$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25c71874-83d8-3f3c-bad3-40f71c4cf7c0.roa File: 25c71874-83d8-3f3c-bad3-40f71c4cf7c0.roa (raw, json) Hash identifier: dzzHKJEcTLGRMsxeZQjkVFTlSbgt5O+FtiVi6iZVzW0= Subject key identifier: 0F:35:4C:31:F2:BF:97:61:3D:F1:77:A4:21:4E:BF:86:14:90:E3:AC Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB02D07E64BF7F3264A68F340 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25c71874-83d8-3f3c-bad3-40f71c4cf7c0.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 54113 IP address blocks: 131.125.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:07:e6:4b:f7:f3:26:4a:68:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=3cf99a5f-61e5-4517-88dd-70a3325f1611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:29:10:e6:e7:42:8c:08:87:7c:dd:b2:61:0c: a7:df:c7:c2:c2:cf:0a:f3:07:ad:27:c9:c9:52:4f: 9e:7f:77:5f:1e:ff:0b:a4:70:b3:92:74:99:ba:6b: db:dd:41:92:27:20:d6:dc:f7:3b:86:d2:2b:08:ef: 29:38:99:76:b6:a9:9c:eb:f7:3b:f7:c2:30:4d:58: 25:f5:c5:17:55:d3:62:65:b8:29:d7:bb:de:48:c6: d8:5a:70:7a:a5:55:b4:39:6a:19:fe:ff:3b:a5:58: 51:14:b5:0b:ff:5c:c2:a7:c5:8f:72:4f:83:37:64: 34:76:0b:b0:d1:6d:48:25:f5:ca:e2:85:41:d5:e1: 90:07:64:32:0c:f8:fc:50:f1:09:d2:7a:3a:2a:c2: 1d:1e:fe:2b:e1:49:a2:96:0c:23:87:4b:f5:97:eb: b7:a6:e2:94:8a:23:3b:04:5b:f5:82:16:d9:48:01: ce:a5:34:21:51:a5:7b:1e:1b:a8:53:00:d8:e7:8e: ae:87:5c:75:47:3f:32:ee:61:ed:47:45:ae:56:43: a5:78:5d:7d:ad:56:46:dd:75:0b:4f:db:07:73:65: f2:88:91:bb:54:e5:23:53:15:ed:11:42:8b:e5:d3: cf:ed:97:5d:de:be:ab:b3:17:57:4b:02:e5:14:80: 53:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:35:4C:31:F2:BF:97:61:3D:F1:77:A4:21:4E:BF:86:14:90:E3:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25c71874-83d8-3f3c-bad3-40f71c4cf7c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:83:68:85:79:95:bd:3a:ca:b8:65:03:38:fb:de:05:df:d3: 4c:e7:6f:0d:2d:13:eb:63:7d:3a:92:e7:23:92:cf:72:e7:cf: a7:22:4a:71:3d:c5:50:a9:f0:86:2a:93:e2:82:49:19:7d:fb: b6:62:0a:dd:f7:da:c0:cf:1b:4b:27:eb:e9:11:a5:ec:f3:b3: 6d:fe:7d:64:20:e3:f6:ef:81:f3:61:c5:f2:ac:fe:0d:9c:01: 64:1d:79:e9:a2:7e:e5:45:4a:b5:58:29:80:f4:97:9e:f2:b0: 5b:8e:ff:b1:77:84:28:ea:1e:e4:a5:9b:ab:1c:f5:47:02:36: 7d:22:77:28:11:c5:57:14:ac:83:81:06:21:aa:24:e1:0b:07: 77:9d:b1:2e:44:7d:9d:20:38:ff:0e:d6:ea:33:a1:0e:c6:1b: dc:3b:6a:47:b7:d9:76:a2:32:77:5e:a9:0c:31:8d:38:39:1a: 3d:c2:b0:03:cb:b8:9b:de:ff:c5:0c:64:7b:74:cf:f2:0b:06: 63:19:ac:cc:c1:20:ab:2e:9c:8e:0b:e7:67:31:5c:31:08:5f: 2b:1b:b4:83:b6:c7:d2:2e:9f:75:ba:09:75:6a:e2:80:9f:ae: 24:af:9a:dd:31:1a:8c:f3:3a:72:55:3d:5a:91:86:81:ab:8b: 98:c9:ac:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQfmS/fzJkpo80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk M2NmOTlhNWYtNjFlNS00NTE3LTg4ZGQtNzBhMzMyNWYxNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSkQ5udCjAiHfN2yYQyn38fCws8K8wetJ8nJ Uk+ef3dfHv8LpHCzknSZumvb3UGSJyDW3Pc7htIrCO8pOJl2tqmc6/c798IwTVgl 9cUXVdNiZbgp17veSMbYWnB6pVW0OWoZ/v87pVhRFLUL/1zCp8WPck+DN2Q0dguw 0W1IJfXK4oVB1eGQB2QyDPj8UPEJ0no6KsIdHv4r4Umilgwjh0v1l+u3puKUiiM7 BFv1ghbZSAHOpTQhUaV7HhuoUwDY546uh1x1Rz8y7mHtR0WuVkOleF19rVZG3XUL T9sHc2XyiJG7VOUjUxXtEUKL5dPP7Zdd3r6rsxdXSwLlFIBTTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA81TDHyv5dhPfF3pCFOv4YUkOOsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjVjNzE4NzQtODNkOC0z ZjNjLWJhZDMtNDBmNzFjNGNmN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg311MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCDaIV5lb06yrhlAzj73gXf00znbw0tE+tjfTqS5yOSz3Lnz6ciSnE9 xVCp8IYqk+KCSRl9+7ZiCt332sDPG0sn6+kRpezzs23+fWQg4/bvgfNhxfKs/g2c AWQdeemifuVFSrVYKYD0l57ysFuO/7F3hCjqHuSlm6sc9UcCNn0idygRxVcUrIOB BiGqJOELB3edsS5EfZ0gOP8O1uozoQ7GG9w7ake32XaiMndeqQwxjTg5Gj3CsAPL uJve/8UMZHt0z/ILBmMZrMzBIKsunI4L52cxXDEIXysbtIO2x9Iun3W6CXVq4oCf riSvmt0xGozzOnJVPVqRhoGri5jJrGE= -----END CERTIFICATE-----Generated at Wed Nov 5 00:52:12 2025 by rpki-client