$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a450c5e7-eed1-346c-a65f-9f9e86242ec6.roa File: a450c5e7-eed1-346c-a65f-9f9e86242ec6.roa (raw, json) Hash identifier: Tq5yWNTYt/RSHtCMhSeYbsYcWDXCRTD6VU/tALUQ07s= Subject key identifier: 42:53:9F:A0:36:62:19:8F:11:F6:EA:BE:37:B8:F5:47:E8:5A:DF:0E Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF2E773D58A47FE283BB38F80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a450c5e7-eed1-346c-a65f-9f9e86242ec6.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:73:d5:8a:47:fe:28:3b:b3:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=41e31edc-8ff4-4888-aab0-9dec8bc43e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:80:1a:b9:89:92:10:f7:96:c3:6e:7d:87: 78:c2:77:a7:53:5e:54:a7:76:7c:96:fc:8d:44:dd: 0b:0a:e4:b1:d5:93:28:de:ec:bf:ab:f7:b5:c6:74: bb:1e:c4:63:2c:cb:46:d7:69:3e:eb:75:8c:63:6a: a7:77:9f:20:43:f6:10:84:d8:08:5a:59:e1:39:b5: f4:87:d4:d9:54:fd:fe:45:a3:e9:a4:29:94:53:55: 9e:01:d5:f6:1a:06:1f:d5:7d:a8:b2:56:f8:92:22: 9f:a4:9f:ab:f7:bf:52:02:2c:04:a9:59:32:6b:d5: 3f:61:26:8e:d3:fb:3b:74:65:d3:86:13:83:eb:e4: d5:42:6a:ad:83:df:7b:ef:70:9d:78:5d:b9:de:a5: fd:40:d1:46:cf:1b:cd:53:b6:79:02:71:d1:67:fd: fd:90:b1:64:cf:03:23:c4:6b:7c:18:f0:b9:54:5a: 77:a2:84:07:11:7a:be:a3:2d:4c:0f:2a:f3:2b:01: cf:88:f4:26:1a:bf:f9:83:8b:03:a4:b6:cd:50:c9: cb:d1:b1:ba:8b:4e:28:88:9c:c2:8f:ef:38:8c:83: bf:22:b6:50:2d:bc:22:ff:2b:3c:f7:f9:ce:25:df: 1c:b4:40:ab:ef:04:17:67:14:78:48:72:8d:49:2d: 57:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:53:9F:A0:36:62:19:8F:11:F6:EA:BE:37:B8:F5:47:E8:5A:DF:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a450c5e7-eed1-346c-a65f-9f9e86242ec6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:6a:dc:a8:ed:c8:bf:68:d6:4b:d4:ee:56:ef:0e:5e:29:e8: c9:53:a8:f5:56:4c:a5:11:14:07:94:3e:0f:0f:dd:b4:32:77: dd:51:48:eb:33:07:6d:f3:85:9d:3c:f5:16:a3:4d:52:ff:2b: 66:7b:53:67:60:54:89:98:ec:61:fd:f0:ad:fa:6e:b9:0d:15: 33:51:82:dd:40:95:97:08:a5:e1:12:1f:96:53:f0:34:16:67: f6:40:34:13:73:40:dc:e1:7d:56:5b:06:8c:42:4c:f7:79:66: 87:0a:eb:e2:cc:c7:ed:d5:df:0c:23:25:7b:78:f8:99:9b:5a: ce:62:a3:76:8f:d8:25:02:0e:9e:08:a3:6b:19:27:f1:82:60: 31:c1:5e:e4:9b:d8:49:70:be:48:11:ee:c8:00:e0:08:a2:3c: 2a:94:fd:e5:1c:6c:8d:3e:f6:c8:77:36:07:5f:db:9f:32:6d: 21:ef:e3:18:6d:ab:99:bc:d9:b7:6d:fe:84:08:80:6c:12:4f: c2:4b:73:f4:72:40:2a:75:6f:8b:32:79:ee:a6:13:61:c4:5d: 0b:25:1c:b6:4d:3a:b4:14:5a:74:20:9b:46:bf:8a:4b:ca:2e: 00:b7:b7:d3:e3:37:9d:6f:e0:02:4a:fb:ec:5a:36:97:9f:06: 66:8b:f9:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53PVikf+KDuzj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk NDFlMzFlZGMtOGZmNC00ODg4LWFhYjAtOWRlYzhiYzQzZTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSmAGrmJkhD3lsNufYd4wnenU15Up3Z8lvyN RN0LCuSx1ZMo3uy/q/e1xnS7HsRjLMtG12k+63WMY2qnd58gQ/YQhNgIWlnhObX0 h9TZVP3+RaPppCmUU1WeAdX2GgYf1X2oslb4kiKfpJ+r979SAiwEqVkya9U/YSaO 0/s7dGXThhOD6+TVQmqtg99773CdeF253qX9QNFGzxvNU7Z5AnHRZ/39kLFkzwMj xGt8GPC5VFp3ooQHEXq+oy1MDyrzKwHPiPQmGr/5g4sDpLbNUMnL0bG6i04oiJzC j+84jIO/IrZQLbwi/ys89/nOJd8ctECr7wQXZxR4SHKNSS1XPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJTn6A2YhmPEfbqvje49UfoWt8OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTQ1MGM1ZTctZWVkMS0z NDZjLWE2NWYtOWY5ZTg2MjQyZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBq3KjtyL9o1kvU7lbvDl4p6MlTqPVWTKURFAeUPg8P3bQyd91RSOsz B23zhZ089RajTVL/K2Z7U2dgVImY7GH98K36brkNFTNRgt1AlZcIpeESH5ZT8DQW Z/ZANBNzQNzhfVZbBoxCTPd5ZocK6+LMx+3V3wwjJXt4+JmbWs5io3aP2CUCDp4I o2sZJ/GCYDHBXuSb2ElwvkgR7sgA4AiiPCqU/eUcbI0+9sh3Ngdf258ybSHv4xht q5m82bdt/oQIgGwST8JLc/RyQCp1b4syee6mE2HEXQslHLZNOrQUWnQgm0a/ikvK LgC3t9PjN51v4AJK++xaNpefBmaL+dM= -----END CERTIFICATE-----Generated at Mon Sep 21 23:48:49 2026 by rpki-client