$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/458d08ae-db95-35c8-a848-dba5242c611e.roa File: 458d08ae-db95-35c8-a848-dba5242c611e.roa (raw, json) Hash identifier: K/vvEliVWh7D6Sf37RFR8CATHRzeh2ogWylwDPDQZiw= Subject key identifier: E5:F5:8D:21:61:56:16:C0:DF:5E:52:71:9C:14:A3:A9:51:D3:3F:2C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D703FEA2F8394E96EDDBD6980 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/458d08ae-db95-35c8-a848-dba5242c611e.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 54113 IP address blocks: 131.125.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:ea:2f:83:94:e9:6e:dd:bd:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=cb986129-391c-416e-b24c-a605fdf69d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:70:ad:df:3d:a3:0c:c9:61:76:67:aa:db:1e: 46:1e:97:35:56:ad:f9:10:39:17:2d:fb:59:af:e1: 8b:fe:c8:38:1d:51:ca:41:62:fe:23:da:5a:08:08: b9:da:15:bd:05:c4:6b:e3:d0:30:58:fc:6c:b7:2b: 01:6c:1a:98:cc:12:63:a0:5d:e3:10:1e:d7:e2:ec: 88:09:09:cb:b8:04:3f:64:f4:17:27:d0:08:43:ee: f9:26:f4:37:53:db:e1:87:15:52:ea:8c:1b:5d:af: 0a:6b:39:59:8f:dc:77:2c:34:a0:b7:62:84:e9:2b: c4:87:c9:6a:ea:b1:f7:61:3c:5c:46:7a:45:a4:dd: 26:17:51:7c:52:46:10:11:5c:51:3a:31:4b:73:07: 23:00:4d:4f:ee:dc:bb:ee:de:ba:78:0d:39:73:71: 48:d5:f4:9c:55:5c:e3:9b:dc:c0:d8:19:96:4c:0a: e9:d2:f8:5a:67:99:fd:e2:93:57:cf:e2:ac:6c:88: 63:b7:be:36:8c:4e:ac:dd:07:92:d3:3b:71:9f:12: 23:1f:22:9b:75:78:ef:55:f7:59:77:59:ea:e3:08: e0:d2:30:0a:32:34:08:11:7b:1c:27:d2:6c:51:77: 30:51:b8:67:44:3d:11:b4:b3:57:02:9d:00:6d:54: 6d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F5:8D:21:61:56:16:C0:DF:5E:52:71:9C:14:A3:A9:51:D3:3F:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/458d08ae-db95-35c8-a848-dba5242c611e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:6c:3f:40:bb:f7:8d:bf:c1:a8:76:29:87:f3:9b:c1:9d:91: 22:c9:2c:cf:56:ec:4b:b0:7d:9b:45:dd:52:e4:24:61:1f:e9: ea:37:f4:7e:ca:c6:32:5c:42:ee:2f:db:0b:68:cb:f7:fb:b2: 71:40:f8:fb:67:31:c7:c7:48:c3:0c:55:db:3a:06:b6:22:f0: 6c:b4:ca:83:2f:da:2d:3b:81:82:4e:57:a0:6a:08:cb:97:f3: 23:e5:8c:43:9c:71:f6:70:28:2d:0b:e0:5b:78:78:39:13:8d: 2e:86:c6:55:28:bc:86:5b:a9:fb:03:a9:2a:ad:9b:a1:60:0b: f8:8b:23:e6:54:f2:28:24:25:86:65:ba:0f:92:69:98:4d:d1: fb:19:60:9d:d5:63:5b:7c:82:b2:04:8d:3a:aa:f4:79:4b:b1: 4c:e6:38:34:54:27:87:56:c0:f9:69:31:fc:28:df:47:c3:d0: f2:08:c6:b2:43:e5:b3:fa:d8:ce:e9:ec:56:0a:5c:97:b9:82: df:5f:74:58:33:1b:81:8b:59:5b:4d:1a:85:9c:ac:69:8c:44: 21:fd:42:2a:6f:4a:c9:c5:2a:8b:7b:02:c2:08:1d:e2:93:63: 7e:c8:79:26:ef:7c:81:bc:44:05:d0:23:25:21:69:a1:77:18: 5b:ae:b7:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+ovg5Tpbt29aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk Y2I5ODYxMjktMzkxYy00MTZlLWIyNGMtYTYwNWZkZjY5ZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXCt3z2jDMlhdmeq2x5GHpc1Vq35EDkXLftZ r+GL/sg4HVHKQWL+I9paCAi52hW9BcRr49AwWPxstysBbBqYzBJjoF3jEB7X4uyI CQnLuAQ/ZPQXJ9AIQ+75JvQ3U9vhhxVS6owbXa8KazlZj9x3LDSgt2KE6SvEh8lq 6rH3YTxcRnpFpN0mF1F8UkYQEVxROjFLcwcjAE1P7ty77t66eA05c3FI1fScVVzj m9zA2BmWTArp0vhaZ5n94pNXz+KsbIhjt742jE6s3QeS0ztxnxIjHyKbdXjvVfdZ d1nq4wjg0jAKMjQIEXscJ9JsUXcwUbhnRD0RtLNXAp0AbVRt2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOX1jSFhVhbA315ScZwUo6lR0z8sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDU4ZDA4YWUtZGI5NS0z NWM4LWE4NDgtZGJhNTI0MmM2MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdsP0C7942/wah2KYfzm8GdkSLJLM9W7EuwfZtF3VLkJGEf6eo39H7K xjJcQu4v2wtoy/f7snFA+PtnMcfHSMMMVds6BrYi8Gy0yoMv2i07gYJOV6BqCMuX 8yPljEOccfZwKC0L4Ft4eDkTjS6GxlUovIZbqfsDqSqtm6FgC/iLI+ZU8igkJYZl ug+SaZhN0fsZYJ3VY1t8grIEjTqq9HlLsUzmODRUJ4dWwPlpMfwo30fD0PIIxrJD 5bP62M7p7FYKXJe5gt9fdFgzG4GLWVtNGoWcrGmMRCH9QipvSsnFKot7AsIIHeKT Y37IeSbvfIG8RAXQIyUhaaF3GFuutxk= -----END CERTIFICATE-----Generated at Fri Apr 17 09:45:59 2026 by rpki-client