$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25c71874-83d8-3f3c-bad3-40f71c4cf7c0.roa File: 25c71874-83d8-3f3c-bad3-40f71c4cf7c0.roa (raw, json) Hash identifier: peeA15Z6ZkfsZ95Wmvc1GwblvaDRQ+SZ8P4ABS/w2nk= Subject key identifier: DB:F2:22:2C:5F:4B:A1:31:E0:CB:45:6B:5D:29:6F:C1:72:50:DE:C8 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D703FEC5B2D416BD2A09A1D00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25c71874-83d8-3f3c-bad3-40f71c4cf7c0.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 54113 IP address blocks: 131.125.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:ec:5b:2d:41:6b:d2:a0:9a:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=e2cae8c6-2ec6-480c-abc6-e99a317c05ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9e:45:ad:09:fa:b4:e1:99:ae:fa:f1:8a:ad: 63:3d:9d:1a:fc:17:b3:36:a9:66:2f:76:d4:ef:51: 67:31:a5:6e:86:5f:f6:45:80:8e:5a:3d:df:54:7d: 00:2c:de:9e:81:de:fd:82:51:c3:08:41:47:c9:ff: b3:d7:3f:02:ef:55:33:d8:ff:83:c0:53:5a:66:b0: a7:6c:ff:51:c2:d2:21:d0:f5:17:1b:6e:12:a9:85: c0:b6:2b:15:0b:02:46:8f:44:40:c5:d5:d7:78:7a: 9b:e7:14:98:17:0d:0d:d7:b7:14:42:7f:c1:df:13: ed:eb:81:65:08:e4:c1:5b:a5:fc:37:52:1a:3f:a2: 9c:51:ad:8c:c2:eb:bd:dd:07:79:30:fe:90:ee:40: 9b:a5:0b:31:34:b8:dc:b0:2f:c0:59:2a:70:6f:98: 8c:60:66:d3:24:0b:78:72:60:cf:73:e1:3c:bc:4d: da:b7:82:a3:f2:38:81:b0:04:3c:e2:ab:64:31:86: a1:26:cc:ef:68:0b:a7:86:4b:fc:1b:0e:cc:12:b6: 52:bf:df:b9:77:74:13:94:a3:80:bc:37:f2:6b:58: 29:09:b5:5e:03:ea:58:81:f6:b8:f4:46:8b:6c:7d: 19:b6:4f:26:5e:5f:c7:9e:51:36:8e:a8:b9:08:4d: ed:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F2:22:2C:5F:4B:A1:31:E0:CB:45:6B:5D:29:6F:C1:72:50:DE:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25c71874-83d8-3f3c-bad3-40f71c4cf7c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:1e:45:87:48:7c:5c:88:ef:43:fd:54:f9:37:d2:8c:da:35: 39:41:72:3d:6b:7c:62:6c:69:ba:8d:ba:1a:7b:62:87:3a:b2: 28:b7:98:48:cf:a6:f5:62:72:f4:84:4d:6d:93:a0:67:88:6e: f1:21:1e:a2:42:6b:cd:55:78:de:fc:99:53:00:a8:7f:d5:9a: b3:d0:14:ad:8a:29:68:a9:60:41:99:24:04:aa:31:73:29:10: e4:7c:4a:24:d0:fc:e6:71:a4:53:f4:01:23:41:6d:3d:4f:b8: d1:97:c4:d0:6c:26:ac:3d:d6:e9:d6:28:fe:fd:ed:3f:f4:95: 74:6b:92:d8:a3:7a:a6:b8:75:22:56:63:42:ba:44:89:91:06: 7c:5c:46:9c:09:8b:34:1b:7e:b0:83:11:a6:1a:4e:ec:bc:ba: f4:60:48:c1:8d:f0:d6:66:24:cc:8c:97:5e:6f:38:21:51:58: ff:ce:78:9f:41:f9:1b:fa:a0:16:49:c1:bd:b6:d8:26:f3:c3: 5e:4a:4e:d4:36:38:28:39:07:7b:69:ea:c5:46:5d:13:63:ba: ef:a2:4c:5a:f6:b1:53:ae:7c:37:9e:ed:be:b8:df:6f:9e:9a: 20:7e:d2:ee:f5:18:b4:39:fd:37:d1:24:49:4d:0c:67:ac:3f: 03:3e:cf:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+xbLUFr0qCaHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk ZTJjYWU4YzYtMmVjNi00ODBjLWFiYzYtZTk5YTMxN2MwNWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ5FrQn6tOGZrvrxiq1jPZ0a/BezNqlmL3bU 71FnMaVuhl/2RYCOWj3fVH0ALN6egd79glHDCEFHyf+z1z8C71Uz2P+DwFNaZrCn bP9RwtIh0PUXG24SqYXAtisVCwJGj0RAxdXXeHqb5xSYFw0N17cUQn/B3xPt64Fl COTBW6X8N1IaP6KcUa2Mwuu93Qd5MP6Q7kCbpQsxNLjcsC/AWSpwb5iMYGbTJAt4 cmDPc+E8vE3at4Kj8jiBsAQ84qtkMYahJszvaAunhkv8Gw7MErZSv9+5d3QTlKOA vDfya1gpCbVeA+pYgfa49EaLbH0Ztk8mXl/HnlE2jqi5CE3tHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvyIixfS6Ex4MtFa10pb8FyUN7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjVjNzE4NzQtODNkOC0z ZjNjLWJhZDMtNDBmNzFjNGNmN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg311MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGweRYdIfFyI70P9VPk30ozaNTlBcj1rfGJsabqNuhp7Yoc6sii3mEjP pvVicvSETW2ToGeIbvEhHqJCa81VeN78mVMAqH/VmrPQFK2KKWipYEGZJASqMXMp EOR8SiTQ/OZxpFP0ASNBbT1PuNGXxNBsJqw91unWKP797T/0lXRrktijeqa4dSJW Y0K6RImRBnxcRpwJizQbfrCDEaYaTuy8uvRgSMGN8NZmJMyMl15vOCFRWP/OeJ9B +Rv6oBZJwb222Cbzw15KTtQ2OCg5B3tp6sVGXRNjuu+iTFr2sVOufDee7b6432+e miB+0u71GLQ5/TfRJElNDGesPwM+zwo= -----END CERTIFICATE-----Generated at Fri Apr 17 09:57:57 2026 by rpki-client