$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/99ea3585-6244-37b0-a389-c797f3d06eb0.roa File: 99ea3585-6244-37b0-a389-c797f3d06eb0.roa (raw, json) Hash identifier: SVWpF74UwQBSo1JEgB9oOzXkt98mAnTxMgu6jZcBqZg= Subject key identifier: D3:E3:BC:24:73:8E:34:75:44:F9:A8:1A:CF:C7:ED:08:A8:13:E8:92 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF2E77343284C0BD47885B7A0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/99ea3585-6244-37b0-a389-c797f3d06eb0.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:73:43:28:4c:0b:d4:78:85:b7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=91b8483d-9f64-4d00-a7d7-8a0195a28b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ab:22:cf:b3:42:5c:0c:aa:bd:9e:25:95:e3: 9e:8e:ef:ee:e2:d2:8f:fb:c3:7b:8a:07:1c:ea:d2: d4:a0:07:a9:dd:a8:7c:c2:98:14:d4:b9:c8:ef:67: 73:f6:24:ea:6c:0d:77:46:6b:ab:17:47:d9:e3:67: cd:93:60:da:99:16:3c:61:54:e4:ba:e5:1b:bc:6b: 25:74:04:6a:b9:cf:22:df:ef:06:6a:1d:e9:1c:d2: f7:88:51:7a:b5:23:e1:6b:35:2a:ab:32:70:7e:f6: 25:a0:a1:9b:8d:1e:a0:55:cd:08:18:19:7e:3e:ae: 1e:b5:f7:d6:02:b4:16:84:47:a8:b7:79:50:e0:71: f1:1e:58:53:f1:8e:f9:7c:b4:5c:05:1a:2e:5c:ea: 22:b9:3c:9b:c2:69:19:c8:4d:50:80:55:93:2f:05: 1b:4e:17:6e:f1:be:33:9f:6b:bc:f2:ec:98:3e:35: bd:4d:0c:ec:4f:22:c3:5b:80:a4:e0:1a:7e:4b:8d: 2e:df:ff:24:e0:98:2d:bb:f9:3a:d8:c3:2e:da:3c: 11:5f:ff:48:50:1c:a2:ce:63:3f:a8:7a:00:26:5a: 37:3a:f3:86:c1:02:39:46:a0:18:16:dc:ac:2b:c6: ee:13:03:70:dc:5d:b3:fc:e7:c3:2b:94:d8:ea:a5: 5a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E3:BC:24:73:8E:34:75:44:F9:A8:1A:CF:C7:ED:08:A8:13:E8:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/99ea3585-6244-37b0-a389-c797f3d06eb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:63:2d:0d:ef:17:e2:2e:46:30:fb:9c:6c:4b:d3:b7:88:d6: d5:a8:de:03:f8:ca:28:e7:bb:c8:dc:4c:a8:b6:b6:ee:84:1d: 1f:0b:9f:44:cb:e0:b7:6b:0b:84:72:17:ea:fb:df:59:00:42: bf:f4:16:ac:8c:33:bc:7a:ae:42:7b:5f:2c:58:1f:f2:fa:d2: 39:e5:77:22:ce:08:95:07:c5:23:aa:5f:d3:3c:dc:9b:b3:f7: d3:47:80:82:4d:fd:58:30:c1:0c:98:25:50:67:4a:f4:54:ad: 86:48:2f:c3:59:b8:15:2d:d1:39:4d:b0:7c:9f:85:c6:21:bf: 7a:64:50:dd:54:94:2f:04:ea:c3:80:9e:38:bb:97:88:ec:37: 43:76:40:c9:af:2f:8b:68:30:dc:f3:68:6f:e6:e1:2a:56:c6: 1d:41:19:c0:eb:bd:ee:b7:f8:65:f1:62:23:8f:a5:8c:03:14: b1:0d:e2:75:ec:be:fc:2d:76:85:26:2c:ff:10:1c:7d:57:fd: fa:68:2f:2a:c9:90:0c:b7:5e:29:6d:e6:d8:13:6f:08:2d:0d: 94:01:33:f0:69:1d:8c:2c:8a:43:13:29:2c:ef:8c:a3:a7:1c: af:a1:b5:b5:01:9c:4d:69:fd:cb:8d:33:9a:28:1b:00:19:87: 19:4a:d7:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53NDKEwL1HiFt6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk OTFiODQ4M2QtOWY2NC00ZDAwLWE3ZDctOGEwMTk1YTI4YjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqsiz7NCXAyqvZ4lleOeju/u4tKP+8N7igcc 6tLUoAep3ah8wpgU1LnI72dz9iTqbA13RmurF0fZ42fNk2DamRY8YVTkuuUbvGsl dARquc8i3+8Gah3pHNL3iFF6tSPhazUqqzJwfvYloKGbjR6gVc0IGBl+Pq4etffW ArQWhEeot3lQ4HHxHlhT8Y75fLRcBRouXOoiuTybwmkZyE1QgFWTLwUbThdu8b4z n2u88uyYPjW9TQzsTyLDW4Ck4Bp+S40u3/8k4Jgtu/k62MMu2jwRX/9IUByizmM/ qHoAJlo3OvOGwQI5RqAYFtysK8buEwNw3F2z/OfDK5TY6qVaeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPjvCRzjjR1RPmoGs/H7QioE+iSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTllYTM1ODUtNjI0NC0z N2IwLWEzODktYzc5N2YzZDA2ZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg314MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVjLQ3vF+IuRjD7nGxL07eI1tWo3gP4yijnu8jcTKi2tu6EHR8Ln0TL 4LdrC4RyF+r731kAQr/0FqyMM7x6rkJ7XyxYH/L60jnldyLOCJUHxSOqX9M83Juz 99NHgIJN/VgwwQyYJVBnSvRUrYZIL8NZuBUt0TlNsHyfhcYhv3pkUN1UlC8E6sOA nji7l4jsN0N2QMmvL4toMNzzaG/m4SpWxh1BGcDrve63+GXxYiOPpYwDFLEN4nXs vvwtdoUmLP8QHH1X/fpoLyrJkAy3Xilt5tgTbwgtDZQBM/BpHYwsikMTKSzvjKOn HK+htbUBnE1p/cuNM5ooGwAZhxlK1zQ= -----END CERTIFICATE-----Generated at Tue Sep 22 01:24:38 2026 by rpki-client