$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa File: 9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa (raw, json) Hash identifier: OOKYwJ71C4GLsfK6peiiIaVMd0vwJSvg7gvwjbb6zpY= Subject key identifier: D6:78:EF:0C:B3:3E:42:D6:97:E5:1F:17:BD:18:AE:D9:FD:29:6A:A5 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D703FEC73898EF98E21452200 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 54113 IP address blocks: 131.125.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:ec:73:89:8e:f9:8e:21:45:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=d79438b8-2efd-4dbb-9aaa-4a006821da8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:66:45:0a:d6:d6:a1:3b:e2:a9:f8:0d:e0: 20:d6:47:d0:ab:b2:4e:29:88:e2:b9:88:9d:37:fb: ea:95:3e:a4:60:5f:6d:71:6f:c6:e5:fd:af:86:33: db:1c:a0:a4:86:47:20:c5:06:75:ab:5a:1c:ef:49: fc:28:af:26:f8:2b:7d:66:35:02:0a:73:de:8d:5b: 30:2a:68:6e:90:bc:59:e5:e6:fa:6d:a0:17:6d:39: d8:b9:34:9d:8e:64:13:1a:b7:68:b2:fb:6c:eb:b4: 56:04:f7:f3:d4:76:3f:55:a3:f6:89:bd:92:fd:31: 31:ef:12:d7:c4:8e:4b:d5:0d:18:62:c0:24:8b:e7: 7e:be:d4:dc:1b:4e:8d:3d:25:18:19:d9:f9:0b:1d: f0:8c:5a:c8:4f:d3:35:4d:22:12:ee:da:56:d6:21: 21:d1:bb:cb:fb:d9:92:c6:cf:1c:cb:c0:65:22:b5: f3:0a:34:55:ed:ac:a1:19:db:b1:dc:02:d3:84:89: 75:5a:5e:c8:3b:87:22:2b:e7:35:b5:ce:d1:70:51: 5e:0a:fe:44:3e:a9:07:f3:8e:92:70:22:22:1c:d1: 35:e8:36:a9:7c:91:0b:c3:2f:7e:82:7a:4d:ea:b0: 47:12:77:b4:d7:bf:7a:42:eb:4e:22:4f:3c:18:16: 9d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:78:EF:0C:B3:3E:42:D6:97:E5:1F:17:BD:18:AE:D9:FD:29:6A:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e6:8a:ae:7c:21:b9:db:f7:01:2b:ef:7b:f7:9b:f0:00:70: de:a4:32:88:7b:f6:b9:b7:32:19:be:68:6f:ea:17:9d:da:2c: 43:03:8e:00:a4:33:ae:44:53:a2:fe:78:24:85:fb:85:8c:46: 96:6f:6a:b4:cb:29:19:c5:40:e9:ad:36:98:38:60:42:34:9a: f0:1e:48:42:48:ee:60:8e:3a:6e:07:58:26:e5:c1:df:ea:43: ea:4d:bb:96:5a:78:80:da:1c:82:25:be:fb:f1:5d:19:45:83: 35:c0:00:8a:ae:10:43:ff:83:00:41:a2:a2:8b:12:7a:da:f6: b4:ef:76:b1:d2:c6:87:1c:1a:c4:b2:12:05:84:7b:ef:8e:10: c3:3d:8f:cf:78:e0:ea:46:99:8c:34:c6:98:53:5d:d9:66:fc: 94:f5:ed:be:41:44:8b:31:84:ef:f3:1b:f5:37:74:b2:f8:a3: 78:42:f6:3e:04:f5:fe:a1:25:4d:ef:eb:c9:84:b2:72:fd:45: f0:83:b8:d4:1a:e4:ef:a0:31:36:f3:24:66:2a:9e:9f:e3:6b: 24:fd:b1:67:de:93:a7:b1:de:f3:a6:f8:d8:0c:d4:30:a6:74: 45:c2:c8:bd:79:ce:de:86:54:09:ed:49:2e:30:21:0f:71:bb: ae:c8:5f:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+xziY75jiFFIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk ZDc5NDM4YjgtMmVmZC00ZGJiLTlhYWEtNGEwMDY4MjFkYThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqipmRQrW1qE74qn4DeAg1kfQq7JOKYjiuYid N/vqlT6kYF9tcW/G5f2vhjPbHKCkhkcgxQZ1q1oc70n8KK8m+Ct9ZjUCCnPejVsw KmhukLxZ5eb6baAXbTnYuTSdjmQTGrdosvts67RWBPfz1HY/VaP2ib2S/TEx7xLX xI5L1Q0YYsAki+d+vtTcG06NPSUYGdn5Cx3wjFrIT9M1TSIS7tpW1iEh0bvL+9mS xs8cy8BlIrXzCjRV7ayhGdux3ALThIl1Wl7IO4ciK+c1tc7RcFFeCv5EPqkH846S cCIiHNE16DapfJELwy9+gnpN6rBHEne01796QutOIk88GBadjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZ47wyzPkLWl+UfF70Yrtn9KWqlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOWY3YmFlNmItMGI1Zi0z MTY5LWJjYmUtZmNmZWRmN2E4ZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg314MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTmiq58Ibnb9wEr73v3m/AAcN6kMoh79rm3Mhm+aG/qF53aLEMDjgCk M65EU6L+eCSF+4WMRpZvarTLKRnFQOmtNpg4YEI0mvAeSEJI7mCOOm4HWCblwd/q Q+pNu5ZaeIDaHIIlvvvxXRlFgzXAAIquEEP/gwBBoqKLEnra9rTvdrHSxoccGsSy EgWEe++OEMM9j8944OpGmYw0xphTXdlm/JT17b5BRIsxhO/zG/U3dLL4o3hC9j4E 9f6hJU3v68mEsnL9RfCDuNQa5O+gMTbzJGYqnp/jayT9sWfek6ex3vOm+NgM1DCm dEXCyL15zt6GVAntSS4wIQ9xu67IXy4= -----END CERTIFICATE-----Generated at Fri Apr 17 16:33:22 2026 by rpki-client