$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a5c8e9b4-8023-358d-99c9-c8d9a194caa5.roa File: a5c8e9b4-8023-358d-99c9-c8d9a194caa5.roa (raw, json) Hash identifier: 8XMt8GAa2etPX29wuL2lAxNn1mQ74imH/+avJ9f21vc= Subject key identifier: 69:6F:8E:AD:13:2C:E8:7D:B2:F7:4B:DB:D0:59:40:F7:46:0C:C0:DA Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF2E7738CE813CA00FCCDA400 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a5c8e9b4-8023-358d-99c9-c8d9a194caa5.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:73:8c:e8:13:ca:00:fc:cd:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=60611884-151b-4505-ac71-d94110e9bbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:89:23:b7:ce:b3:1e:a0:0e:f5:73:e4:f4:20: c6:d9:a9:c0:c3:66:24:2f:28:36:6e:1e:5c:14:d3: 14:36:75:fb:68:a5:fd:13:89:38:03:71:4e:0e:e0: 10:a2:26:57:63:01:d1:e5:69:fd:79:c1:2e:8e:62: f2:5a:45:aa:ec:c1:49:5b:81:f5:24:ba:fd:2a:6a: 36:13:06:f0:94:70:e9:4c:9c:95:49:0e:21:14:de: 77:e1:25:5d:39:1f:dd:ef:4e:bb:7a:39:df:12:8e: 61:c1:90:83:42:77:22:92:58:91:5c:80:d0:78:73: 41:28:e2:92:cb:a4:82:9b:97:49:5b:f1:d8:84:28: 10:0e:22:7b:d0:3d:f7:b7:92:9c:d9:85:ce:d0:8c: e9:27:4f:dc:6b:af:3f:60:95:fc:1e:93:ad:10:21: fd:2b:7c:60:91:20:cf:35:45:62:9d:fe:7b:33:62: c3:78:61:0c:c6:21:fc:fc:64:03:c5:a0:b9:7f:fd: f5:4f:56:fe:ab:7c:96:4c:8f:95:bf:a2:e7:a8:00: a6:5f:ec:cb:9a:da:99:3f:a9:97:82:8b:30:25:a5: d5:05:a8:d2:08:3d:9b:e0:d6:fa:a8:90:27:d3:37: 6c:96:0f:19:b5:1e:c8:90:90:3c:f3:89:24:5f:0b: a6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6F:8E:AD:13:2C:E8:7D:B2:F7:4B:DB:D0:59:40:F7:46:0C:C0:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a5c8e9b4-8023-358d-99c9-c8d9a194caa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ef:68:ab:10:f2:35:01:24:61:ad:a1:27:a1:de:39:d5:18: e9:75:87:94:ff:be:c6:c8:00:72:a9:35:f9:1a:cf:04:44:21: 60:d2:39:37:32:c8:57:94:90:b5:bd:6e:3d:4f:7f:c2:5c:19: db:94:82:6c:90:ee:dc:92:15:92:4f:17:d6:7f:47:33:e4:9e: 60:9c:a3:58:a2:ab:80:f2:54:a5:e7:a1:1c:a9:01:6b:89:3a: e7:d6:91:3c:0a:8c:9e:dd:0f:9e:15:eb:65:87:bc:0e:7e:ef: 9b:b6:5b:7d:60:e1:96:8b:4f:14:5d:39:23:c1:3d:be:72:be: 49:64:ab:17:a2:ae:02:bd:24:45:30:03:42:84:9d:6e:3a:ac: 10:4d:6f:df:8a:a4:8d:66:1b:d7:50:71:0b:aa:fd:87:4b:87: bb:2d:03:47:8d:6c:4b:e4:11:f5:25:b4:ed:d7:0a:7f:2a:96: 90:d9:88:4e:4f:58:27:de:06:38:88:27:fe:7f:67:12:b7:5d: 0d:c0:c5:5b:2c:54:84:bc:14:dd:1a:f8:e2:4b:2b:19:32:a0: 4f:09:80:86:5f:2d:5e:44:94:69:56:fb:a0:06:a2:57:12:31: 08:a3:55:06:5a:f4:94:a1:f8:f8:b9:b8:cc:17:6b:54:ca:d4: 3d:a6:72:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53OM6BPKAPzNpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk NjA2MTE4ODQtMTUxYi00NTA1LWFjNzEtZDk0MTEwZTliYmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4kjt86zHqAO9XPk9CDG2anAw2YkLyg2bh5c FNMUNnX7aKX9E4k4A3FODuAQoiZXYwHR5Wn9ecEujmLyWkWq7MFJW4H1JLr9Kmo2 EwbwlHDpTJyVSQ4hFN534SVdOR/d7067ejnfEo5hwZCDQncikliRXIDQeHNBKOKS y6SCm5dJW/HYhCgQDiJ70D33t5Kc2YXO0IzpJ0/ca68/YJX8HpOtECH9K3xgkSDP NUVinf57M2LDeGEMxiH8/GQDxaC5f/31T1b+q3yWTI+Vv6LnqACmX+zLmtqZP6mX goswJaXVBajSCD2b4Nb6qJAn0zdslg8ZtR7IkJA884kkXwumEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlvjq0TLOh9svdL29BZQPdGDMDaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTVjOGU5YjQtODAyMy0z NThkLTk5YzktYzhkOWExOTRjYWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg310MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATvaKsQ8jUBJGGtoSeh3jnVGOl1h5T/vsbIAHKpNfkazwREIWDSOTcy yFeUkLW9bj1Pf8JcGduUgmyQ7tySFZJPF9Z/RzPknmCco1iiq4DyVKXnoRypAWuJ OufWkTwKjJ7dD54V62WHvA5+75u2W31g4ZaLTxRdOSPBPb5yvklkqxeirgK9JEUw A0KEnW46rBBNb9+KpI1mG9dQcQuq/YdLh7stA0eNbEvkEfUltO3XCn8qlpDZiE5P WCfeBjiIJ/5/ZxK3XQ3AxVssVIS8FN0a+OJLKxkyoE8JgIZfLV5ElGlW+6AGolcS MQijVQZa9JSh+Pi5uMwXa1TK1D2mckA= -----END CERTIFICATE-----Generated at Mon Sep 21 20:07:51 2026 by rpki-client