$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b75f0928-afa7-3631-8814-783a2e20fda1.roa File: b75f0928-afa7-3631-8814-783a2e20fda1.roa (raw, json) Hash identifier: 9aMzJNX0vK7JoqdOPs5bZMxaGHeRuxUGdDZk955QacU= Subject key identifier: 3F:87:98:C9:8E:11:6E:AC:18:46:62:04:78:21:45:9B:D9:E1:21:B2 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D703FEBC955007BF7E83E58C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b75f0928-afa7-3631-8814-783a2e20fda1.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 54113 IP address blocks: 131.125.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:eb:c9:55:00:7b:f7:e8:3e:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=17dd2897-06d6-424f-aeaa-ec07db0111ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b4:d2:2d:56:88:f8:53:d5:1d:3f:d6:d4:f6: 37:9c:21:9c:f6:f5:0f:1a:a4:2c:15:25:8e:ef:6c: 55:3e:0e:0d:a7:bf:68:86:cd:77:7e:9d:8a:bf:ff: 80:20:2b:47:a1:74:66:ba:5f:83:40:61:8e:08:96: cf:ba:b8:56:60:9a:f9:18:11:1b:ec:4f:e4:26:cb: d5:52:5a:95:e7:77:75:18:da:79:02:75:df:47:96: cf:2f:d2:6c:dc:de:a8:2a:d2:e0:d7:dc:36:b8:50: 59:9d:4f:6b:7b:9b:42:01:69:3b:b4:b8:4c:88:0b: 99:3d:f0:bd:c4:a8:28:4d:53:f3:87:61:3a:f0:41: 73:b2:97:2f:8d:00:db:23:af:ed:b9:c6:1b:0d:c7: ff:da:dd:e0:69:8b:3b:2f:b3:22:4b:d1:1c:21:d6: 43:67:a5:1e:c2:d8:da:3d:fd:46:79:3b:5f:d7:98: f0:57:04:fc:29:05:37:77:78:8d:07:83:94:0c:5f: 55:d7:6c:45:e1:3b:66:dc:88:4c:d8:5a:22:53:5d: 22:06:d4:74:8c:aa:4a:12:5a:e3:b9:08:d1:4b:de: e5:7b:a9:18:d5:62:97:9f:c0:14:ac:5a:56:63:a1: 46:8a:e9:f2:09:54:dd:d1:af:14:c4:8a:80:7a:17: 73:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:87:98:C9:8E:11:6E:AC:18:46:62:04:78:21:45:9B:D9:E1:21:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b75f0928-afa7-3631-8814-783a2e20fda1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a5:b5:0f:5f:06:5b:2f:3b:99:80:7d:20:65:61:c7:f5:cd: 1d:33:54:f3:32:4f:b0:2c:ea:d1:ec:63:dc:d7:fe:e2:21:1a: 24:16:f5:eb:9c:3e:69:fd:d5:c2:94:3b:bd:75:46:73:36:e1: 57:16:ac:f8:85:0f:bc:34:d9:8e:ce:f4:1c:7b:89:b3:bd:5e: 44:a2:8e:cb:d4:ef:a2:cc:69:93:1a:ed:82:84:21:f2:59:73: fc:cf:ca:8a:84:d1:af:69:cd:0f:14:87:20:0b:bd:f6:23:f0: 9c:75:4c:9d:39:d2:93:1a:f3:c6:33:27:28:9b:83:19:b4:f6: ce:92:98:71:61:57:0b:f7:04:12:3d:37:7b:70:cb:f1:c6:4d: 8e:ec:d0:9e:35:76:07:95:3a:e6:a9:02:d1:3a:f6:46:79:7f: 86:64:d5:7b:86:f3:79:d0:27:ed:19:04:89:c0:76:0d:f1:14: 92:30:06:f9:e2:e6:ba:da:49:18:b8:d2:6c:15:c9:a6:0d:76: e1:c7:2e:28:17:e1:59:df:8d:6f:29:aa:11:68:b0:03:d5:34: 0b:7c:0a:5d:44:da:87:82:7c:a4:e2:4b:49:1c:13:48:ea:b7: fa:14:15:bd:d9:e0:bf:5e:b2:c9:05:34:51:b1:02:ab:72:0d: d8:78:89:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+vJVQB79+g+WMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk MTdkZDI4OTctMDZkNi00MjRmLWFlYWEtZWMwN2RiMDExMWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLTSLVaI+FPVHT/W1PY3nCGc9vUPGqQsFSWO 72xVPg4Np79ohs13fp2Kv/+AICtHoXRmul+DQGGOCJbPurhWYJr5GBEb7E/kJsvV UlqV53d1GNp5AnXfR5bPL9Js3N6oKtLg19w2uFBZnU9re5tCAWk7tLhMiAuZPfC9 xKgoTVPzh2E68EFzspcvjQDbI6/tucYbDcf/2t3gaYs7L7MiS9EcIdZDZ6Uewtja Pf1GeTtf15jwVwT8KQU3d3iNB4OUDF9V12xF4Ttm3IhM2FoiU10iBtR0jKpKElrj uQjRS97le6kY1WKXn8AUrFpWY6FGiunyCVTd0a8UxIqAehdzIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+HmMmOEW6sGEZiBHghRZvZ4SGyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjc1ZjA5MjgtYWZhNy0z NjMxLTg4MTQtNzgzYTJlMjBmZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg31gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqltQ9fBlsvO5mAfSBlYcf1zR0zVPMyT7As6tHsY9zX/uIhGiQW9euc Pmn91cKUO711RnM24VcWrPiFD7w02Y7O9Bx7ibO9XkSijsvU76LMaZMa7YKEIfJZ c/zPyoqE0a9pzQ8UhyALvfYj8Jx1TJ050pMa88YzJyibgxm09s6SmHFhVwv3BBI9 N3twy/HGTY7s0J41dgeVOuapAtE69kZ5f4Zk1XuG83nQJ+0ZBInAdg3xFJIwBvni 5rraSRi40mwVyaYNduHHLigX4VnfjW8pqhFosAPVNAt8Cl1E2oeCfKTiS0kcE0jq t/oUFb3Z4L9esskFNFGxAqtyDdh4iYg= -----END CERTIFICATE-----Generated at Fri Apr 17 11:15:17 2026 by rpki-client