$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/458d08ae-db95-35c8-a848-dba5242c611e.roa File: 458d08ae-db95-35c8-a848-dba5242c611e.roa (raw, json) Hash identifier: gB52Nv+GZj6C61ghOH9o4mf5tmltpc3Nw0SHFxPP9/w= Subject key identifier: 70:59:72:ED:98:F2:5F:ED:A0:12:EB:18:38:E2:59:BA:E0:0D:37:41 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF2E773148BDB40238B795120 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/458d08ae-db95-35c8-a848-dba5242c611e.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:73:14:8b:db:40:23:8b:79:51:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=4b141a18-1554-43f0-8d0f-3e8409e77faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:92:75:24:fc:35:88:72:f4:15:82:d3:e8:da: aa:b2:1b:d1:73:a3:13:74:8d:2a:a4:96:f2:66:f3: 0a:67:a3:e7:0b:6e:31:c1:24:f9:8d:e2:66:96:5e: e7:da:dd:52:8f:7c:42:e2:15:e7:db:e6:55:6e:98: b9:55:51:9c:12:f4:e7:39:1a:40:b9:9a:bc:8c:ef: 8d:96:ec:23:11:fe:f5:82:0a:62:41:97:1d:45:8d: 27:1c:a9:c9:4a:29:b7:09:84:3e:ed:52:e1:3d:11: 44:28:06:39:88:a2:93:d2:3c:1f:9f:53:10:51:e7: 38:f4:0a:20:4b:93:67:a0:9b:ec:5a:49:16:ad:4a: 92:bf:67:fa:cb:36:e8:74:60:db:54:61:94:e3:b2: c2:36:0d:51:d6:f8:01:3b:03:73:b3:50:12:87:32: 80:52:90:59:4c:22:26:7b:40:3c:c7:19:ce:fa:fd: d5:cf:68:c5:b7:0b:d5:e5:11:4c:d1:28:2f:58:54: 75:26:48:42:21:1e:b3:df:ee:54:af:4e:1d:c2:3e: 61:35:23:29:7c:6b:6e:21:2b:ea:8e:e9:fa:b4:63: dd:06:cb:df:44:2f:24:44:47:6c:c9:67:cc:7f:21: db:2c:53:ce:ef:a8:67:cd:c9:72:a5:13:e2:78:b5: d2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:59:72:ED:98:F2:5F:ED:A0:12:EB:18:38:E2:59:BA:E0:0D:37:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/458d08ae-db95-35c8-a848-dba5242c611e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:27:f4:7a:bf:f1:23:4e:e0:6a:6d:63:de:ad:56:ce:ea:41: 6e:9b:ab:88:b5:40:0c:4c:c1:2c:5b:8b:5b:ec:ad:85:d4:fc: d0:99:27:46:88:44:7d:b5:23:75:62:95:97:ee:6e:34:b8:2a: 50:2c:7a:4a:38:ed:bb:3e:33:e9:64:45:33:7c:e7:fd:02:84: d3:3a:9f:bb:eb:5c:e3:20:ff:85:cf:0f:42:86:e2:32:10:12: 0e:ae:c6:80:33:44:06:d8:36:ae:db:49:22:4e:63:1c:81:27: aa:6e:06:a5:56:3e:ee:c3:4f:60:b5:6c:ad:3a:1d:b5:4c:51: a7:cf:94:f6:bd:d2:94:f7:90:b8:82:f1:da:a7:87:b8:df:db: 2a:96:1d:f0:59:a6:44:fd:7d:26:6c:f1:10:bd:47:80:28:41: a9:42:04:48:45:4a:c0:b7:3d:e4:a3:84:31:d4:03:3e:3b:d6: a9:e4:62:20:73:19:8d:d9:40:32:3f:30:1c:a8:f2:6b:2e:12: ab:64:06:51:9a:61:94:51:e4:80:cd:02:58:82:1a:8e:2e:c4: b9:25:82:0a:86:e9:61:6d:60:e8:c4:aa:e9:5b:7b:14:e8:f5: 67:68:e6:23:24:42:df:42:7b:3c:1e:5e:e0:81:0b:09:67:94: da:86:69:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53MUi9tAI4t5USAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk NGIxNDFhMTgtMTU1NC00M2YwLThkMGYtM2U4NDA5ZTc3ZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5J1JPw1iHL0FYLT6NqqshvRc6MTdI0qpJby ZvMKZ6PnC24xwST5jeJmll7n2t1Sj3xC4hXn2+ZVbpi5VVGcEvTnORpAuZq8jO+N luwjEf71ggpiQZcdRY0nHKnJSim3CYQ+7VLhPRFEKAY5iKKT0jwfn1MQUec49Aog S5NnoJvsWkkWrUqSv2f6yzbodGDbVGGU47LCNg1R1vgBOwNzs1AShzKAUpBZTCIm e0A8xxnO+v3Vz2jFtwvV5RFM0SgvWFR1JkhCIR6z3+5Ur04dwj5hNSMpfGtuISvq jun6tGPdBsvfRC8kREdsyWfMfyHbLFPO76hnzclypRPieLXS5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBZcu2Y8l/toBLrGDjiWbrgDTdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDU4ZDA4YWUtZGI5NS0z NWM4LWE4NDgtZGJhNTI0MmM2MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0n9Hq/8SNO4GptY96tVs7qQW6bq4i1QAxMwSxbi1vsrYXU/NCZJ0aI RH21I3VilZfubjS4KlAseko47bs+M+lkRTN85/0ChNM6n7vrXOMg/4XPD0KG4jIQ Eg6uxoAzRAbYNq7bSSJOYxyBJ6puBqVWPu7DT2C1bK06HbVMUafPlPa90pT3kLiC 8dqnh7jf2yqWHfBZpkT9fSZs8RC9R4AoQalCBEhFSsC3PeSjhDHUAz471qnkYiBz GY3ZQDI/MByo8msuEqtkBlGaYZRR5IDNAliCGo4uxLklggqG6WFtYOjEqulbexTo 9Wdo5iMkQt9CezweXuCBCwlnlNqGaZE= -----END CERTIFICATE-----Generated at Wed Sep 23 15:33:20 2026 by rpki-client