$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5cf028e7-a8b9-3879-bce4-cb726d9063c8.roa File: 5cf028e7-a8b9-3879-bce4-cb726d9063c8.roa (raw, json) Hash identifier: 1LbZyMl4I0TNzRu+62HfYdVdbYr02Sp6VY7uP47VYJM= Subject key identifier: 87:91:44:B1:CF:FA:6D:41:E7:97:8B:B8:7A:59:1D:B6:44:6B:68:B1 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB02D074D710576ABA6C71F80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5cf028e7-a8b9-3879-bce4-cb726d9063c8.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 54113 IP address blocks: 131.125.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:07:4d:71:05:76:ab:a6:c7:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=edffb257-b976-4414-a88c-01deebbdef83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4c:9b:5b:c7:f9:7c:c1:e3:9d:cc:d6:ab:1d: cc:09:a7:1e:3e:f9:ba:8d:40:f9:d4:69:ec:15:f7: 56:c9:73:76:45:5b:ac:96:dd:fc:4f:41:5a:16:9e: 46:9a:be:93:34:34:a6:96:0c:28:2e:f8:fd:59:49: 04:e8:e2:87:33:52:c1:dc:25:15:0d:8d:d6:4d:db: 71:13:fe:04:ac:95:de:85:17:8c:45:75:70:fc:aa: da:15:4f:34:00:f6:73:75:21:96:92:de:5e:c3:bb: b4:dd:b5:2b:38:e6:ab:57:06:ea:75:d5:bc:20:27: 20:65:0b:ba:9d:2e:27:5f:0b:98:dd:16:ba:2d:75: 86:12:a6:ec:53:15:d4:17:a0:2d:ef:43:56:19:7b: 13:5e:92:21:a5:19:68:a0:41:a5:69:e5:1f:0f:6d: af:95:1c:c1:ad:3d:f7:5d:81:14:f1:66:06:fd:59: c1:83:8e:05:0d:94:2a:6c:99:aa:23:9a:ec:c7:43: 7f:87:7d:8c:50:d7:0d:71:ca:e0:ca:a8:99:70:d6: aa:3b:ee:00:a0:28:d3:d9:b8:85:af:38:9b:3e:06: ef:32:e5:7d:56:2d:8a:b5:cf:2c:7e:7f:21:56:98: 79:73:d0:cb:aa:3e:cc:ec:80:df:dc:84:07:93:2f: a5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:91:44:B1:CF:FA:6D:41:E7:97:8B:B8:7A:59:1D:B6:44:6B:68:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5cf028e7-a8b9-3879-bce4-cb726d9063c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:e4:18:b4:25:7b:0d:6c:7b:05:81:c2:7f:df:85:e1:bf:06: 5c:23:a7:f4:6a:44:c6:4a:3d:f6:ae:a6:2a:9c:c2:c0:94:c6: f2:73:4c:21:36:33:87:30:24:59:eb:4a:ac:17:f3:bd:e5:5e: 7f:d1:55:58:b6:40:29:c4:b5:f9:6b:03:01:45:62:47:cf:80: 61:6f:28:53:aa:5c:67:c6:2d:05:4c:b3:f0:83:9f:72:4b:f2: 09:6e:e6:88:ae:28:b1:09:dc:87:50:25:ab:7b:bf:be:cd:43: d6:62:e3:1d:cd:54:cf:8c:de:96:31:1b:77:3b:87:28:7f:a1: 86:ef:e8:31:75:3c:dd:24:00:37:2b:ce:12:37:10:e6:62:ae: 98:30:8f:1f:16:ee:a8:c2:94:31:06:af:85:de:f7:88:3e:9e: b9:77:db:55:21:df:bf:db:2b:0e:a8:db:e2:b0:8e:b0:90:c0: 80:a1:d0:dc:dd:ac:1a:73:4b:66:ca:ae:51:23:27:4f:3e:50: 96:66:18:7a:3f:b8:04:67:58:74:d0:d3:32:9c:15:e7:bb:3d: fc:be:08:cd:43:d1:bb:c4:85:60:ec:6a:68:a2:8c:bb:a1:6a: 9a:05:9e:bd:49:b2:c8:0f:e0:99:f4:02:3d:f8:cc:68:2a:03: de:d7:04:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQdNcQV2q6bHH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk ZWRmZmIyNTctYjk3Ni00NDE0LWE4OGMtMDFkZWViYmRlZjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0ybW8f5fMHjnczWqx3MCacePvm6jUD51Gns FfdWyXN2RVuslt38T0FaFp5Gmr6TNDSmlgwoLvj9WUkE6OKHM1LB3CUVDY3WTdtx E/4ErJXehReMRXVw/KraFU80APZzdSGWkt5ew7u03bUrOOarVwbqddW8ICcgZQu6 nS4nXwuY3Ra6LXWGEqbsUxXUF6At70NWGXsTXpIhpRlooEGlaeUfD22vlRzBrT33 XYEU8WYG/VnBg44FDZQqbJmqI5rsx0N/h32MUNcNccrgyqiZcNaqO+4AoCjT2biF rzibPgbvMuV9Vi2Ktc8sfn8hVph5c9DLqj7M7IDf3IQHky+llwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeRRLHP+m1B55eLuHpZHbZEa2ixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNWNmMDI4ZTctYThiOS0z ODc5LWJjZTQtY2I3MjZkOTA2M2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/kGLQlew1sewWBwn/fheG/Blwjp/RqRMZKPfaupiqcwsCUxvJzTCE2 M4cwJFnrSqwX873lXn/RVVi2QCnEtflrAwFFYkfPgGFvKFOqXGfGLQVMs/CDn3JL 8glu5oiuKLEJ3IdQJat7v77NQ9Zi4x3NVM+M3pYxG3c7hyh/oYbv6DF1PN0kADcr zhI3EOZirpgwjx8W7qjClDEGr4Xe94g+nrl321Uh37/bKw6o2+KwjrCQwICh0Nzd rBpzS2bKrlEjJ08+UJZmGHo/uARnWHTQ0zKcFee7Pfy+CM1D0bvEhWDsamiijLuh apoFnr1JssgP4Jn0Aj34zGgqA97XBKE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:12:51 2025 by rpki-client