$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d03a193-10c3-35f5-a570-a05c4616b50a.roa File: 2d03a193-10c3-35f5-a570-a05c4616b50a.roa (raw, json) Hash identifier: /WKbc4Xgtbdsi7vomZI7WS/P7RZ1nP8M0Q0t3cuZw/M= Subject key identifier: F5:D1:85:30:2C:B3:8E:F2:25:F2:10:03:B1:AC:5D:D5:F6:2E:DD:57 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D703FEA9B5D1BCBBAFE839A20 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d03a193-10c3-35f5-a570-a05c4616b50a.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 54113 IP address blocks: 131.125.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:ea:9b:5d:1b:cb:ba:fe:83:9a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=9c879411-bc20-436b-b90d-abd5d6eac174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c3:49:ce:a4:ae:15:46:55:fe:a2:b8:8a:53: b7:70:a4:0d:8a:66:6e:52:06:14:b3:11:ee:28:78: 26:0d:48:ad:a2:f8:c3:d9:12:2f:6e:b9:f2:9c:28: 9a:d8:22:b1:09:14:c8:28:3d:a0:58:64:47:ea:85: 55:0c:b9:e9:07:93:3a:67:59:17:d2:5b:4e:c8:04: 90:d4:d6:ef:d5:a9:39:b7:2c:69:be:c4:61:85:ba: 37:b4:78:28:87:8e:5f:bd:f9:1a:2b:b6:ee:60:02: 3c:76:d7:de:17:a6:7e:08:84:3e:03:9a:c0:28:c4: c0:f4:71:78:85:72:d2:ca:27:3e:49:e1:16:85:c6: b1:10:96:e2:02:71:19:21:15:25:97:ca:87:98:cc: 4f:95:83:ca:16:7a:68:d4:09:93:df:5d:64:01:70: 58:40:05:27:5a:af:ed:a6:c5:64:1b:28:ea:98:e8: 1a:49:60:5d:e4:8e:cf:51:02:41:cd:ea:c0:20:2b: 55:4e:51:b1:31:6a:c8:82:5d:6a:dd:da:61:8d:d2: db:df:24:36:e7:f8:2a:88:1e:f7:1b:01:b2:ce:98: b6:69:1f:c9:02:eb:28:51:56:14:55:8e:7f:42:f7: 36:59:46:73:5c:6f:76:58:d9:7f:5f:2e:61:2b:42: c9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D1:85:30:2C:B3:8E:F2:25:F2:10:03:B1:AC:5D:D5:F6:2E:DD:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d03a193-10c3-35f5-a570-a05c4616b50a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:aa:1f:35:75:31:01:41:4d:9a:bb:e4:52:0c:07:d4:ff:ab: ca:c0:43:4e:d4:03:95:6b:2f:28:18:8b:05:c2:cb:83:ee:8c: cb:a2:6f:9b:ca:47:ba:98:3d:7e:a9:b4:50:77:a7:55:06:79: 88:4f:1d:31:d2:fa:15:cb:2c:60:ae:21:aa:bf:51:a5:03:41: 55:9d:fd:24:56:39:56:a1:bd:b2:e6:33:80:e2:54:c0:3f:51: 71:7e:7e:b8:0c:20:40:3d:ee:32:9f:fa:b2:a3:32:cc:cc:94: 30:bb:e2:20:ef:f2:1e:fa:53:c4:28:ef:86:08:2f:b0:3b:0b: cc:06:82:50:7c:91:24:4f:54:cd:3a:55:e0:4b:c2:2a:14:75: f5:f7:93:cb:f4:10:6c:e1:1f:e5:d5:b6:4e:1d:28:15:ef:88: c4:ec:f9:e0:e6:da:ac:17:02:58:64:eb:a6:db:91:0e:5d:26: e7:e1:49:dc:d2:7d:18:15:65:53:d6:01:79:30:dd:a3:7b:d7: dd:28:1e:79:f4:5a:2d:79:92:e5:b4:0a:ca:46:a5:3a:be:81: 20:f0:29:20:3a:75:b3:90:33:9b:c3:9c:ad:62:8a:6d:1f:e4: f1:91:38:8e:31:84:56:6f:7e:b3:2e:c1:a1:24:00:0c:52:99: 55:59:44:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+qbXRvLuv6DmiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk OWM4Nzk0MTEtYmMyMC00MzZiLWI5MGQtYWJkNWQ2ZWFjMTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcNJzqSuFUZV/qK4ilO3cKQNimZuUgYUsxHu KHgmDUitovjD2RIvbrnynCia2CKxCRTIKD2gWGRH6oVVDLnpB5M6Z1kX0ltOyASQ 1Nbv1ak5tyxpvsRhhbo3tHgoh45fvfkaK7buYAI8dtfeF6Z+CIQ+A5rAKMTA9HF4 hXLSyic+SeEWhcaxEJbiAnEZIRUll8qHmMxPlYPKFnpo1AmT311kAXBYQAUnWq/t psVkGyjqmOgaSWBd5I7PUQJBzerAICtVTlGxMWrIgl1q3dphjdLb3yQ25/gqiB73 GwGyzpi2aR/JAusoUVYUVY5/Qvc2WUZzXG92WNl/Xy5hK0LJAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXRhTAss47yJfIQA7GsXdX2Lt1XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmQwM2ExOTMtMTBjMy0z NWY1LWE1NzAtYTA1YzQ2MTZiNTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg31+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2qHzV1MQFBTZq75FIMB9T/q8rAQ07UA5VrLygYiwXCy4PujMuib5vK R7qYPX6ptFB3p1UGeYhPHTHS+hXLLGCuIaq/UaUDQVWd/SRWOVahvbLmM4DiVMA/ UXF+frgMIEA97jKf+rKjMszMlDC74iDv8h76U8Qo74YIL7A7C8wGglB8kSRPVM06 VeBLwioUdfX3k8v0EGzhH+XVtk4dKBXviMTs+eDm2qwXAlhk66bbkQ5dJufhSdzS fRgVZVPWAXkw3aN7190oHnn0Wi15kuW0CspGpTq+gSDwKSA6dbOQM5vDnK1iim0f 5PGROI4xhFZvfrMuwaEkAAxSmVVZRDU= -----END CERTIFICATE-----Generated at Fri Apr 17 11:27:16 2026 by rpki-client