$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc65e1b4-e76b-31c2-9b7f-873703b2c9a2.roa File: cc65e1b4-e76b-31c2-9b7f-873703b2c9a2.roa (raw, json) Hash identifier: mTw/FnDDSWvncSS46lKbXthX3WxDaVOoX4aLPlKdMJI= Subject key identifier: 1B:4B:68:0A:0A:D0:18:46:3D:62:C2:ED:DE:6B:05:A5:64:33:BA:F2 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF2E77528E288D449A8CDA4E0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc65e1b4-e76b-31c2-9b7f-873703b2c9a2.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:75:28:e2:88:d4:49:a8:cd:a4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=53a041fb-8033-43e3-80d5-6e1228e8bd5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:70:7f:e7:bb:ec:38:54:5f:ab:da:3e:0c:59: df:be:d5:45:97:23:66:6e:19:4e:fe:ca:52:7b:ca: da:8e:ba:0c:12:32:6e:83:d8:dc:38:1f:8d:4d:4a: d7:9b:d4:1a:97:de:3b:72:e0:68:9c:20:ad:41:af: 45:9a:ab:f0:c2:a7:b3:5e:93:f4:8c:c9:e6:8c:56: f5:ba:43:87:b6:76:94:cc:fa:62:88:29:0d:10:1a: 9f:fc:aa:4e:3b:17:ce:00:d5:cc:0a:f2:2e:7e:4b: d2:81:04:9d:ef:73:12:2b:c7:64:2f:cf:a6:bb:b9: 29:ce:75:ab:a0:30:2e:76:3b:6d:c2:0b:73:5a:87: 0d:eb:fd:ad:45:cb:87:ee:23:cb:f0:ae:e3:db:65: fa:46:6f:55:02:b9:38:a4:a5:c5:28:de:6e:48:05: 82:fb:c9:ce:7b:5d:da:7c:75:84:7a:63:18:4f:80: c2:23:95:46:48:59:2d:a9:4a:0d:eb:76:2a:7c:d6: c8:1a:44:de:7c:85:6d:51:bf:97:78:1c:26:a1:da: 4a:5f:bb:15:bd:0b:b6:36:21:b0:76:42:65:87:6a: c5:f9:c8:12:22:5c:ce:6c:e5:a9:15:de:53:a4:5c: 20:13:c0:6c:42:8c:e7:3d:b7:db:40:6c:37:0f:f6: dc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4B:68:0A:0A:D0:18:46:3D:62:C2:ED:DE:6B:05:A5:64:33:BA:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc65e1b4-e76b-31c2-9b7f-873703b2c9a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:cc:d8:e7:26:3b:e3:ce:75:a9:ad:73:ff:52:dc:0c:d9:f5: 43:ff:0e:29:ae:fa:25:6d:a4:b0:9c:6d:e2:f2:34:f6:e4:2d: 21:01:69:8a:14:e0:43:e3:a6:b6:a1:d3:53:73:f3:60:fd:de: c4:7e:92:7e:c1:62:35:a8:bf:b5:b2:3d:79:e1:26:2c:bf:c2: 29:04:72:db:ed:29:d2:5f:2a:18:b6:07:8f:2d:a4:ef:38:22: d0:8f:0b:04:f7:17:00:d8:16:b5:c4:fd:ed:4a:9e:f8:05:2e: a2:28:d6:a0:9a:ee:d9:ee:98:36:84:49:b8:9c:d3:77:16:d2: 06:ee:3e:e4:17:46:47:f6:d4:f4:0e:74:c8:93:9f:81:19:2c: 53:20:7d:f8:22:0e:b5:55:18:eb:4d:77:c7:a2:d3:0a:8b:13: 97:2c:af:4f:53:5d:94:91:f0:f4:88:41:c5:f2:e8:9d:aa:4b: 16:00:e8:45:dc:aa:22:6a:68:6b:31:6d:36:59:63:09:86:d6: 51:b4:eb:b5:d1:25:36:9f:72:dd:a7:98:ca:e5:d2:54:47:61: 19:79:c6:84:7f:41:ad:fe:41:af:0c:ea:7c:84:b2:55:03:23: 9a:44:1b:1e:db:42:fc:db:f8:48:f1:a0:00:44:5a:59:d9:00: ab:a0:e9:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53Uo4ojUSajNpOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk NTNhMDQxZmItODAzMy00M2UzLTgwZDUtNmUxMjI4ZThiZDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3B/57vsOFRfq9o+DFnfvtVFlyNmbhlO/spS e8rajroMEjJug9jcOB+NTUrXm9Qal947cuBonCCtQa9FmqvwwqezXpP0jMnmjFb1 ukOHtnaUzPpiiCkNEBqf/KpOOxfOANXMCvIufkvSgQSd73MSK8dkL8+mu7kpznWr oDAudjttwgtzWocN6/2tRcuH7iPL8K7j22X6Rm9VArk4pKXFKN5uSAWC+8nOe13a fHWEemMYT4DCI5VGSFktqUoN63YqfNbIGkTefIVtUb+XeBwmodpKX7sVvQu2NiGw dkJlh2rF+cgSIlzObOWpFd5TpFwgE8BsQoznPbfbQGw3D/bcuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtLaAoK0BhGPWLC7d5rBaVkM7ryMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2M2NWUxYjQtZTc2Yi0z MWMyLTliN2YtODczNzAzYjJjOWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7M2OcmO+POdamtc/9S3AzZ9UP/Dimu+iVtpLCcbeLyNPbkLSEBaYoU 4EPjprah01Nz82D93sR+kn7BYjWov7WyPXnhJiy/wikEctvtKdJfKhi2B48tpO84 ItCPCwT3FwDYFrXE/e1KnvgFLqIo1qCa7tnumDaESbic03cW0gbuPuQXRkf21PQO dMiTn4EZLFMgffgiDrVVGOtNd8ei0wqLE5csr09TXZSR8PSIQcXy6J2qSxYA6EXc qiJqaGsxbTZZYwmG1lG067XRJTafct2nmMrl0lRHYRl5xoR/Qa3+Qa8M6nyEslUD I5pEGx7bQvzb+EjxoABEWlnZAKug6Ys= -----END CERTIFICATE-----Generated at Mon Sep 21 10:56:05 2026 by rpki-client