$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2479096b-5c85-35f4-8ada-f5674035fc6e.roa File: 2479096b-5c85-35f4-8ada-f5674035fc6e.roa (raw, json) Hash identifier: fU7DLfiRtXMKIl76dufxe6DdXFXpQFGkGW6pKFEma64= Subject key identifier: B9:57:C0:64:24:A5:D7:BB:2E:B2:60:EC:15:11:AF:0A:39:75:A6:50 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D703FEA8F74CFCC193AFA3BC0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2479096b-5c85-35f4-8ada-f5674035fc6e.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 54113 IP address blocks: 131.125.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:ea:8f:74:cf:cc:19:3a:fa:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=6d294b0e-ca68-4f5e-8995-a023bee9e228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:06:de:72:d6:cc:36:5a:a9:b8:5d:44:19:27: 40:f8:04:2d:44:56:05:d0:0c:fc:ec:62:5c:a1:a1: 2f:7f:44:88:aa:fb:3b:59:17:b5:67:29:89:94:bc: 3b:e5:a9:a6:f3:46:40:e5:1b:f0:08:5c:e8:e4:23: 4f:1d:53:bd:66:40:16:a9:21:14:31:ba:3f:fa:12: 9d:cc:cc:ba:e3:ee:2d:05:28:fc:21:c6:42:52:fd: 33:e6:19:3d:db:e2:0d:cd:9d:82:e8:7b:64:63:6f: 5c:c0:2d:52:d7:f6:f4:f7:0d:0a:3f:86:87:d5:3d: fb:79:d8:d5:99:f2:4a:38:3b:7b:15:55:73:a6:ee: c0:58:88:c8:2f:05:e0:90:1a:a0:dd:4d:3b:89:2f: 29:81:02:44:4f:ea:82:ef:91:73:cc:ed:d6:7b:89: 39:9a:c7:6b:c9:34:ec:b3:b5:2f:b3:9e:8b:10:86: 66:5c:0f:fb:52:86:4a:e1:6a:ef:82:4e:ef:e1:99: fa:d1:91:84:73:24:56:ff:f3:c3:78:fb:d7:97:72: 6d:71:1f:6c:b3:9c:6a:9f:e8:52:d7:d6:9d:5d:a4: f2:70:72:dd:8d:66:28:94:ed:6f:95:c6:fe:32:26: 72:01:ba:7d:5c:11:64:57:6e:1b:02:aa:30:7c:2b: 1e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:57:C0:64:24:A5:D7:BB:2E:B2:60:EC:15:11:AF:0A:39:75:A6:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2479096b-5c85-35f4-8ada-f5674035fc6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:c8:41:56:bb:10:cd:25:83:55:3e:a2:80:ce:be:36:71:69: 0e:94:d2:0a:64:e4:c8:e6:1b:48:2b:e1:2b:2f:fd:4d:9f:24: a8:d3:12:2b:02:33:29:05:f1:98:31:0a:66:ae:35:8f:fe:1f: 19:f1:d6:aa:6c:be:88:ac:07:77:88:7d:fb:81:1e:05:38:f6: 10:7e:08:c6:56:c4:25:8f:50:a1:82:1a:39:38:c1:88:d8:f6: fd:73:3c:cb:8f:9e:40:aa:14:77:33:9b:ac:9d:16:91:b6:be: 28:78:20:4d:ed:f6:35:74:5e:de:2f:2a:cb:e4:a0:61:12:a6: 74:18:6e:4d:87:91:c1:3b:2b:89:67:cb:a6:6b:a6:0b:d7:02: 2a:34:ee:54:eb:48:47:3c:af:8d:e2:9c:98:6c:34:cb:c1:ed: 70:e9:56:63:75:29:e6:a4:63:34:9a:a0:dc:45:d1:f5:37:90: 16:a3:b0:f6:24:cd:32:dc:c2:5f:eb:bd:b1:77:8c:24:45:1f: bd:5e:a3:b5:ad:3f:5e:70:de:b0:9a:48:ab:3a:b6:24:51:7a: d1:bd:a7:de:83:d8:6e:42:9b:7d:c8:d8:49:22:ab:e7:70:6d: 2a:d5:f3:5b:ca:93:19:26:29:14:96:25:7f:ef:fc:58:3b:22: 13:bd:4f:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+qPdM/MGTr6O8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk NmQyOTRiMGUtY2E2OC00ZjVlLTg5OTUtYTAyM2JlZTllMjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgbectbMNlqpuF1EGSdA+AQtRFYF0Az87GJc oaEvf0SIqvs7WRe1ZymJlLw75amm80ZA5RvwCFzo5CNPHVO9ZkAWqSEUMbo/+hKd zMy64+4tBSj8IcZCUv0z5hk92+INzZ2C6HtkY29cwC1S1/b09w0KP4aH1T37edjV mfJKODt7FVVzpu7AWIjILwXgkBqg3U07iS8pgQJET+qC75FzzO3We4k5msdryTTs s7Uvs56LEIZmXA/7UoZK4Wrvgk7v4Zn60ZGEcyRW//PDePvXl3JtcR9ss5xqn+hS 19adXaTycHLdjWYolO1vlcb+MiZyAbp9XBFkV24bAqowfCse+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlXwGQkpde7LrJg7BURrwo5daZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjQ3OTA5NmItNWM4NS0z NWY0LThhZGEtZjU2NzQwMzVmYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg31wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbIQVa7EM0lg1U+ooDOvjZxaQ6U0gpk5MjmG0gr4Ssv/U2fJKjTEisC MykF8ZgxCmauNY/+Hxnx1qpsvoisB3eIffuBHgU49hB+CMZWxCWPUKGCGjk4wYjY 9v1zPMuPnkCqFHczm6ydFpG2vih4IE3t9jV0Xt4vKsvkoGESpnQYbk2HkcE7K4ln y6ZrpgvXAio07lTrSEc8r43inJhsNMvB7XDpVmN1KeakYzSaoNxF0fU3kBajsPYk zTLcwl/rvbF3jCRFH71eo7WtP15w3rCaSKs6tiRRetG9p96D2G5Cm33I2Ekiq+dw bSrV81vKkxkmKRSWJX/v/Fg7IhO9T+I= -----END CERTIFICATE-----Generated at Fri Apr 17 11:20:57 2026 by rpki-client