$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/914009a0-531c-33eb-b2c6-005e1809d476.roa File: 914009a0-531c-33eb-b2c6-005e1809d476.roa (raw, json) Hash identifier: n6jrLq6A4mx/9M+QSNpL0IamWtTFbVrmeAgCq2FWzJ0= Subject key identifier: A1:3A:09:80:2B:44:3E:36:F9:79:48:73:05:F6:E7:3C:AD:87:A4:6C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D703FEB2B0C1BB5D588353580 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/914009a0-531c-33eb-b2c6-005e1809d476.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 54113 IP address blocks: 131.125.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:eb:2b:0c:1b:b5:d5:88:35:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=3fdaa5da-0236-4599-8a4c-cb0806e4e604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0a:2e:bf:a3:26:9e:cb:8b:2e:05:49:25:f4: 30:5c:9a:3a:1a:d7:cc:8b:a1:e5:8f:6f:05:96:96: 19:1e:aa:b1:f7:3e:bc:10:67:f9:36:9c:22:82:c5: f0:b0:cc:8b:ce:9d:c5:20:10:f3:c6:e1:cf:c8:d5: 54:83:a6:6a:0e:9c:fe:a6:1a:8a:d4:3d:1d:db:c8: 9a:b9:d3:c3:56:61:41:87:db:2f:b5:96:52:7a:8e: 90:dc:07:80:b9:53:08:80:b0:69:fb:0f:f8:81:12: 28:a7:de:a4:8a:59:32:fd:86:ea:de:b6:30:66:87: c1:3f:74:87:cb:5d:e3:a4:b9:61:ad:4c:ba:a3:b8: c5:07:65:f9:9b:f9:7c:c1:1c:f3:e7:d2:aa:1e:6a: a7:53:05:08:84:59:4e:3e:dd:8d:92:8f:d6:fc:88: 16:7e:f0:96:4f:5a:39:09:35:df:41:15:58:55:47: 1b:38:21:54:2f:f0:0f:2a:7b:cb:13:f0:92:26:61: 42:66:af:fd:bb:d1:a4:45:e2:d3:79:58:f9:38:25: 87:b7:53:9a:01:98:af:31:36:a8:42:29:80:f4:ba: d6:d9:a8:a4:0e:10:f1:76:39:bc:56:d9:39:71:64: b1:dd:23:b9:d2:ed:63:fe:46:84:82:fa:59:01:35: 9d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3A:09:80:2B:44:3E:36:F9:79:48:73:05:F6:E7:3C:AD:87:A4:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/914009a0-531c-33eb-b2c6-005e1809d476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5c:6e:fd:22:94:54:9c:0f:d3:16:68:71:76:04:10:61:df: 7e:a3:e4:35:87:3e:ff:80:d6:66:89:cc:e4:c7:60:93:59:a4: d3:f8:38:c6:c8:61:b5:72:c0:16:c1:94:55:ce:ba:56:f2:3a: 61:3d:42:48:00:29:61:db:5c:94:a6:3d:74:13:7b:5d:df:ba: 32:20:35:3d:bb:4c:55:57:1f:7c:9b:f2:11:f5:9e:ef:f8:0c: 14:10:d2:f7:1f:fb:14:11:c8:e0:ea:17:f4:fc:59:e3:b7:d6: ed:31:5b:9d:30:2d:8a:23:4c:03:b3:b8:ab:d5:9f:07:c5:49: fe:57:4a:de:62:31:03:66:5e:c0:fa:4a:13:dc:2e:5e:52:4f: e0:78:3f:5e:9b:7f:cf:0a:fe:7c:3e:d5:e1:9f:26:b8:4f:d6: 2a:2e:4a:27:41:4a:95:d0:b6:01:f5:6f:28:71:a2:13:d3:20: ae:4f:aa:58:05:ab:db:3e:92:df:8a:df:52:a8:41:cf:c4:13: 0f:55:0c:7d:57:30:71:f6:3d:ca:3c:46:14:e1:ec:6d:bb:fe: 52:6c:0b:e5:cd:83:04:a9:40:b8:b8:74:dc:df:ae:53:09:9a: fe:7b:bd:db:52:db:37:fe:01:f9:9a:c4:18:0c:d5:5c:df:a1: 6f:3d:82:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+srDBu11Yg1NYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk M2ZkYWE1ZGEtMDIzNi00NTk5LThhNGMtY2IwODA2ZTRlNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgouv6MmnsuLLgVJJfQwXJo6GtfMi6Hlj28F lpYZHqqx9z68EGf5NpwigsXwsMyLzp3FIBDzxuHPyNVUg6ZqDpz+phqK1D0d28ia udPDVmFBh9svtZZSeo6Q3AeAuVMIgLBp+w/4gRIop96kilky/Ybq3rYwZofBP3SH y13jpLlhrUy6o7jFB2X5m/l8wRzz59KqHmqnUwUIhFlOPt2Nko/W/IgWfvCWT1o5 CTXfQRVYVUcbOCFUL/APKnvLE/CSJmFCZq/9u9GkReLTeVj5OCWHt1OaAZivMTao QimA9LrW2aikDhDxdjm8Vtk5cWSx3SO50u1j/kaEgvpZATWdjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKE6CYArRD42+XlIcwX25zyth6RsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTE0MDA5YTAtNTMxYy0z M2ViLWIyYzYtMDA1ZTE4MDlkNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhcbv0ilFScD9MWaHF2BBBh336j5DWHPv+A1maJzOTHYJNZpNP4OMbI YbVywBbBlFXOulbyOmE9QkgAKWHbXJSmPXQTe13fujIgNT27TFVXH3yb8hH1nu/4 DBQQ0vcf+xQRyODqF/T8WeO31u0xW50wLYojTAOzuKvVnwfFSf5XSt5iMQNmXsD6 ShPcLl5ST+B4P16bf88K/nw+1eGfJrhP1iouSidBSpXQtgH1byhxohPTIK5PqlgF q9s+kt+K31KoQc/EEw9VDH1XMHH2Pco8RhTh7G27/lJsC+XNgwSpQLi4dNzfrlMJ mv57vdtS2zf+AfmaxBgM1VzfoW89gl0= -----END CERTIFICATE-----Generated at Fri Apr 17 12:35:55 2026 by rpki-client