$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d0a9369b-8352-3ace-bb34-43ef1f2cbd10.roa File: d0a9369b-8352-3ace-bb34-43ef1f2cbd10.roa (raw, json) Hash identifier: D5w6t0rPRMVv2eOCPvlAyOJs+45bko3jlaXhKk05gz4= Subject key identifier: CF:21:FB:46:60:90:D1:00:82:DA:9E:F9:F8:1D:89:9A:6E:8D:96:26 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF2E774CEEB73DB589A897E80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d0a9369b-8352-3ace-bb34-43ef1f2cbd10.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:74:ce:eb:73:db:58:9a:89:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=2f6cdbe5-da6b-4c55-83eb-b86d94bb3222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ba:9b:55:2a:9d:38:75:10:ed:c7:c3:c7:f3: f0:27:d3:8b:24:67:23:fe:e1:67:d8:01:9c:c1:e2: ff:e1:3e:14:06:d0:7d:1b:6e:c2:02:4b:b3:b6:f4: 39:99:82:20:8f:56:c8:5f:90:1b:93:a8:4f:d8:f3: d4:6b:3e:0b:02:a3:f6:f4:1e:5f:6e:fe:ec:f0:75: c0:0b:bc:13:12:70:31:19:26:73:b4:a1:45:f3:8a: f0:7e:1f:fe:98:79:92:f0:77:70:8f:7f:80:ef:8f: 08:23:20:48:99:83:b9:65:b3:bb:3b:c0:7d:a9:de: ab:b5:aa:9d:28:7d:40:52:01:9c:39:4d:10:f0:76: 24:83:38:c8:ad:d5:f4:ae:14:12:3e:df:17:9a:ee: 32:1a:f4:83:f0:f6:70:66:c2:1e:96:63:09:22:3a: 6e:f5:74:ea:b3:77:ff:be:a7:e7:44:c6:19:a4:2d: f2:de:aa:3d:3d:fb:96:0e:56:b0:d6:ac:a6:ca:a7: ce:f4:ea:95:74:16:81:49:0b:98:37:33:ec:e3:80: 8f:27:d6:ee:00:d6:3c:33:27:9a:3a:71:49:1f:3a: 3b:bb:3a:ee:cb:6e:3d:cd:bf:2f:6a:d3:68:f9:8a: 99:88:40:59:e5:56:f6:4d:cc:45:d4:95:83:dd:ae: ac:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:21:FB:46:60:90:D1:00:82:DA:9E:F9:F8:1D:89:9A:6E:8D:96:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d0a9369b-8352-3ace-bb34-43ef1f2cbd10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ef:ed:c9:49:10:84:6b:54:ce:89:c3:fb:8b:1d:11:fa:56: 28:da:41:a4:73:e9:51:c7:e5:11:b2:11:ff:85:a3:36:cf:2f: 55:16:9b:d8:ef:5b:09:48:ef:0b:ae:d8:72:ef:6f:49:ce:2b: 8a:91:c7:59:a3:96:23:d1:41:cd:6c:4c:87:85:ae:d7:19:ad: 86:1b:e8:2c:ce:fd:5e:f9:fd:19:88:e8:9d:f6:93:fb:af:5f: b1:71:f2:cd:25:2b:db:da:4d:30:4c:f6:f0:b6:0d:06:64:c4: 5e:77:80:47:3f:19:7d:06:94:47:a4:b9:c3:6d:ab:c6:d4:35: e8:1d:28:1f:3e:40:04:2e:d8:ee:e8:cd:07:e1:65:79:25:6d: b3:0b:d0:4b:75:22:df:f1:42:3a:d2:fe:f6:3a:c2:f0:73:3d: 1c:64:70:d5:f3:0d:69:90:89:ea:8a:81:1f:82:d1:a8:3c:fb: 52:3a:42:b8:50:5a:77:bc:29:c7:81:0c:57:e4:bb:88:4e:09: 1c:03:9f:fa:4f:77:a6:8d:d5:1c:87:db:47:8e:fb:09:e2:b1: 52:8e:20:72:71:cb:e1:3a:34:3c:bb:7d:22:b3:f0:8c:0a:81: ce:82:7d:40:89:bf:ea:10:ed:9d:15:06:ef:8d:ea:4e:f7:8a: ce:2a:4b:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53TO63PbWJqJfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk MmY2Y2RiZTUtZGE2Yi00YzU1LTgzZWItYjg2ZDk0YmIzMjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7qbVSqdOHUQ7cfDx/PwJ9OLJGcj/uFn2AGc weL/4T4UBtB9G27CAkuztvQ5mYIgj1bIX5Abk6hP2PPUaz4LAqP29B5fbv7s8HXA C7wTEnAxGSZztKFF84rwfh/+mHmS8Hdwj3+A748IIyBImYO5ZbO7O8B9qd6rtaqd KH1AUgGcOU0Q8HYkgzjIrdX0rhQSPt8Xmu4yGvSD8PZwZsIelmMJIjpu9XTqs3f/ vqfnRMYZpC3y3qo9PfuWDlaw1qymyqfO9OqVdBaBSQuYNzPs44CPJ9buANY8Myea OnFJHzo7uzruy249zb8vatNo+YqZiEBZ5Vb2TcxF1JWD3a6s5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8h+0ZgkNEAgtqe+fgdiZpujZYmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDBhOTM2OWItODM1Mi0z YWNlLWJiMzQtNDNlZjFmMmNiZDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg31gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHv7clJEIRrVM6Jw/uLHRH6VijaQaRz6VHH5RGyEf+FozbPL1UWm9jv WwlI7wuu2HLvb0nOK4qRx1mjliPRQc1sTIeFrtcZrYYb6CzO/V75/RmI6J32k/uv X7Fx8s0lK9vaTTBM9vC2DQZkxF53gEc/GX0GlEekucNtq8bUNegdKB8+QAQu2O7o zQfhZXklbbML0Et1It/xQjrS/vY6wvBzPRxkcNXzDWmQieqKgR+C0ag8+1I6QrhQ Wne8KceBDFfku4hOCRwDn/pPd6aN1RyH20eO+wnisVKOIHJxy+E6NDy7fSKz8IwK gc6CfUCJv+oQ7Z0VBu+N6k73is4qS54= -----END CERTIFICATE-----Generated at Tue Sep 22 13:09:36 2026 by rpki-client