$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca3262b9-3614-38bc-adb8-6566884e2f8e.roa File: ca3262b9-3614-38bc-adb8-6566884e2f8e.roa (raw, json) Hash identifier: 3fy0HtoE22VptawJkxadbxRUurSrLOfr4tRuV+E7FbM= Subject key identifier: 91:7E:81:49:72:1E:5C:81:05:96:C8:23:09:83:4B:F5:A3:1E:7E:89 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF2E7745A596E129ECB32EC20 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca3262b9-3614-38bc-adb8-6566884e2f8e.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:74:5a:59:6e:12:9e:cb:32:ec:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=3363f1aa-bf5d-4906-9df2-6770cf865b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:19:95:21:48:65:30:2c:5c:c3:d3:21:7a:9c: 89:a9:9b:c5:6b:72:7c:2a:5b:48:dc:f3:a9:71:70: 59:f3:8e:7b:7c:79:0d:b6:1e:f6:7a:f6:53:aa:77: ae:fd:71:bb:20:d5:c3:25:6d:8a:78:4c:8a:da:f0: 52:67:d7:e3:29:92:c0:42:17:c8:2a:f4:18:22:cc: b9:d5:5f:3b:e7:fa:5a:41:0c:e6:1f:90:d5:82:8f: 6f:6f:a9:14:66:e5:ba:60:ea:63:b5:f9:37:27:6a: bd:49:78:bd:84:b0:35:1a:fd:aa:ee:2a:e9:fc:50: c0:d5:54:21:46:ff:9a:53:92:bc:f5:3a:f4:b6:4f: ab:09:1d:20:52:82:50:a2:39:7a:c9:d1:93:ef:d7: 37:44:88:59:1d:74:b5:e5:82:4a:7a:ed:8c:c9:5f: 60:6d:57:4b:ff:d3:93:73:57:61:4a:b8:b1:b4:94: bb:fa:51:8d:83:fc:40:b8:b6:c0:9f:93:5d:e8:52: ef:68:51:60:18:a6:88:bf:76:b4:a0:40:e4:f4:78: 98:ab:06:f3:7d:91:d0:04:b6:95:b2:8b:12:f9:ee: d9:85:e2:56:cc:9f:aa:5a:a6:37:1e:51:a9:b2:b7: bc:1a:c7:90:8f:e1:52:c4:ce:a1:d0:1e:62:b1:4a: 3e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7E:81:49:72:1E:5C:81:05:96:C8:23:09:83:4B:F5:A3:1E:7E:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ca3262b9-3614-38bc-adb8-6566884e2f8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:9f:cc:dd:88:ed:ce:0e:f6:dc:69:1e:a3:98:83:b7:36:96: 18:fd:b7:b9:73:78:c1:b5:f4:f8:e0:23:04:9a:8b:86:e3:47: f9:43:f0:f8:1c:fa:f2:04:dd:4b:f7:d4:21:77:ae:a6:2c:94: 2e:1a:91:bf:2a:77:ac:ca:e7:62:fd:62:24:e6:fe:50:04:98: a1:9e:ea:d5:a7:c1:13:60:27:20:9a:1a:c7:4d:58:5f:d6:47: e9:9f:4f:c3:3f:35:fa:a2:77:98:2e:1e:f1:c6:db:93:53:a1: 00:b6:3f:4e:58:af:f2:45:f9:0b:e6:8f:8a:65:54:91:f7:03: ab:25:7b:7b:64:ce:bb:78:e3:f3:9b:6b:f7:7c:7b:fc:f6:f8: 52:41:5d:ec:af:fc:7e:61:4f:7e:fc:a9:1e:d6:cc:eb:82:bc: a4:4b:14:c7:1e:71:94:fe:2f:9f:47:6b:b0:40:ce:44:34:57: 0d:bb:63:d0:a4:1d:06:81:fd:16:80:4f:9c:28:06:e8:80:f0: 4e:c3:5a:0e:78:ec:bf:37:8f:af:6d:d7:7e:b4:b2:38:68:c5: 32:ef:8e:5e:18:21:18:7b:12:45:08:c3:d5:7e:e0:5a:5c:c0: ab:fc:29:ee:93:63:02:34:7b:b5:9b:31:c5:1c:9e:9e:62:d4: 6a:40:c8:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53RaWW4Snssy7CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk MzM2M2YxYWEtYmY1ZC00OTA2LTlkZjItNjc3MGNmODY1YjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxmVIUhlMCxcw9MhepyJqZvFa3J8KltI3POp cXBZ8457fHkNth72evZTqneu/XG7INXDJW2KeEyK2vBSZ9fjKZLAQhfIKvQYIsy5 1V875/paQQzmH5DVgo9vb6kUZuW6YOpjtfk3J2q9SXi9hLA1Gv2q7irp/FDA1VQh Rv+aU5K89Tr0tk+rCR0gUoJQojl6ydGT79c3RIhZHXS15YJKeu2MyV9gbVdL/9OT c1dhSrixtJS7+lGNg/xAuLbAn5Nd6FLvaFFgGKaIv3a0oEDk9HiYqwbzfZHQBLaV sosS+e7ZheJWzJ+qWqY3HlGpsre8GseQj+FSxM6h0B5isUo+5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJF+gUlyHlyBBZbIIwmDS/WjHn6JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2EzMjYyYjktMzYxNC0z OGJjLWFkYjgtNjU2Njg4NGUyZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg312MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6fzN2I7c4O9txpHqOYg7c2lhj9t7lzeMG19PjgIwSai4bjR/lD8Pgc +vIE3Uv31CF3rqYslC4akb8qd6zK52L9YiTm/lAEmKGe6tWnwRNgJyCaGsdNWF/W R+mfT8M/Nfqid5guHvHG25NToQC2P05Yr/JF+Qvmj4plVJH3A6sle3tkzrt44/Ob a/d8e/z2+FJBXeyv/H5hT378qR7WzOuCvKRLFMcecZT+L59Ha7BAzkQ0Vw27Y9Ck HQaB/RaAT5woBuiA8E7DWg547L83j69t1360sjhoxTLvjl4YIRh7EkUIw9V+4Fpc wKv8Ke6TYwI0e7WbMcUcnp5i1GpAyJs= -----END CERTIFICATE-----Generated at Wed Sep 23 00:57:08 2026 by rpki-client