$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa File: 9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa (raw, json) Hash identifier: myW7CC+NSLe+Tf0jyvh2VI2+U4e5GKB1YRXeEulouzo= Subject key identifier: 8B:AD:7C:04:56:78:BF:D9:CA:8E:42:19:66:F9:29:97:B9:38:D2:9B Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB02D080CCB983A5CF53A3600 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 54113 IP address blocks: 131.125.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:08:0c:cb:98:3a:5c:f5:3a:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=98315d6a-f02c-4452-9f6f-3ef242d925e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:71:9e:26:15:b6:78:a2:36:78:c1:26:8b:dc: c6:63:84:d5:14:54:62:d3:9b:f9:3a:38:e3:b3:16: 52:43:44:86:95:51:eb:96:0b:11:2d:63:88:c3:1a: 73:3c:c6:24:e1:7f:a8:94:c3:3c:34:2c:37:b8:10: df:5b:8d:97:bf:d1:d1:50:2e:b0:1f:bc:e0:96:a3: 2f:12:a2:cc:88:ae:e9:01:51:42:a4:fc:90:0f:9a: 71:84:c2:f5:eb:1c:33:6e:5a:8a:83:4b:92:e1:90: e2:b7:99:af:f0:cf:eb:45:33:84:d2:12:83:df:81: 7b:90:78:3e:f6:5d:e4:dc:a5:0c:8d:86:f9:f3:ed: 9e:78:9b:ab:80:7f:e3:45:24:b1:4c:5e:c0:2d:44: ea:ae:6e:20:2f:3b:a8:dd:e7:c6:be:06:29:0a:d7: e1:73:86:8c:08:01:09:cd:67:55:fc:e8:ce:5f:f6: 64:e7:d0:cc:a4:63:7a:e0:22:f7:ac:3f:e9:9a:a0: 0a:08:a6:3a:55:99:22:b0:3d:0d:b4:f0:b3:b1:17: 2e:01:03:68:69:77:e3:d8:d1:1d:d8:78:7c:d2:70: 61:dc:af:5a:85:e9:79:83:41:51:36:39:9b:21:c6: 87:ef:63:f9:2d:47:b2:77:56:8e:a0:4b:14:b4:4a: 85:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AD:7C:04:56:78:BF:D9:CA:8E:42:19:66:F9:29:97:B9:38:D2:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f1:69:c6:67:29:9c:28:81:cb:fa:e3:10:b9:e1:b5:65:02: aa:58:b9:65:cf:98:ba:a1:c2:f7:d1:e3:7c:47:35:5c:0d:cc: 10:1d:91:a5:ff:e1:69:d3:eb:2e:02:ca:ee:19:c8:a6:67:e6: 7c:40:a3:a9:c2:5f:2c:9f:78:c7:d4:cd:4b:1d:c2:8b:b6:1e: 13:35:01:2f:fb:0f:fb:fb:80:1e:a1:7c:fa:5c:e0:5a:19:75: 46:35:3e:de:35:77:74:42:98:63:67:85:52:30:b0:d1:97:8a: 0f:ab:3f:a6:11:2a:67:f8:47:52:7a:a7:a5:91:ea:1b:70:37: d3:41:f6:63:6b:3e:0c:14:36:7e:06:9f:18:fb:cc:7d:4f:50: 8d:f5:60:f0:fc:21:f6:64:0e:1d:bb:18:41:d8:e1:7d:65:a5: 32:42:a6:33:da:8f:01:1c:55:99:b9:97:7c:82:92:42:d8:04: f4:ea:29:5d:ec:1e:86:30:3b:6a:0b:96:f5:02:c3:51:f7:d7: e5:60:c3:4e:57:0d:da:3a:0b:fa:59:43:f6:4a:3c:49:94:bf: c0:c4:b4:ff:6c:a2:4c:e2:92:6f:e8:89:d4:e4:5c:a4:f1:f4: fe:c7:c4:7f:dc:b0:b9:ef:7b:a5:6e:e1:75:09:b4:c3:9e:27: 0f:a0:aa:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQgMy5g6XPU6NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk OTgzMTVkNmEtZjAyYy00NDUyLTlmNmYtM2VmMjQyZDkyNWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHGeJhW2eKI2eMEmi9zGY4TVFFRi05v5Ojjj sxZSQ0SGlVHrlgsRLWOIwxpzPMYk4X+olMM8NCw3uBDfW42Xv9HRUC6wH7zglqMv EqLMiK7pAVFCpPyQD5pxhML16xwzblqKg0uS4ZDit5mv8M/rRTOE0hKD34F7kHg+ 9l3k3KUMjYb58+2eeJurgH/jRSSxTF7ALUTqrm4gLzuo3efGvgYpCtfhc4aMCAEJ zWdV/OjOX/Zk59DMpGN64CL3rD/pmqAKCKY6VZkisD0NtPCzsRcuAQNoaXfj2NEd 2Hh80nBh3K9ahel5g0FRNjmbIcaH72P5LUeyd1aOoEsUtEqF6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIutfARWeL/Zyo5CGWb5KZe5ONKbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOWY3YmFlNmItMGI1Zi0z MTY5LWJjYmUtZmNmZWRmN2E4ZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg314MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrxacZnKZwogcv64xC54bVlAqpYuWXPmLqhwvfR43xHNVwNzBAdkaX/ 4WnT6y4Cyu4ZyKZn5nxAo6nCXyyfeMfUzUsdwou2HhM1AS/7D/v7gB6hfPpc4FoZ dUY1Pt41d3RCmGNnhVIwsNGXig+rP6YRKmf4R1J6p6WR6htwN9NB9mNrPgwUNn4G nxj7zH1PUI31YPD8IfZkDh27GEHY4X1lpTJCpjPajwEcVZm5l3yCkkLYBPTqKV3s HoYwO2oLlvUCw1H31+Vgw05XDdo6C/pZQ/ZKPEmUv8DEtP9sokzikm/oidTkXKTx 9P7HxH/csLnve6Vu4XUJtMOeJw+gqg8= -----END CERTIFICATE-----Generated at Wed Nov 5 00:54:00 2025 by rpki-client