA:05:39:41:1E:9D:DA:8C:10:42:E0:DF:81:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/194b8d23-1a34-3d35-882a-848632a85b0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:83:38:2a:e4:a8:b0:db:3c:77:8a:54:0e:65:59:20:fd:df: fa:e5:af:af:bb:55:9f:b3:da:c3:5e:b9:eb:be:4b:34:a9:79: 5f:f4:4d:0b:89:5e:f4:b2:b2:ce:5e:d4:b0:b1:cb:00:34:48: fc:e5:cd:73:86:2e:ab:c5:d3:d4:94:eb:22:e4:9c:7f:14:b6: c5:9b:8e:a1:f0:24:fe:b4:ad:81:98:85:c1:4b:ce:f8:64:62: 65:fe:ec:53:ff:fc:b4:a5:c4:d0:b9:b3:28:25:d3:41:81:6f: df:af:0f:50:bb:14:1f:f1:4d:da:dd:e8:a2:3b:7d:ec:9a:c1: f0:68:6f:a8:de:0a:d6:df:db:47:c4:63:70:43:82:d2:5f:04: 14:7b:db:17:13:1b:9a:89:cb:ec:7d:e6:a6:67:9f:e1:7d:d5: f2:42:60:f8:c9:5b:10:82:28:34:62:9f:b0:8b:17:73:64:89: 63:9b:17:66:ef:d8:b7:32:bf:95:46:3e:b3:f0:c0:54:72:72: c5:57:c1:84:b4:f1:62:3d:b7:9f:d9:23:04:95:12:e1:23:67: 9d:40:ac:71:ed:5b:a0:db:a7:96:ec:eb:bd:26:8d:11:3e:40: 66:56:98:61:af:3a:ef:90:ab:5c:57:13:e9:93:c0:ba:7d:67: b2:4a:e5:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQT7Q86ZnrSxyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk NmEwNzgyNjAtNGNmZS00YzdjLTllZDAtYzI4ODUxMjViYjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgnWd9uWulwr1yXTyZYoXvInW8wOYwHe48eM 8FR/MyLmIc4sL010oeE9UIkN8f+l1sfI7lAsbft/uMqaexrGspobtZNTXo5BoBKR OQlJO2n2somwJpnVR3A0vfvG3u6m2IcEG/D+RmA5oGdQaxHYufVa+4bCj5KWbN/g lG0Zq4XXBc3ODugBirP88VGJATqKCY6xphgGcK/v7YubdTDpD35bEECK68owpIlD N2uowrpKC/3zt/X1FEbAaOgy4ol6oPfM4K9NskUAGrp9HeAQZVWfI9kO4W/FsRUH pdKfwFpKK/lO+sqKrmxBOKy4pAI8yw2GadR2qaAdqkpsVARk0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBFZVC6OfoFOUEendqMEELg34HQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMTk0YjhkMjMtMWEzNC0z ZDM1LTg4MmEtODQ4NjMyYTg1YjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg318MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6DOCrkqLDbPHeKVA5lWSD93/rlr6+7VZ+z2sNeueu+SzSpeV/0TQuJ XvSyss5e1LCxywA0SPzlzXOGLqvF09SU6yLknH8UtsWbjqHwJP60rYGYhcFLzvhk YmX+7FP//LSlxNC5sygl00GBb9+vD1C7FB/xTdrd6KI7feyawfBob6jeCtbf20fE Y3BDgtJfBBR72xcTG5qJy+x95qZnn+F91fJCYPjJWxCCKDRin7CLF3NkiWObF2bv 2Lcyv5VGPrPwwFRycsVXwYS08WI9t5/ZIwSVEuEjZ51ArHHtW6Dbp5bs670mjRE+ QGZWmGGvOu+Qq1xXE+mTwLp9Z7JK5VY= -----END CERTIFICATE-----Generated at Wed Nov 5 10:20:58 2025 by rpki-client