$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dd65191f-2400-3b1f-84e0-bfcd5b67598a.roa File: dd65191f-2400-3b1f-84e0-bfcd5b67598a.roa (raw, json) Hash identifier: eOEf1MKiaxVLikeW+5Au65GS2LTP8jaM6mjEuYyDvh4= Subject key identifier: D4:7D:AB:9B:79:D8:82:5F:AB:B8:23:90:6C:F8:62:89:D1:90:CF:75 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB02D0497907D4930EAC8EE00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dd65191f-2400-3b1f-84e0-bfcd5b67598a.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 54113 IP address blocks: 131.125.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:04:97:90:7d:49:30:ea:c8:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=6e32f1ee-f7fa-434a-8080-d23f076872d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:71:72:09:eb:82:34:1e:32:66:bc:ba:73:c2: 43:7e:32:fd:e3:c0:a1:eb:a3:df:20:c1:9e:6f:81: 2a:7b:19:c4:09:f3:9c:44:85:74:85:7e:4a:be:cc: 6f:26:19:1c:8d:7e:d4:28:56:82:81:c6:16:a3:00: d9:ef:f6:4e:3c:aa:14:46:a3:eb:86:a8:a8:36:a8: 7f:8a:fd:e1:7d:0b:f6:46:eb:82:60:8f:f3:d3:7d: 43:a6:ca:6e:78:63:fe:f3:ee:e8:7d:18:65:fb:46: 05:81:2f:25:3b:19:a0:46:08:99:c3:62:39:61:f1: b1:f0:62:76:ed:45:59:af:35:46:3d:95:b4:e5:65: a6:93:07:76:19:2b:db:76:51:06:8e:ca:80:cc:7c: b3:25:02:2d:84:e9:87:23:d3:18:e8:5c:9c:97:26: de:8c:65:29:7c:dd:62:6d:1c:25:00:2b:9e:be:ce: 73:5b:cf:7b:d0:65:09:c8:af:d2:f7:d9:19:e8:85: a4:c5:f0:1e:41:8a:f1:f3:cc:36:54:58:81:ec:48: 77:dc:2a:19:22:12:61:1d:2f:10:3f:06:9f:8c:7d: 2f:84:5b:0a:fa:51:86:87:47:82:ef:fb:42:53:b5: cc:8b:82:07:37:74:34:b2:6d:53:8e:ac:f8:92:2e: 6d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7D:AB:9B:79:D8:82:5F:AB:B8:23:90:6C:F8:62:89:D1:90:CF:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dd65191f-2400-3b1f-84e0-bfcd5b67598a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ce:c3:cd:e0:75:e6:da:81:e1:ed:0d:75:30:2e:0b:46:46: 8b:cf:53:6e:3c:93:eb:4a:8b:ec:e2:a5:cd:8c:35:31:fe:ba: 59:27:46:a2:d9:e5:14:5b:a9:f3:01:78:1f:7e:f5:22:b0:1d: 06:95:69:e8:54:01:2f:5d:70:54:59:bd:a0:9a:c8:1a:fb:11: 10:b8:2e:6d:ec:66:03:33:ce:b0:9c:09:34:f9:27:fc:e5:6e: 91:07:01:0c:fe:8b:f9:a7:59:4f:5e:f7:23:4e:c4:42:98:e3: 80:14:9f:18:1b:3e:2e:ea:ea:3f:66:e5:3a:93:dc:d7:6a:17: a6:19:8b:56:0c:2a:ed:33:4f:3b:ad:a9:43:dd:6b:ec:c2:16: 4f:cc:61:90:d8:12:1b:8d:d2:93:7f:e0:15:44:77:03:55:d1: 18:0b:cf:19:e1:d4:07:30:70:25:b3:9d:bb:a5:8c:36:5c:b1: 45:35:dc:ea:ec:2e:97:8a:f8:f0:40:66:52:3d:f3:d4:be:69: 1f:32:cc:0c:b5:0b:85:3d:8c:52:ed:b4:7d:4a:49:ee:34:46: db:44:05:da:b6:8d:2e:57:c9:12:50:56:08:ef:b9:a5:19:ba: 8a:9c:8d:f9:2c:82:05:ec:d5:f4:0b:a6:88:ec:fa:32:b6:21: 7b:3f:ee:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQSXkH1JMOrI7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk NmUzMmYxZWUtZjdmYS00MzRhLTgwODAtZDIzZjA3Njg3MmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnFyCeuCNB4yZry6c8JDfjL948Ch66PfIMGe b4EqexnECfOcRIV0hX5KvsxvJhkcjX7UKFaCgcYWowDZ7/ZOPKoURqPrhqioNqh/ iv3hfQv2RuuCYI/z031DpspueGP+8+7ofRhl+0YFgS8lOxmgRgiZw2I5YfGx8GJ2 7UVZrzVGPZW05WWmkwd2GSvbdlEGjsqAzHyzJQIthOmHI9MY6FyclybejGUpfN1i bRwlACuevs5zW8970GUJyK/S99kZ6IWkxfAeQYrx88w2VFiB7Eh33CoZIhJhHS8Q PwafjH0vhFsK+lGGh0eC7/tCU7XMi4IHN3Q0sm1Tjqz4ki5tDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNR9q5t52IJfq7gjkGz4YonRkM91MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZGQ2NTE5MWYtMjQwMC0z YjFmLTg0ZTAtYmZjZDViNjc1OThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfOw83gdebageHtDXUwLgtGRovPU248k+tKi+zipc2MNTH+ulknRqLZ 5RRbqfMBeB9+9SKwHQaVaehUAS9dcFRZvaCayBr7ERC4Lm3sZgMzzrCcCTT5J/zl bpEHAQz+i/mnWU9e9yNOxEKY44AUnxgbPi7q6j9m5TqT3NdqF6YZi1YMKu0zTzut qUPda+zCFk/MYZDYEhuN0pN/4BVEdwNV0RgLzxnh1AcwcCWznbuljDZcsUU13Ors LpeK+PBAZlI989S+aR8yzAy1C4U9jFLttH1KSe40RttEBdq2jS5XyRJQVgjvuaUZ uoqcjfksggXs1fQLpojs+jK2IXs/7po= -----END CERTIFICATE-----Generated at Wed Nov 5 04:45:21 2025 by rpki-client