$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/340cd8f4-08a6-38c3-8f36-276f75a9fdd5.roa File: 340cd8f4-08a6-38c3-8f36-276f75a9fdd5.roa (raw, json) Hash identifier: grI0gbdzg/ITSg5vpkjt+gwmb/sj9T3mAgAJ5twnjbY= Subject key identifier: 62:35:82:63:BB:67:95:29:F7:94:83:14:9A:D0:F7:BD:1F:98:99:B9 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF2E772F03DDE3CC3BBB3DD40 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/340cd8f4-08a6-38c3-8f36-276f75a9fdd5.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:72:f0:3d:de:3c:c3:bb:b3:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=6b8d4d24-e952-4d06-addd-52b64f514f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:34:56:4a:33:a4:0f:41:e3:4e:4a:8f:15:4d: f8:db:23:9d:0b:ca:00:a9:b1:64:92:a0:f2:6c:72: 1f:75:c9:47:9c:28:af:b0:fd:f9:35:ff:fe:ee:8f: 21:49:77:08:9a:9d:0e:64:74:ba:8f:5b:52:2c:42: 15:b6:83:96:0e:b9:35:14:d9:37:c2:55:27:50:2e: c0:84:c4:47:a8:1d:1d:63:cd:b2:97:c2:71:4c:3c: 85:7b:e0:07:4a:e0:f0:32:ee:69:f2:19:9a:76:7b: 6c:3c:19:e5:26:52:a4:79:bf:e0:38:46:94:80:8f: d5:c4:6c:bb:28:c0:15:33:02:19:b6:46:a0:c1:0e: 01:ad:bc:b9:88:a1:36:e2:b0:3d:26:9a:61:b0:17: a4:90:31:9d:ba:44:44:d3:81:72:c3:6b:99:a8:ad: e9:4d:e8:3e:38:ee:fc:97:15:90:3f:72:77:c6:6f: 8e:16:9d:0b:15:ab:3b:3c:f1:30:14:95:d5:24:43: b0:77:b8:0c:23:1a:ba:a7:08:ed:5c:e1:46:c3:75: 9f:0c:59:2f:3f:1c:0d:9e:d9:25:af:47:64:e5:13: b1:b9:2e:c5:1d:54:0e:37:00:0f:98:3b:ba:26:20: 69:f1:31:c5:8d:d2:9b:ac:76:fa:66:92:6c:26:cc: 71:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:35:82:63:BB:67:95:29:F7:94:83:14:9A:D0:F7:BD:1F:98:99:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/340cd8f4-08a6-38c3-8f36-276f75a9fdd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:2f:7d:8a:1f:ea:7b:41:92:24:1e:de:38:b6:e9:11:0c:73: 9e:3b:25:09:d5:02:e7:fc:74:28:ba:9b:69:78:68:de:5a:fc: 46:96:50:25:33:81:77:6a:25:48:51:b2:4a:24:56:22:1f:c4: e7:00:04:17:86:fc:0b:cb:90:18:59:e8:fd:d7:0d:c0:57:a6: 84:16:47:bc:77:ef:42:1a:6a:0b:5d:c4:09:b9:b7:22:d9:1f: 10:6d:5d:3d:a4:73:3b:fd:33:e3:01:46:2e:a4:b7:96:3d:30: 59:74:8a:1d:86:1d:86:57:ff:f5:0f:28:da:bc:59:3c:b0:32: 91:86:99:c0:2f:bb:dc:7f:db:f2:e9:71:a5:16:15:c4:9e:a7: ab:95:c2:ee:a4:34:39:5d:c0:dd:65:d6:c3:36:5f:67:65:aa: 9d:44:46:17:ec:89:68:6a:0e:7d:d4:40:80:8e:2f:67:4f:97: 0e:55:a1:a8:c3:64:d0:f6:67:54:1e:85:e7:9b:e9:83:13:56: 27:39:e4:e8:9a:c7:70:c8:b5:18:d6:a9:cc:8f:aa:e1:bb:ed: 45:3b:88:b6:f2:a6:5e:b0:3c:f6:3d:14:23:d5:22:3c:71:36: cc:ba:78:27:c7:a0:95:26:28:2d:4b:e1:49:69:90:1e:94:39: 24:33:30:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53LwPd48w7uz3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk NmI4ZDRkMjQtZTk1Mi00ZDA2LWFkZGQtNTJiNjRmNTE0ZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzRWSjOkD0HjTkqPFU342yOdC8oAqbFkkqDy bHIfdclHnCivsP35Nf/+7o8hSXcImp0OZHS6j1tSLEIVtoOWDrk1FNk3wlUnUC7A hMRHqB0dY82yl8JxTDyFe+AHSuDwMu5p8hmadntsPBnlJlKkeb/gOEaUgI/VxGy7 KMAVMwIZtkagwQ4Brby5iKE24rA9JpphsBekkDGdukRE04Fyw2uZqK3pTeg+OO78 lxWQP3J3xm+OFp0LFas7PPEwFJXVJEOwd7gMIxq6pwjtXOFGw3WfDFkvPxwNntkl r0dk5ROxuS7FHVQONwAPmDu6JiBp8THFjdKbrHb6ZpJsJsxx2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGI1gmO7Z5Up95SDFJrQ970fmJm5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzQwY2Q4ZjQtMDhhNi0z OGMzLThmMzYtMjc2Zjc1YTlmZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcvfYof6ntBkiQe3ji26REMc547JQnVAuf8dCi6m2l4aN5a/EaWUCUz gXdqJUhRskokViIfxOcABBeG/AvLkBhZ6P3XDcBXpoQWR7x370IaagtdxAm5tyLZ HxBtXT2kczv9M+MBRi6kt5Y9MFl0ih2GHYZX//UPKNq8WTywMpGGmcAvu9x/2/Lp caUWFcSep6uVwu6kNDldwN1l1sM2X2dlqp1ERhfsiWhqDn3UQICOL2dPlw5VoajD ZND2Z1Qeheeb6YMTVic55Oiax3DItRjWqcyPquG77UU7iLbypl6wPPY9FCPVIjxx Nsy6eCfHoJUmKC1L4UlpkB6UOSQzMPk= -----END CERTIFICATE-----Generated at Tue Sep 22 21:20:43 2026 by rpki-client