$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/99ea3585-6244-37b0-a389-c797f3d06eb0.roa File: 99ea3585-6244-37b0-a389-c797f3d06eb0.roa (raw, json) Hash identifier: 3YN6Lh0xKLgDR2TLgK+JBe1QygS+8VP+BW7VvOQSA9E= Subject key identifier: 9C:5B:77:AD:3B:FF:A2:35:F1:A2:F5:AB:33:09:98:91:45:15:D7:9A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB02D04BD82A479EE87CB9580 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/99ea3585-6244-37b0-a389-c797f3d06eb0.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 54113 IP address blocks: 131.125.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:04:bd:82:a4:79:ee:87:cb:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=99bdd2c8-7705-4b88-8976-997c1d8bf06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6c:e2:eb:05:13:22:c0:ce:16:21:d2:06:48: 63:2a:10:47:88:a8:e8:1a:cc:04:4d:37:ef:61:c8: 4b:7f:9c:cc:7e:52:13:32:b5:50:ab:a6:cd:d7:52: dd:91:83:bc:9f:cc:09:83:51:f7:01:db:ed:9d:1b: 2a:4b:85:80:7c:82:0a:55:ab:a3:25:4b:7a:03:7c: 23:58:f2:d0:b3:42:70:6a:84:09:3a:89:6f:ec:c0: 09:6a:3e:dd:f8:65:c2:5b:1f:07:06:cf:61:15:72: f7:31:62:b3:b1:84:db:52:29:18:61:f0:91:03:9e: dc:d1:86:99:f3:aa:8c:c7:d4:36:1f:48:dd:50:5a: ef:8b:cc:a2:52:24:04:30:9d:93:bb:be:c1:ad:8a: 36:16:13:2d:6f:85:6c:17:d2:45:57:dd:8c:a1:d3: 0b:0f:11:66:d5:1b:ca:39:5b:0d:76:de:56:74:14: 5d:3e:b8:77:18:46:58:90:72:10:4e:a3:8b:ba:a4: 85:ce:0c:e0:15:71:10:ca:01:de:f7:7b:cb:5d:1f: d8:92:0e:c4:3f:8d:12:74:ce:a9:10:d5:57:c6:a4: 7b:75:ab:d2:e1:88:45:2a:09:7e:33:74:27:25:ef: c3:ee:9f:75:55:83:ce:cb:cc:8e:22:51:6b:9a:7b: bd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5B:77:AD:3B:FF:A2:35:F1:A2:F5:AB:33:09:98:91:45:15:D7:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/99ea3585-6244-37b0-a389-c797f3d06eb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:88:40:55:4f:af:91:65:b4:41:e7:90:81:17:7c:3f:2b:fd: bd:92:34:87:57:62:2e:05:b8:89:85:59:1d:53:64:d4:1d:49: 72:87:b4:06:cc:38:6b:31:bd:a6:ad:ca:e3:a5:d4:02:cf:49: 43:be:2f:3d:a4:30:2d:7c:e8:e2:b1:4c:ee:39:34:99:a1:e8: 60:af:ce:2f:79:00:cf:b6:01:c5:05:d2:fe:d8:7d:43:63:a0: 1c:b8:ae:b3:a4:f6:65:2a:3a:9f:60:0f:3a:b6:e5:5c:db:62: 37:8b:ee:8b:43:db:9b:07:ad:ee:09:77:bd:a9:8a:89:8b:b3: 5c:1e:c5:e9:06:52:16:50:fa:bc:90:18:fd:8f:cf:bc:17:10: 5d:19:f5:f8:fd:db:6c:cf:2a:5d:a5:7b:2c:4d:2b:9c:0d:be: c0:f0:e1:da:bb:bd:79:c7:6a:ad:3c:fb:c6:02:12:80:45:bf: cc:b0:d0:28:5c:54:c2:65:d7:c9:ba:d0:2b:7b:78:d5:9b:23: ca:22:ce:b6:af:82:f7:7a:02:ee:f0:1e:a3:4c:46:fb:0c:bc: 4c:f0:cc:34:41:86:d3:85:99:59:a4:46:12:e0:57:b3:f3:3d: f7:e4:ce:0f:5a:ef:c8:ec:13:22:a7:1d:01:31:8f:b1:41:c8: 01:be:64:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQS9gqR57ofLlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk OTliZGQyYzgtNzcwNS00Yjg4LTg5NzYtOTk3YzFkOGJmMDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2zi6wUTIsDOFiHSBkhjKhBHiKjoGswETTfv YchLf5zMflITMrVQq6bN11LdkYO8n8wJg1H3AdvtnRsqS4WAfIIKVaujJUt6A3wj WPLQs0JwaoQJOolv7MAJaj7d+GXCWx8HBs9hFXL3MWKzsYTbUikYYfCRA57c0YaZ 86qMx9Q2H0jdUFrvi8yiUiQEMJ2Tu77BrYo2FhMtb4VsF9JFV92ModMLDxFm1RvK OVsNdt5WdBRdPrh3GEZYkHIQTqOLuqSFzgzgFXEQygHe93vLXR/Ykg7EP40SdM6p ENVXxqR7davS4YhFKgl+M3QnJe/D7p91VYPOy8yOIlFrmnu9rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxbd607/6I18aL1qzMJmJFFFdeaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTllYTM1ODUtNjI0NC0z N2IwLWEzODktYzc5N2YzZDA2ZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg314MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKIQFVPr5FltEHnkIEXfD8r/b2SNIdXYi4FuImFWR1TZNQdSXKHtAbM OGsxvaatyuOl1ALPSUO+Lz2kMC186OKxTO45NJmh6GCvzi95AM+2AcUF0v7YfUNj oBy4rrOk9mUqOp9gDzq25VzbYjeL7otD25sHre4Jd72piomLs1wexekGUhZQ+ryQ GP2Pz7wXEF0Z9fj922zPKl2leyxNK5wNvsDw4dq7vXnHaq08+8YCEoBFv8yw0Chc VMJl18m60Ct7eNWbI8oizravgvd6Au7wHqNMRvsMvEzwzDRBhtOFmVmkRhLgV7Pz Pffkzg9a78jsEyKnHQExj7FByAG+ZJI= -----END CERTIFICATE-----Generated at Wed Nov 5 07:10:21 2025 by rpki-client