$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e654915c-c83e-3650-9274-3ac5bd8d7737.roa File: e654915c-c83e-3650-9274-3ac5bd8d7737.roa (raw, json) Hash identifier: lWI1+kqpZ+09E3FrWdfTLa7W60RZvvNi1Hb5xjzcjos= Subject key identifier: AA:81:40:4E:91:81:1D:9F:48:C8:D4:B7:01:97:78:BB:F2:3D:7F:57 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D703FEC4F3F20F7F031F22E80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e654915c-c83e-3650-9274-3ac5bd8d7737.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 54113 IP address blocks: 131.125.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:ec:4f:3f:20:f7:f0:31:f2:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=3e61ba52-19a3-4d8a-86b5-4235d8d3f197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:aa:cc:15:a5:5e:1a:89:c0:7e:7b:91:ee:98: cd:00:9c:63:9b:14:c0:fb:ad:8f:66:d4:2a:1e:52: 46:81:7e:19:0e:12:cd:65:23:89:00:f4:b2:ad:25: 82:73:4b:db:78:47:17:4c:44:16:4e:fb:7b:e8:4f: 06:de:f0:f7:90:b1:a3:67:1e:24:88:4c:6f:11:54: e0:c9:cd:f9:20:52:97:f5:12:01:b9:e8:c1:71:08: d1:de:06:6c:9f:c4:6d:6e:b0:69:43:54:fb:9e:72: 7e:fd:8d:b1:86:60:1c:ac:08:da:cb:5b:45:b4:9d: e4:c7:90:96:63:1e:57:f1:a5:ff:a7:b4:ee:d1:22: 78:24:eb:7f:39:38:0f:25:bc:cb:62:e8:62:de:fd: 91:69:aa:8d:35:63:57:24:48:e8:5d:ed:5a:1a:90: 96:34:60:94:3e:4f:9d:b7:5a:49:22:3f:e7:26:93: 88:96:b1:6a:a4:1d:18:e1:6a:d6:cf:78:65:a0:bd: f3:fe:14:03:92:d7:3a:49:aa:a5:95:ca:ac:cd:0c: 9b:61:7f:3b:c1:16:c5:30:81:ea:7b:96:3c:07:92: f4:c5:d5:95:83:db:c4:9d:98:bc:83:88:58:0b:3c: 82:4c:49:61:50:a1:26:4c:ac:6e:8c:3b:5e:9a:22: 45:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:81:40:4E:91:81:1D:9F:48:C8:D4:B7:01:97:78:BB:F2:3D:7F:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e654915c-c83e-3650-9274-3ac5bd8d7737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:04:da:ac:c7:24:e4:d5:58:15:63:73:cd:a1:e5:49:98:2e: 9c:f7:e1:1e:e3:f0:0b:93:82:6d:a1:37:0d:58:d8:1c:2d:75: da:4b:e9:93:aa:d1:50:1f:06:94:8e:ad:6a:e9:5c:21:94:63: 5c:e3:77:38:d5:14:af:a0:22:c4:52:b4:de:bf:a9:cc:20:20: 19:3e:20:91:82:62:4f:99:d5:66:80:68:b9:e0:b7:29:de:6f: 0c:af:04:9e:3c:2d:93:49:1e:4b:30:f8:e9:60:11:94:fc:49: b3:f3:14:8d:21:61:e8:79:74:8c:ec:c9:00:12:30:4a:ce:45: d7:27:72:5b:4d:5d:39:d1:42:14:79:4f:d0:54:f0:9d:23:8d: b0:a8:09:df:4e:1b:a8:fd:a3:fb:a9:64:81:9c:eb:28:1d:7c: fa:0d:42:34:9d:19:ac:10:ed:0c:1f:bb:f4:05:65:ee:34:03: bf:80:27:63:e7:9c:f3:83:d3:d1:3f:1b:fd:de:e6:51:4a:05: 3d:f6:c3:80:09:4c:7b:40:48:5d:b9:fc:d8:59:09:38:58:d6: 4f:dd:a8:56:cd:01:28:af:6f:8a:ff:07:f3:fd:76:b6:af:90: d2:5f:14:7e:a2:72:63:06:7f:ac:30:ef:6a:1d:da:94:1a:8d: 58:54:0d:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+xPPyD38DHyLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk M2U2MWJhNTItMTlhMy00ZDhhLTg2YjUtNDIzNWQ4ZDNmMTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqrMFaVeGonAfnuR7pjNAJxjmxTA+62PZtQq HlJGgX4ZDhLNZSOJAPSyrSWCc0vbeEcXTEQWTvt76E8G3vD3kLGjZx4kiExvEVTg yc35IFKX9RIBuejBcQjR3gZsn8RtbrBpQ1T7nnJ+/Y2xhmAcrAjay1tFtJ3kx5CW Yx5X8aX/p7Tu0SJ4JOt/OTgPJbzLYuhi3v2RaaqNNWNXJEjoXe1aGpCWNGCUPk+d t1pJIj/nJpOIlrFqpB0Y4WrWz3hloL3z/hQDktc6SaqllcqszQybYX87wRbFMIHq e5Y8B5L0xdWVg9vEnZi8g4hYCzyCTElhUKEmTKxujDtemiJFbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqBQE6RgR2fSMjUtwGXeLvyPX9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZTY1NDkxNWMtYzgzZS0z NjUwLTkyNzQtM2FjNWJkOGQ3NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg314MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEE2qzHJOTVWBVjc82h5UmYLpz34R7j8AuTgm2hNw1Y2BwtddpL6ZOq 0VAfBpSOrWrpXCGUY1zjdzjVFK+gIsRStN6/qcwgIBk+IJGCYk+Z1WaAaLngtyne bwyvBJ48LZNJHksw+OlgEZT8SbPzFI0hYeh5dIzsyQASMErORdcncltNXTnRQhR5 T9BU8J0jjbCoCd9OG6j9o/upZIGc6ygdfPoNQjSdGawQ7Qwfu/QFZe40A7+AJ2Pn nPOD09E/G/3e5lFKBT32w4AJTHtASF25/NhZCThY1k/dqFbNASivb4r/B/P9drav kNJfFH6icmMGf6ww72od2pQajVhUDQY= -----END CERTIFICATE-----Generated at Fri Apr 17 13:55:11 2026 by rpki-client