$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/99ea3585-6244-37b0-a389-c797f3d06eb0.roa File: 99ea3585-6244-37b0-a389-c797f3d06eb0.roa (raw, json) Hash identifier: YUAVYCyoEVIRo4Gf/rrZKBXEiPpu+jmchZJb5fdADTU= Subject key identifier: 09:F1:F1:01:FA:6D:D1:EE:C2:C7:06:E6:87:E1:12:88:F2:37:16:5B Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D703FEA5FBD444AD6A98B4B40 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/99ea3585-6244-37b0-a389-c797f3d06eb0.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 54113 IP address blocks: 131.125.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:ea:5f:bd:44:4a:d6:a9:8b:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=cda87399-d008-4e7f-a4e1-7ed3f785ce7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f3:ac:3e:66:14:f4:a1:9c:ad:41:00:62:7b: e0:fb:ba:1c:aa:ef:c5:d3:9a:6d:2e:a5:78:c0:69: 66:08:41:61:3c:d4:1c:65:7c:df:4e:0c:25:34:5d: f7:ab:1b:93:fb:ea:ac:45:1a:62:1b:94:aa:dd:c4: 80:7a:56:57:dd:35:b7:14:7a:29:74:ed:7c:34:c8: 23:80:58:71:e8:06:ed:9f:5a:1e:8e:13:b5:02:11: a8:ad:b7:5b:30:ac:da:19:71:39:c1:1b:8e:e0:9a: c6:d4:9e:53:c8:65:f3:a6:49:a2:26:c2:a3:6a:33: ac:1d:ab:0f:43:3f:13:77:dd:93:3d:62:a1:4a:51: ae:76:f5:90:01:46:08:cd:c8:6b:95:c5:84:95:9e: 99:ee:91:7e:68:bc:2b:67:ec:7b:99:6e:06:b3:70: e0:42:2a:e4:46:72:82:d1:4f:58:57:bf:e3:51:86: de:9a:8d:f0:ab:f5:d1:2c:3e:24:02:ac:3a:cd:aa: 99:8a:a1:ea:92:67:11:03:f1:48:98:2c:9e:ce:98: ce:57:a9:06:77:23:d8:f4:91:b9:bd:3a:91:62:20: c0:e9:11:e8:c0:c6:38:3a:0a:72:4b:dd:8f:b9:ab: fd:7d:72:98:f5:ea:b2:5c:2b:3a:90:4b:43:2d:ca: e2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F1:F1:01:FA:6D:D1:EE:C2:C7:06:E6:87:E1:12:88:F2:37:16:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/99ea3585-6244-37b0-a389-c797f3d06eb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b6:ce:50:70:68:af:e1:cc:2a:42:91:b7:46:9c:c9:01:d5: 27:ed:10:7e:7a:98:17:f8:67:aa:69:01:8e:f9:d8:81:94:5a: 22:79:a1:11:de:ca:a6:5d:2b:09:ea:32:5d:8c:21:f5:41:65: 54:95:a0:59:5c:22:96:5e:1c:a0:65:83:71:8a:63:34:15:42: 50:41:45:65:6b:e6:69:4d:be:67:b7:09:73:01:5d:a3:80:b5: f2:ce:90:9a:ad:12:c6:02:cf:d2:d9:60:fc:11:91:33:18:e8: 23:e4:b6:60:ee:5f:06:23:13:9e:e7:75:49:f2:f1:88:cf:96: 50:fa:4e:90:15:24:00:60:7c:bd:eb:f9:98:52:4e:78:26:64: 67:99:6e:9d:f4:39:da:df:12:a1:79:c7:3f:8e:f7:be:12:94: b2:11:39:56:cb:fc:f1:3a:d1:09:7d:54:27:06:56:1c:8c:90: cf:07:16:d4:49:62:7c:fa:8a:52:78:ad:bb:c4:3a:c6:df:88: 28:fd:cf:af:d3:f3:63:68:68:72:7e:71:34:2e:bb:79:0e:c3: 83:db:58:94:88:28:8b:5d:6e:ee:ce:f5:56:b5:3e:12:cc:a0: 0f:66:3b:c4:2b:62:12:c5:84:e7:a8:f1:46:fb:e4:12:fe:43: 67:a5:02:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+pfvURK1qmLS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk Y2RhODczOTktZDAwOC00ZTdmLWE0ZTEtN2VkM2Y3ODVjZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfOsPmYU9KGcrUEAYnvg+7ocqu/F05ptLqV4 wGlmCEFhPNQcZXzfTgwlNF33qxuT++qsRRpiG5Sq3cSAelZX3TW3FHopdO18NMgj gFhx6Abtn1oejhO1AhGorbdbMKzaGXE5wRuO4JrG1J5TyGXzpkmiJsKjajOsHasP Qz8Td92TPWKhSlGudvWQAUYIzchrlcWElZ6Z7pF+aLwrZ+x7mW4Gs3DgQirkRnKC 0U9YV7/jUYbemo3wq/XRLD4kAqw6zaqZiqHqkmcRA/FImCyezpjOV6kGdyPY9JG5 vTqRYiDA6RHowMY4OgpyS92Puav9fXKY9eqyXCs6kEtDLcrijwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnx8QH6bdHuwscG5ofhEojyNxZbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTllYTM1ODUtNjI0NC0z N2IwLWEzODktYzc5N2YzZDA2ZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg314MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACm2zlBwaK/hzCpCkbdGnMkB1SftEH56mBf4Z6ppAY752IGUWiJ5oRHe yqZdKwnqMl2MIfVBZVSVoFlcIpZeHKBlg3GKYzQVQlBBRWVr5mlNvme3CXMBXaOA tfLOkJqtEsYCz9LZYPwRkTMY6CPktmDuXwYjE57ndUny8YjPllD6TpAVJABgfL3r +ZhSTngmZGeZbp30OdrfEqF5xz+O974SlLIROVbL/PE60Ql9VCcGVhyMkM8HFtRJ Ynz6ilJ4rbvEOsbfiCj9z6/T82NoaHJ+cTQuu3kOw4PbWJSIKItdbu7O9Va1PhLM oA9mO8QrYhLFhOeo8Ub75BL+Q2elAow= -----END CERTIFICATE-----Generated at Fri Apr 17 12:36:57 2026 by rpki-client