$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e654915c-c83e-3650-9274-3ac5bd8d7737.roa File: e654915c-c83e-3650-9274-3ac5bd8d7737.roa (raw, json) Hash identifier: 2dQHOQmJCScX7BK396xdOVgBabevHUmXtlaGDy/tW/w= Subject key identifier: D5:0D:52:1E:E6:F1:5D:05:F9:DA:B2:81:02:EA:80:78:DF:FB:AC:0D Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB02D07D354DE6A5F5FE57D80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e654915c-c83e-3650-9274-3ac5bd8d7737.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 54113 IP address blocks: 131.125.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:07:d3:54:de:6a:5f:5f:e5:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=a5dfaf00-ad8b-4b6e-9dd4-c4cd5a56e3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:72:2e:9c:97:89:fc:78:bc:0d:18:34:00:46: b5:d7:d2:9c:44:96:ee:d3:88:9f:97:8a:85:2c:b4: a8:d4:6e:ab:8b:e1:84:9c:54:3d:9a:4a:71:52:25: e8:c6:98:e8:76:c3:ce:8c:08:be:b2:a0:7c:cc:b1: 1a:08:bd:8a:d4:d2:b6:26:e0:46:14:83:07:29:57: 68:f8:44:0d:c2:28:a7:60:6b:bf:79:45:c1:9d:86: 39:7e:ba:bd:c4:13:64:24:a7:3a:68:de:28:cb:08: 77:55:ca:7c:f4:7e:f7:ab:6f:48:68:7e:df:db:1b: aa:2e:3e:35:fb:cd:16:8d:1a:b8:a7:fe:a2:cc:d2: 07:0d:ef:9a:00:df:2d:24:05:da:87:61:4a:d9:86: 41:3a:b6:c4:95:d9:23:9c:40:d0:57:09:e7:45:d4: 91:57:a1:4b:71:3f:30:10:4c:8f:ed:5f:1f:99:1c: 1b:f6:72:90:ce:7b:0c:8a:cb:98:fe:17:5d:6b:66: e0:dd:b4:31:4f:05:44:e9:11:46:a3:a3:a1:d7:72: 7f:89:7e:5c:2b:67:76:be:db:fc:e6:d4:90:f8:55: 96:83:f0:62:55:8a:a1:30:32:80:31:0f:be:31:2a: 72:b7:7d:55:7d:c6:70:ad:73:c7:00:11:3d:3f:ce: 07:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0D:52:1E:E6:F1:5D:05:F9:DA:B2:81:02:EA:80:78:DF:FB:AC:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e654915c-c83e-3650-9274-3ac5bd8d7737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:94:f1:be:2c:6e:2f:59:53:8c:db:b6:03:dd:70:0b:7c:f6: dc:24:7c:f1:87:fc:02:f2:54:23:28:b8:48:84:fd:98:3f:d0: 2d:af:d8:f8:aa:7a:2c:6f:e4:48:21:95:23:73:b7:43:86:e9: 60:40:47:a5:5f:32:ab:86:9a:fe:51:ce:ba:d9:ee:9e:26:15: 58:63:e3:a0:a2:99:f7:d3:80:63:2e:af:6f:26:59:f5:33:a1: 0e:c5:fd:ea:a0:09:49:e5:8d:4d:f2:e6:3a:81:24:32:3d:9c: 8f:89:1b:9d:86:65:bd:49:ec:2c:80:bb:db:93:82:7d:78:90: f1:f5:4d:03:ff:d7:6f:7c:13:73:21:f6:af:b1:95:7e:f2:04: 2e:aa:09:45:5e:1a:cb:2b:e4:9d:90:0b:d7:d4:f9:f6:05:cc: 3a:e3:5f:74:0b:1f:2e:67:30:19:5b:56:a8:37:6d:ae:1f:85: 49:2f:21:7f:ac:0b:9e:a1:56:97:7c:99:0f:d4:b0:c3:5c:35: 45:3e:9f:00:4f:b4:45:c9:d8:b9:bd:7f:f8:44:37:19:cd:d7: be:33:c3:1f:16:a1:87:8f:da:21:b5:cb:c7:17:a2:8b:1b:d4: 04:a1:65:dc:aa:2e:6d:ac:04:4a:86:91:e0:5c:48:93:ee:84: 04:88:3b:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQfTVN5qX1/lfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk YTVkZmFmMDAtYWQ4Yi00YjZlLTlkZDQtYzRjZDVhNTZlM2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnIunJeJ/Hi8DRg0AEa119KcRJbu04ifl4qF LLSo1G6ri+GEnFQ9mkpxUiXoxpjodsPOjAi+sqB8zLEaCL2K1NK2JuBGFIMHKVdo +EQNwiinYGu/eUXBnYY5frq9xBNkJKc6aN4oywh3Vcp89H73q29IaH7f2xuqLj41 +80WjRq4p/6izNIHDe+aAN8tJAXah2FK2YZBOrbEldkjnEDQVwnnRdSRV6FLcT8w EEyP7V8fmRwb9nKQznsMisuY/hdda2bg3bQxTwVE6RFGo6Oh13J/iX5cK2d2vtv8 5tSQ+FWWg/BiVYqhMDKAMQ++MSpyt31VfcZwrXPHABE9P84HaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUNUh7m8V0F+dqygQLqgHjf+6wNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZTY1NDkxNWMtYzgzZS0z NjUwLTkyNzQtM2FjNWJkOGQ3NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg314MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiU8b4sbi9ZU4zbtgPdcAt89twkfPGH/ALyVCMouEiE/Zg/0C2v2Piq eixv5EghlSNzt0OG6WBAR6VfMquGmv5RzrrZ7p4mFVhj46CimffTgGMur28mWfUz oQ7F/eqgCUnljU3y5jqBJDI9nI+JG52GZb1J7CyAu9uTgn14kPH1TQP/1298E3Mh 9q+xlX7yBC6qCUVeGssr5J2QC9fU+fYFzDrjX3QLHy5nMBlbVqg3ba4fhUkvIX+s C56hVpd8mQ/UsMNcNUU+nwBPtEXJ2Lm9f/hENxnN174zwx8WoYeP2iG1y8cXoosb 1AShZdyqLm2sBEqGkeBcSJPuhASIO0U= -----END CERTIFICATE-----Generated at Tue Nov 4 23:10:02 2025 by rpki-client