$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3334e644-b47c-3b35-94f4-957f9e29fd5c.roa File: 3334e644-b47c-3b35-94f4-957f9e29fd5c.roa (raw, json) Hash identifier: If6cEvWqQiGVJP2SMiZkAW+EKVasN6oPuN765R72ZEI= Subject key identifier: CA:6C:7B:18:86:47:49:A6:E1:72:D2:9C:D1:EF:D3:93:A9:3B:6F:00 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB02D0729A982CBB0D4C54A80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3334e644-b47c-3b35-94f4-957f9e29fd5c.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 54113 IP address blocks: 131.125.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:07:29:a9:82:cb:b0:d4:c5:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=cdf4daff-9e60-4a19-a149-acf355fbd218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:6e:33:b8:04:e2:b2:d1:19:23:ae:89:5e: 8a:a9:10:08:13:b7:f6:a4:cb:b5:a8:85:2f:15:06: f5:75:7d:ac:0d:2f:b0:1a:66:8c:46:6b:83:29:5a: 86:fa:2f:c6:bb:bf:52:95:0d:9a:19:f8:ed:04:0c: 02:de:bc:f3:c1:00:83:29:2f:96:07:c9:64:c4:91: fe:c3:fb:d4:65:f9:c0:92:85:06:fb:d5:e7:c7:07: 71:2e:cd:57:a6:ee:63:8c:53:d1:52:a6:54:ff:8c: 38:5f:fd:c3:20:92:d4:20:8a:98:69:aa:81:ab:ef: ff:c9:7a:08:af:6d:82:7b:68:3e:1e:88:21:1a:7b: 48:f7:7d:bb:a7:c6:51:ce:55:c7:bd:ac:0e:7b:3c: 4b:74:77:8b:61:24:07:73:f8:d5:cc:7d:4b:27:26: b2:0e:5a:f1:68:1d:2a:e5:3a:e2:eb:db:10:c8:b3: 92:9a:94:03:3a:d6:6e:d7:1c:22:e9:b4:cb:2a:d7: 1f:9d:9e:5b:23:4f:0e:a6:3d:07:c8:5d:6e:9b:8a: 3e:a7:b6:a0:d5:f9:d1:3b:08:07:f9:75:83:29:71: a3:fd:e7:45:c7:4a:d9:28:10:4c:c7:04:e4:1e:4f: fd:61:fd:9b:c6:1b:79:6c:8e:cf:a8:3f:05:d1:b2: 1d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:6C:7B:18:86:47:49:A6:E1:72:D2:9C:D1:EF:D3:93:A9:3B:6F:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3334e644-b47c-3b35-94f4-957f9e29fd5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:1c:b9:0d:04:dc:cb:40:ed:97:60:35:2e:b6:cf:e5:4f:10: 8c:e2:98:19:59:61:42:ed:e6:51:c7:ee:ea:21:a3:80:64:60: 00:66:a8:8e:87:94:a2:e5:3f:02:a0:6b:45:f1:f2:3c:ae:1a: 9a:2d:96:a6:72:21:ba:2a:ff:c7:dc:73:90:84:3e:df:65:96: ec:ae:89:d6:14:e1:87:93:87:c4:c8:e0:85:f6:8d:1b:98:e0: 70:ee:33:ef:5d:81:2c:c0:41:f9:eb:b5:2b:45:22:b9:9e:8c: 8b:a7:9a:a5:d3:22:7d:5e:2a:8f:47:26:e0:6b:59:d1:28:85: 3b:5b:52:89:7f:90:19:7a:8e:88:fb:46:19:cf:d3:3e:82:84: f6:0a:14:b7:4c:02:b5:9e:c4:c9:99:41:ab:8e:ab:45:36:76: 48:c1:c0:9d:ad:f4:23:46:5e:da:35:1e:e3:69:e5:0a:9a:cd: 29:b7:99:8e:9c:1f:36:8e:1c:d7:94:77:ec:96:42:34:f9:f8: 71:72:3a:ae:2f:36:0d:87:db:0d:c4:3a:fa:20:64:2b:0b:64: da:be:41:95:d3:ed:9c:05:31:b0:2d:6a:55:8f:8d:ba:0c:75: a8:9a:19:a7:8d:74:96:4d:60:ed:ff:30:b3:51:7a:19:37:fc: e6:99:10:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQcpqYLLsNTFSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk Y2RmNGRhZmYtOWU2MC00YTE5LWExNDktYWNmMzU1ZmJkMjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzBuM7gE4rLRGSOuiV6KqRAIE7f2pMu1qIUv FQb1dX2sDS+wGmaMRmuDKVqG+i/Gu79SlQ2aGfjtBAwC3rzzwQCDKS+WB8lkxJH+ w/vUZfnAkoUG+9XnxwdxLs1Xpu5jjFPRUqZU/4w4X/3DIJLUIIqYaaqBq+//yXoI r22Ce2g+HoghGntI9327p8ZRzlXHvawOezxLdHeLYSQHc/jVzH1LJyayDlrxaB0q 5Tri69sQyLOSmpQDOtZu1xwi6bTLKtcfnZ5bI08Opj0HyF1um4o+p7ag1fnROwgH +XWDKXGj/edFx0rZKBBMxwTkHk/9Yf2bxht5bI7PqD8F0bIdSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpsexiGR0mm4XLSnNHv05OpO28AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzMzNGU2NDQtYjQ3Yy0z YjM1LTk0ZjQtOTU3ZjllMjlmZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkcuQ0E3MtA7ZdgNS62z+VPEIzimBlZYULt5lHH7uoho4BkYABmqI6H lKLlPwKga0Xx8jyuGpotlqZyIboq/8fcc5CEPt9lluyuidYU4YeTh8TI4IX2jRuY 4HDuM+9dgSzAQfnrtStFIrmejIunmqXTIn1eKo9HJuBrWdEohTtbUol/kBl6joj7 RhnP0z6ChPYKFLdMArWexMmZQauOq0U2dkjBwJ2t9CNGXto1HuNp5QqazSm3mY6c HzaOHNeUd+yWQjT5+HFyOq4vNg2H2w3EOvogZCsLZNq+QZXT7ZwFMbAtalWPjboM daiaGaeNdJZNYO3/MLNRehk3/OaZEAc= -----END CERTIFICATE-----Generated at Wed Nov 5 08:52:34 2025 by rpki-client