$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2479096b-5c85-35f4-8ada-f5674035fc6e.roa File: 2479096b-5c85-35f4-8ada-f5674035fc6e.roa (raw, json) Hash identifier: AyHRrQQpcNto8nkI0bRcPJ5HnUpPuUzhdlEPGP6Z4Uw= Subject key identifier: 41:2B:14:88:27:2B:5C:03:84:88:53:95:47:FB:1C:73:C7:AE:78:0B Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF2E77373F7D034A7DCF495C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2479096b-5c85-35f4-8ada-f5674035fc6e.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:73:73:f7:d0:34:a7:dc:f4:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=e119b186-d666-4201-9341-3641a99f63fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:84:e5:06:fd:0e:e3:c6:58:cb:97:43:53:4c: ae:82:32:02:0f:fe:65:d5:3b:88:9b:92:53:29:af: c7:13:13:6c:e1:f1:7b:49:b3:1d:44:00:22:2c:89: aa:8a:7c:8b:72:e4:6e:67:d5:2e:fe:e5:6b:76:2c: 7d:0e:68:4a:8a:b9:0b:06:d3:6a:22:d8:35:37:ad: 24:1c:91:5e:ec:2e:d9:42:fa:6b:bf:e8:23:f8:b1: c3:8c:5b:e3:b3:16:70:ba:c9:bd:bb:fd:55:8a:52: 35:37:e5:c7:77:30:eb:5e:ef:f9:b9:cd:c5:a0:40: da:5d:03:cb:ca:2a:70:5f:b1:c0:84:51:7e:f7:5f: ae:a7:f5:5c:a5:a4:dc:44:40:42:e0:e0:0a:8a:e5: 45:91:11:53:4d:b3:73:41:94:65:31:3c:d6:58:51: d2:97:13:a2:31:a1:20:a4:36:72:62:e0:7c:ef:5e: 22:a5:2b:a9:31:8a:5a:d2:0d:50:d7:10:5c:b5:bb: 90:a0:19:f4:98:be:fc:e3:1c:c7:d6:11:4a:40:17: 63:0d:01:0a:14:20:52:3f:30:22:fb:0e:f3:26:64: 49:dc:e4:10:eb:1e:c5:3e:55:33:50:19:7f:c3:b4: 80:a7:f4:6f:8f:1e:46:ab:e7:83:27:51:cf:0a:27: 4b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2B:14:88:27:2B:5C:03:84:88:53:95:47:FB:1C:73:C7:AE:78:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2479096b-5c85-35f4-8ada-f5674035fc6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:53:92:58:c6:28:bf:39:2f:0b:6d:7b:79:b0:01:42:4e:f4: f0:f2:3b:42:50:b8:71:b7:40:b3:25:67:49:df:ec:a0:b0:d1: 26:92:04:a0:f1:63:27:d7:f4:e9:a8:97:c3:51:91:06:9b:6b: f7:9b:23:ab:dc:ca:b6:57:47:e0:a1:f3:71:f7:e9:39:34:bf: 3d:ac:47:3c:1e:da:85:17:e2:15:52:2e:cc:76:63:55:24:26: a8:16:84:8c:f1:42:b5:0a:df:6c:13:64:ce:93:3f:b5:43:94: d9:41:21:10:ea:d4:7b:8e:0e:16:b0:79:85:d9:86:d6:79:93: c1:2d:4d:c3:0c:58:3c:56:b8:96:35:da:07:b9:82:05:55:25: c9:bb:bf:da:c8:55:db:2a:2c:67:f2:14:66:91:c1:3d:78:c5: 83:32:83:c9:a4:6c:ca:8a:1a:18:85:f2:75:a9:97:dd:ee:0b: bd:d4:f1:a7:33:3d:09:8c:6c:1d:19:b6:50:d0:52:8c:92:4f: 5f:79:e9:15:a5:5d:9f:77:d1:27:b3:ba:d2:47:8d:ec:27:ef: 84:5e:aa:9f:7b:e2:1c:75:3b:f7:2c:97:17:f2:dd:60:16:dc: e4:b8:66:17:72:bd:f2:09:e5:8e:c0:fe:34:e8:d4:fd:a1:80: 90:a8:1f:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53Nz99A0p9z0lcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZTExOWIxODYtZDY2Ni00MjAxLTkzNDEtMzY0MWE5OWY2M2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYTlBv0O48ZYy5dDU0yugjICD/5l1TuIm5JT Ka/HExNs4fF7SbMdRAAiLImqinyLcuRuZ9Uu/uVrdix9DmhKirkLBtNqItg1N60k HJFe7C7ZQvprv+gj+LHDjFvjsxZwusm9u/1VilI1N+XHdzDrXu/5uc3FoEDaXQPL yipwX7HAhFF+91+up/VcpaTcREBC4OAKiuVFkRFTTbNzQZRlMTzWWFHSlxOiMaEg pDZyYuB8714ipSupMYpa0g1Q1xBctbuQoBn0mL784xzH1hFKQBdjDQEKFCBSPzAi +w7zJmRJ3OQQ6x7FPlUzUBl/w7SAp/Rvjx5Gq+eDJ1HPCidLUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEErFIgnK1wDhIhTlUf7HHPHrngLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjQ3OTA5NmItNWM4NS0z NWY0LThhZGEtZjU2NzQwMzVmYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg31wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlTkljGKL85Lwtte3mwAUJO9PDyO0JQuHG3QLMlZ0nf7KCw0SaSBKDx YyfX9Omol8NRkQaba/ebI6vcyrZXR+Ch83H36Tk0vz2sRzwe2oUX4hVSLsx2Y1Uk JqgWhIzxQrUK32wTZM6TP7VDlNlBIRDq1HuODhaweYXZhtZ5k8EtTcMMWDxWuJY1 2ge5ggVVJcm7v9rIVdsqLGfyFGaRwT14xYMyg8mkbMqKGhiF8nWpl93uC73U8acz PQmMbB0ZtlDQUoyST1956RWlXZ930SezutJHjewn74Reqp974hx1O/cslxfy3WAW 3OS4ZhdyvfIJ5Y7A/jTo1P2hgJCoH0E= -----END CERTIFICATE-----Generated at Mon Sep 21 17:13:04 2026 by rpki-client