$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d54f46b6-196b-30b2-bf3f-d5830fc1cefb.roa File: d54f46b6-196b-30b2-bf3f-d5830fc1cefb.roa (raw, json) Hash identifier: CmMQ6Wa0dNyJOxJReJoR5DJNQ7r5ZpkkZE+usR8Jgzw= Subject key identifier: 6C:38:C9:77:2B:C7:6E:85:B7:68:A0:F5:F7:D1:15:90:D3:E1:A3:64 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F94D354FF3A0B05D0ED5B8100 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d54f46b6-196b-30b2-bf3f-d5830fc1cefb.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:54:ff:3a:0b:05:d0:ed:5b:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=24bd6a38-baa8-430d-9d46-bee5c6b3149f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bc:df:e2:2a:79:e6:ca:61:fd:f1:fe:74:d4: 97:33:6d:b0:fb:a1:49:8f:e7:00:40:85:4d:4e:a4: 0d:19:55:60:70:6a:80:11:ee:2d:97:36:fb:b4:1f: e2:2a:7b:cd:bf:ef:75:c4:39:5d:89:6f:a3:a1:b0: 68:e5:3a:1c:58:10:2b:85:c3:5f:7f:0e:1d:81:d9: 64:c4:a3:9b:a3:26:94:1a:af:4f:1e:14:1b:a2:fc: 9b:21:1c:37:f5:8c:90:9a:db:04:78:54:af:f4:c4: 4f:2b:30:d4:54:c6:39:50:da:df:34:b7:fc:09:6c: 79:26:88:c5:54:ed:80:40:bb:52:80:ae:42:6e:28: af:73:ce:8a:6f:bf:17:10:2f:53:6f:b5:69:ca:49: 02:c4:75:73:72:d5:6b:1a:3c:22:28:6f:5e:9e:08: 6c:78:af:34:a8:47:86:3c:f6:13:93:f7:aa:b4:0c: 57:09:fa:a9:5d:7a:c3:9e:d4:90:95:b9:95:19:e9: 41:e9:7a:8e:06:c5:20:5d:ff:c5:4d:93:cf:aa:73: 5b:56:ff:b4:4e:e2:10:b7:6d:c2:24:42:85:c7:5c: bd:e9:41:e3:38:26:4f:fc:05:c7:c8:58:5f:dd:02: 83:7d:dc:e4:cc:ac:8a:67:f8:43:11:6c:0b:c0:93: 30:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:38:C9:77:2B:C7:6E:85:B7:68:A0:F5:F7:D1:15:90:D3:E1:A3:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d54f46b6-196b-30b2-bf3f-d5830fc1cefb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:bd:9c:bf:0d:df:fd:d9:5a:4e:49:25:80:77:44:ac:61:81: 6a:c8:5a:e0:e8:1b:98:f3:df:ab:b7:fb:a4:0a:20:97:19:9c: 7b:0e:be:2d:72:8e:46:58:bf:4f:f8:bb:81:31:9f:18:7a:92: 05:5f:98:30:1f:76:76:a0:ff:e8:c1:01:8d:9a:3b:32:90:80: 56:80:0c:56:1d:6b:59:e6:02:16:29:c2:2f:66:c3:ae:c1:ae: 39:7e:79:fa:a1:d6:ef:7a:67:c8:74:fa:a0:a6:6f:0c:0f:a7: 75:c0:59:59:7e:0d:00:ec:38:8d:81:04:1b:07:18:78:7c:2d: f7:5a:c9:05:86:85:ec:bf:a1:0a:d3:3f:ed:d4:62:07:fc:0d: d4:5b:57:49:63:25:71:97:a1:ad:42:5d:e1:08:d3:e1:87:51: 7c:30:d1:19:dc:08:0d:c0:e1:6c:f7:62:cc:c2:9d:1d:41:05: c8:62:17:28:78:6e:73:30:c3:17:9f:43:26:60:39:17:8e:8c: 32:60:03:97:05:7f:64:50:6f:f7:fe:4b:c8:25:cf:08:14:87: 99:e8:ae:a4:22:4a:3c:1b:28:c6:fd:78:8e:1e:62:33:5c:ee: 0e:ec:65:bf:39:70:6c:4b:bc:2d:53:c6:21:78:d0:e3:28:70: 18:d0:89:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U01T/OgsF0O1bgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MjRiZDZhMzgtYmFhOC00MzBkLTlkNDYtYmVlNWM2YjMxNDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobzf4ip55sph/fH+dNSXM22w+6FJj+cAQIVN TqQNGVVgcGqAEe4tlzb7tB/iKnvNv+91xDldiW+jobBo5TocWBArhcNffw4dgdlk xKOboyaUGq9PHhQbovybIRw39YyQmtsEeFSv9MRPKzDUVMY5UNrfNLf8CWx5JojF VO2AQLtSgK5Cbiivc86Kb78XEC9Tb7VpykkCxHVzctVrGjwiKG9enghseK80qEeG PPYTk/eqtAxXCfqpXXrDntSQlbmVGelB6XqOBsUgXf/FTZPPqnNbVv+0TuIQt23C JEKFx1y96UHjOCZP/AXHyFhf3QKDfdzkzKyKZ/hDEWwLwJMwiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGw4yXcrx26Ft2ig9ffRFZDT4aNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDU0ZjQ2YjYtMTk2Yi0z MGIyLWJmM2YtZDU4MzBmYzFjZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg31uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD29nL8N3/3ZWk5JJYB3RKxhgWrIWuDoG5jz36u3+6QKIJcZnHsOvi1y jkZYv0/4u4Exnxh6kgVfmDAfdnag/+jBAY2aOzKQgFaADFYda1nmAhYpwi9mw67B rjl+efqh1u96Z8h0+qCmbwwPp3XAWVl+DQDsOI2BBBsHGHh8LfdayQWGhey/oQrT P+3UYgf8DdRbV0ljJXGXoa1CXeEI0+GHUXww0RncCA3A4Wz3YszCnR1BBchiFyh4 bnMwwxefQyZgOReOjDJgA5cFf2RQb/f+S8glzwgUh5norqQiSjwbKMb9eI4eYjNc 7g7sZb85cGxLvC1TxiF40OMocBjQifE= -----END CERTIFICATE-----Generated at Thu Nov 5 14:44:31 2026 by rpki-client