$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/489ae89c-31d7-33ba-b705-59c12d52cb71.roa File: 489ae89c-31d7-33ba-b705-59c12d52cb71.roa (raw, json) Hash identifier: tc/30e4vWHmD8otmcj9G6Bu2yB5aYN/sqdWbIERm3v0= Subject key identifier: 52:9F:90:00:7C:3C:CF:0E:7E:04:55:C2:25:0D:88:62:56:2F:82:BB Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF2E7756B0F00811DC8805600 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/489ae89c-31d7-33ba-b705-59c12d52cb71.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:75:6b:0f:00:81:1d:c8:80:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=29f54a08-578c-4ecf-a5f6-29f7125acb15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2c:9b:47:eb:39:57:21:14:83:ef:29:d3:63: 62:18:58:ae:91:a5:19:4b:28:fb:bb:6a:2a:13:74: f0:3a:72:38:11:dc:b8:49:96:2c:44:89:98:c2:84: c0:bc:99:1b:3a:a4:94:c4:3c:fa:b0:b5:40:10:ef: 6c:9a:42:08:00:dd:a0:ce:8d:35:60:be:d9:d3:a9: 30:a3:e6:24:8b:d5:1a:37:d9:01:6b:56:b0:53:92: 55:3a:da:46:c5:52:38:a0:57:1d:f6:58:43:73:8d: fc:8b:fe:14:1f:84:de:1a:93:eb:02:9e:9b:e4:99: 10:c9:96:6b:f4:41:13:14:06:3c:d9:61:da:e9:fe: 0e:07:9e:86:17:2b:7f:e3:cc:fc:21:d2:33:e0:e2: b3:12:97:3a:cc:1a:2c:7e:5d:07:30:e7:07:b0:ba: a7:0e:6a:a7:33:0e:af:56:be:89:94:4b:f6:7a:ed: 50:f0:8c:ec:db:d2:66:e8:c9:5c:ab:d1:85:2b:2b: 8a:6a:51:38:62:1c:51:1b:9f:a7:3e:04:38:a8:db: 90:a8:e6:23:fa:87:07:40:2a:3a:dc:20:42:6a:30: 84:19:ee:6f:6f:f3:7a:26:07:8e:08:a3:17:cb:e0: b9:92:78:59:a7:8b:65:4d:82:c7:59:70:c2:36:cd: 71:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9F:90:00:7C:3C:CF:0E:7E:04:55:C2:25:0D:88:62:56:2F:82:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/489ae89c-31d7-33ba-b705-59c12d52cb71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:2c:0a:ed:eb:d6:a7:6b:a3:7d:3c:d1:f0:b2:64:ec:1f:c4: d3:ce:c4:4f:87:bc:8e:2a:f4:28:da:78:fa:48:53:90:99:a3: 45:68:f2:72:69:f5:39:c5:2a:1f:a7:48:d5:e0:d8:c2:36:e9: 0f:ac:3c:77:33:63:37:c4:2a:e9:3a:4b:90:b7:13:20:d8:b6: 83:a5:50:8c:0b:15:4e:34:51:10:bd:cc:d9:9e:e7:44:9a:e3: d5:cb:4f:bd:9a:34:03:55:05:a2:ef:48:6c:b1:10:3d:a9:dd: 50:e6:29:33:af:5e:d5:a0:ae:bd:f0:10:7e:0d:e6:2d:23:15: c5:77:c7:07:61:fe:6e:d1:de:e6:4d:3a:a0:d8:ab:3a:ad:7e: 86:3b:29:08:9f:ff:b4:7f:e2:af:ca:91:5b:26:28:d3:68:30: 73:7e:a4:fe:c8:31:e4:33:5e:84:67:dd:74:d7:af:45:98:35: a0:21:aa:59:52:82:6e:38:2d:a0:d2:60:29:b6:ca:d3:11:52: 93:ea:b9:af:74:52:49:91:2b:42:25:9f:56:5f:eb:00:91:10: c6:79:4e:44:cf:27:16:5a:a0:d0:37:75:40:2e:1a:b2:56:30: 0c:39:a1:28:9c:6a:2e:25:3c:1e:cc:da:cb:a3:13:36:21:29: 60:44:09:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53VrDwCBHciAVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk MjlmNTRhMDgtNTc4Yy00ZWNmLWE1ZjYtMjlmNzEyNWFjYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iybR+s5VyEUg+8p02NiGFiukaUZSyj7u2oq E3TwOnI4Edy4SZYsRImYwoTAvJkbOqSUxDz6sLVAEO9smkIIAN2gzo01YL7Z06kw o+Yki9UaN9kBa1awU5JVOtpGxVI4oFcd9lhDc438i/4UH4TeGpPrAp6b5JkQyZZr 9EETFAY82WHa6f4OB56GFyt/48z8IdIz4OKzEpc6zBosfl0HMOcHsLqnDmqnMw6v Vr6JlEv2eu1Q8Izs29Jm6Mlcq9GFKyuKalE4YhxRG5+nPgQ4qNuQqOYj+ocHQCo6 3CBCajCEGe5vb/N6JgeOCKMXy+C5knhZp4tlTYLHWXDCNs1xpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKfkAB8PM8OfgRVwiUNiGJWL4K7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDg5YWU4OWMtMzFkNy0z M2JhLWI3MDUtNTljMTJkNTJjYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg319MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUsCu3r1qdro3080fCyZOwfxNPOxE+HvI4q9CjaePpIU5CZo0Vo8nJp 9TnFKh+nSNXg2MI26Q+sPHczYzfEKuk6S5C3EyDYtoOlUIwLFU40URC9zNme50Sa 49XLT72aNANVBaLvSGyxED2p3VDmKTOvXtWgrr3wEH4N5i0jFcV3xwdh/m7R3uZN OqDYqzqtfoY7KQif/7R/4q/KkVsmKNNoMHN+pP7IMeQzXoRn3XTXr0WYNaAhqllS gm44LaDSYCm2ytMRUpPqua90UkmRK0Iln1Zf6wCREMZ5TkTPJxZaoNA3dUAuGrJW MAw5oSicai4lPB7M2sujEzYhKWBECbQ= -----END CERTIFICATE-----Generated at Mon Sep 21 08:02:29 2026 by rpki-client