$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad9c2c18-149d-3be8-a554-54af0eb73c20.roa File: ad9c2c18-149d-3be8-a554-54af0eb73c20.roa (raw, json) Hash identifier: 4OJDPRrz6+mrM+4v/HssHR8+5JNuTA8GdZ10IYFHtcE= Subject key identifier: AD:C3:BB:7B:43:ED:A3:C5:5C:B6:7E:D7:D9:9A:05:46:3D:47:DC:3E Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF2E773A4C176C1CED104C400 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad9c2c18-149d-3be8-a554-54af0eb73c20.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:73:a4:c1:76:c1:ce:d1:04:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=39d052d7-c5de-4f09-aa57-7308d592f9d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:07:36:25:33:97:f5:74:c5:e5:6c:5c:de:ff: 39:81:5a:98:5b:1c:d3:79:02:96:4a:5b:7b:3e:44: ef:64:13:22:92:89:36:04:24:3f:87:3a:4e:73:c2: 57:79:c2:3e:56:fa:b8:bd:dc:3d:47:06:d2:a1:3a: c6:4e:cf:9a:00:e4:de:57:15:3e:c0:e8:8a:ae:13: 8a:e3:84:86:c6:46:b2:28:77:4e:6e:89:35:d1:29: 9c:cc:89:86:c0:eb:1a:fe:a0:47:4d:ce:2d:2e:ed: 1b:50:e2:79:fe:75:52:32:14:86:5a:11:df:8a:6c: 60:05:7d:47:ed:9d:29:55:97:7a:29:61:dc:b8:76: ed:6e:db:9d:9c:3e:1a:76:36:85:a1:47:d1:ec:35: 69:0a:9d:a5:ed:75:7d:40:fd:bc:a7:50:5a:ff:4f: 43:93:7e:d7:dc:3a:97:54:77:56:67:a4:22:7d:56: 90:07:e2:db:d4:ff:ee:a0:0c:32:b4:da:3c:c9:f5: 85:de:35:03:16:b6:c1:a6:e5:7f:48:8e:06:8f:95: e0:12:9a:fd:06:7b:1d:7b:9a:28:53:f2:7e:ae:52: ee:d4:05:32:07:a1:73:76:86:3c:21:80:dc:e0:84: ce:20:d3:8d:06:c6:b4:7d:24:23:c5:85:fe:3d:9d: 2e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C3:BB:7B:43:ED:A3:C5:5C:B6:7E:D7:D9:9A:05:46:3D:47:DC:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ad9c2c18-149d-3be8-a554-54af0eb73c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:34:3e:82:e4:1c:d4:39:2e:58:54:9e:3a:d1:46:f3:e0:e7: 1b:99:4d:9d:fd:07:05:17:2e:c6:a2:25:1c:87:ec:d7:64:1c: 15:85:65:99:8c:19:e9:f7:a9:80:c6:d8:41:52:c9:72:1f:2b: 4a:21:df:c1:bf:b7:aa:f1:33:d6:a0:e0:b7:b7:ba:ba:06:04: 2f:e6:5e:69:60:fd:35:8e:de:7d:a9:3a:61:e6:81:bb:d2:1e: ab:8d:ef:c0:49:82:a9:30:0f:86:6d:57:17:15:8d:66:e5:de: d7:f2:d5:2a:46:af:11:de:a8:24:a4:5d:06:2f:0e:72:15:e2: 03:69:c6:0c:36:9c:f1:80:71:48:7a:5a:c2:3b:b3:2c:83:95: e3:06:31:fb:3e:39:cc:3a:ea:f5:60:97:3c:92:17:5c:f8:b5: a5:ef:c6:bf:b1:a0:73:45:4b:86:fe:e8:5e:eb:c8:77:c0:2c: b8:ae:3d:79:ae:47:2a:b1:6d:fb:82:24:db:9c:cc:5c:78:a1: e5:c8:86:48:50:86:c2:cc:55:a3:a1:1c:b1:49:25:c6:a0:38: f8:9e:d7:b0:f9:fe:14:14:04:8f:80:80:b8:d9:3a:ba:1b:9f: 57:4e:be:a6:12:bf:ad:f0:2f:6a:8e:52:c7:c3:70:50:56:2a: 6a:3f:3b:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53OkwXbBztEExAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk MzlkMDUyZDctYzVkZS00ZjA5LWFhNTctNzMwOGQ1OTJmOWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAc2JTOX9XTF5Wxc3v85gVqYWxzTeQKWSlt7 PkTvZBMikok2BCQ/hzpOc8JXecI+Vvq4vdw9RwbSoTrGTs+aAOTeVxU+wOiKrhOK 44SGxkayKHdObok10SmczImGwOsa/qBHTc4tLu0bUOJ5/nVSMhSGWhHfimxgBX1H 7Z0pVZd6KWHcuHbtbtudnD4adjaFoUfR7DVpCp2l7XV9QP28p1Ba/09Dk37X3DqX VHdWZ6QifVaQB+Lb1P/uoAwytNo8yfWF3jUDFrbBpuV/SI4Gj5XgEpr9Bnsde5oo U/J+rlLu1AUyB6FzdoY8IYDc4ITOINONBsa0fSQjxYX+PZ0udwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3Du3tD7aPFXLZ+19maBUY9R9w+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYWQ5YzJjMTgtMTQ5ZC0z YmU4LWE1NTQtNTRhZjBlYjczYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg31wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAk0PoLkHNQ5LlhUnjrRRvPg5xuZTZ39BwUXLsaiJRyH7NdkHBWFZZmM Gen3qYDG2EFSyXIfK0oh38G/t6rxM9ag4Le3uroGBC/mXmlg/TWO3n2pOmHmgbvS HquN78BJgqkwD4ZtVxcVjWbl3tfy1SpGrxHeqCSkXQYvDnIV4gNpxgw2nPGAcUh6 WsI7syyDleMGMfs+Ocw66vVglzySF1z4taXvxr+xoHNFS4b+6F7ryHfALLiuPXmu RyqxbfuCJNuczFx4oeXIhkhQhsLMVaOhHLFJJcagOPie17D5/hQUBI+AgLjZOrob n1dOvqYSv63wL2qOUsfDcFBWKmo/OzQ= -----END CERTIFICATE-----Generated at Tue Sep 22 13:13:31 2026 by rpki-client