$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d03a193-10c3-35f5-a570-a05c4616b50a.roa File: 2d03a193-10c3-35f5-a570-a05c4616b50a.roa (raw, json) Hash identifier: yxRuS2riEsIlk1p7+y4w8WMmLqia0rzQ0t+LjHmURGg= Subject key identifier: 26:20:5D:4D:8E:1E:30:FC:27:B7:8A:DC:3C:05:43:87:1A:A7:8B:E5 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF2E7737FE864EF3C4B48C900 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d03a193-10c3-35f5-a570-a05c4616b50a.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:73:7f:e8:64:ef:3c:4b:48:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=af5bfacf-5c60-4a4f-8c7e-cb79f3dde8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:87:06:63:e1:7f:36:68:a9:1b:bd:56:c3: b0:f0:dc:5a:72:61:0d:22:50:6c:6a:b9:17:81:c1: 4b:ae:80:26:84:e8:e1:6a:da:cd:71:6b:be:07:7e: 23:26:25:40:e6:cf:f2:61:85:5c:67:eb:07:cc:98: 6b:f8:5a:91:d7:55:bc:dd:a2:b6:c5:8f:20:ab:96: 6d:25:b6:35:f8:db:f2:61:d9:18:fc:0b:00:00:2c: b0:ad:9f:dc:41:7d:b9:bc:6e:9f:8f:38:73:f2:03: 90:1f:fd:7f:f3:0f:1e:a0:1f:c5:e0:e7:05:5b:94: c4:9a:89:97:32:91:33:b0:e1:0f:c7:1f:9c:6c:5e: a5:de:5a:4b:54:86:d5:fd:73:3b:a1:95:9b:d0:fe: 7f:7b:7c:0d:ff:b2:05:6e:ca:30:61:27:f4:09:d6: b5:09:6b:d9:b3:9e:17:76:ee:8a:bb:7f:e9:9d:32: f8:b8:ac:44:80:2b:b4:59:33:b1:98:c9:cb:bb:a5: a4:6c:93:be:e0:9c:4f:cd:a8:01:c0:79:52:22:ee: ae:54:a4:f5:53:40:35:fe:2d:ec:0a:e9:63:ab:c0: 00:a0:65:c6:96:c7:d3:36:73:bb:7a:df:13:d4:4b: 40:4c:cc:23:43:45:05:0b:4b:fa:d5:4f:44:0c:2f: 99:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:20:5D:4D:8E:1E:30:FC:27:B7:8A:DC:3C:05:43:87:1A:A7:8B:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d03a193-10c3-35f5-a570-a05c4616b50a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:7f:c2:2e:b2:1b:80:27:17:2d:0e:f7:01:a3:91:55:5e:6d: 4a:8f:d5:b0:aa:47:8d:95:bb:df:32:14:3e:60:01:36:53:b5: 15:6f:d4:fc:2a:85:79:d0:79:3c:2f:5b:fd:9c:1e:be:5b:85: f7:2b:a6:59:77:4a:2b:df:66:3b:de:09:12:bf:5a:45:5c:ac: 89:a0:e6:67:92:6a:74:62:b8:fe:57:12:8d:63:4a:51:89:b1: 53:0c:93:ac:8f:c1:b9:7a:87:54:d8:a4:ee:ec:d6:0b:bf:a2: b2:ec:0d:ce:aa:7c:57:29:01:92:24:51:e4:4c:30:bc:ef:70: c5:f0:4e:2d:1e:6e:f9:fc:3c:13:d9:7b:90:27:4e:b9:5f:78: a4:0a:ac:1a:29:49:37:3f:72:17:34:c9:95:cc:2c:3f:06:d4: 1a:c9:0b:6f:1f:56:ad:3a:8b:b4:96:11:0d:bd:e2:e7:cc:58: 1f:6b:a8:03:b4:1f:9d:a9:70:b6:e0:5e:51:5b:6f:4d:02:ae: 80:4a:01:db:67:63:83:f0:f4:e0:74:19:8e:38:e4:82:eb:2d: 29:ea:fe:5d:bf:af:ee:cd:55:93:62:a0:c7:09:fa:68:38:13: 56:b5:aa:35:09:f4:96:aa:eb:08:f5:e7:2f:6f:db:ae:50:91: 6d:6b:ab:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53N/6GTvPEtIyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk YWY1YmZhY2YtNWM2MC00YTRmLThjN2UtY2I3OWYzZGRlOGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVmHBmPhfzZoqRu9VsOw8NxacmENIlBsarkX gcFLroAmhOjhatrNcWu+B34jJiVA5s/yYYVcZ+sHzJhr+FqR11W83aK2xY8gq5Zt JbY1+NvyYdkY/AsAACywrZ/cQX25vG6fjzhz8gOQH/1/8w8eoB/F4OcFW5TEmomX MpEzsOEPxx+cbF6l3lpLVIbV/XM7oZWb0P5/e3wN/7IFbsowYSf0Cda1CWvZs54X du6Ku3/pnTL4uKxEgCu0WTOxmMnLu6WkbJO+4JxPzagBwHlSIu6uVKT1U0A1/i3s Culjq8AAoGXGlsfTNnO7et8T1EtATMwjQ0UFC0v61U9EDC+ZDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYgXU2OHjD8J7eK3DwFQ4cap4vlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmQwM2ExOTMtMTBjMy0z NWY1LWE1NzAtYTA1YzQ2MTZiNTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg31+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFh/wi6yG4AnFy0O9wGjkVVebUqP1bCqR42Vu98yFD5gATZTtRVv1Pwq hXnQeTwvW/2cHr5bhfcrpll3SivfZjveCRK/WkVcrImg5meSanRiuP5XEo1jSlGJ sVMMk6yPwbl6h1TYpO7s1gu/orLsDc6qfFcpAZIkUeRMMLzvcMXwTi0ebvn8PBPZ e5AnTrlfeKQKrBopSTc/chc0yZXMLD8G1BrJC28fVq06i7SWEQ294ufMWB9rqAO0 H52pcLbgXlFbb00CroBKAdtnY4Pw9OB0GY445ILrLSnq/l2/r+7NVZNioMcJ+mg4 E1a1qjUJ9Jaq6wj15y9v265QkW1rqxQ= -----END CERTIFICATE-----Generated at Mon Sep 21 08:02:53 2026 by rpki-client