$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f6cad047-d208-3248-9d0b-1f4c1c1c7fd0.roa File: f6cad047-d208-3248-9d0b-1f4c1c1c7fd0.roa (raw, json) Hash identifier: GBCN7q09aAkiS1KoF3MRcr39sEq8J4udSOUqcMuRDUY= Subject key identifier: 96:63:3D:C1:91:BD:B6:53:F0:AD:6B:89:4E:5B:F7:A1:F5:27:87:8C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584D703FEB36F78D03BE23AD6080 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f6cad047-d208-3248-9d0b-1f4c1c1c7fd0.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 54113 IP address blocks: 131.125.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:eb:36:f7:8d:03:be:23:ad:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=90f5d0bd-28b8-43b1-95e7-230efc945a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:30:55:f5:bf:19:25:4a:13:f3:11:64:4c:6b: d6:18:ec:57:7f:af:e0:e9:d4:ff:46:d5:85:9f:e1: eb:31:a7:00:c5:9b:ee:47:89:08:31:d7:72:33:ee: 32:e1:75:8d:bd:a9:f3:64:dc:5e:3f:b8:51:89:a7: 3e:22:6f:82:bd:1b:81:ff:c3:63:3b:94:34:68:b5: 7b:ea:86:30:a7:e6:67:b2:4e:c6:3f:aa:b1:aa:03: 14:15:f7:e9:9d:b2:b8:34:44:5a:51:ee:47:c3:27: dd:02:0f:36:1e:cd:69:73:45:5b:68:20:bb:d3:5c: ee:95:ea:c2:bb:27:7e:d0:be:cb:a9:04:51:9d:a9: d9:31:3e:61:47:d1:38:0f:c6:4b:58:8c:37:31:2f: af:11:ef:51:84:d6:0f:ba:59:47:19:12:2d:33:eb: 14:e0:99:24:48:bc:bf:0d:39:9f:5a:d1:29:df:b0: 81:c8:17:20:b1:23:df:8b:30:29:e6:e6:eb:d8:9f: 94:4f:a8:0a:d0:fd:62:60:64:54:3e:0c:ea:be:cd: c2:20:92:70:f4:4e:79:c4:67:0c:7a:1f:9c:cb:90: d8:59:cc:ee:24:d6:d2:6f:c6:49:95:b4:e1:63:de: 73:66:7c:c6:26:f9:5f:62:06:05:77:09:e4:e5:70: a2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:63:3D:C1:91:BD:B6:53:F0:AD:6B:89:4E:5B:F7:A1:F5:27:87:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f6cad047-d208-3248-9d0b-1f4c1c1c7fd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b3:13:4e:3c:cd:15:95:11:65:79:89:ab:c9:97:6c:2b:61: 39:17:52:70:ad:af:61:fa:51:db:06:74:67:b8:51:ce:8c:56: 6c:a9:03:08:f9:5a:04:78:be:4b:8a:c8:e1:99:56:68:e8:d2: 57:6c:72:db:4c:8c:53:36:f1:96:a4:cd:fe:44:10:17:47:1f: ab:94:dc:8a:68:10:41:b2:8f:69:56:3c:ee:14:49:b9:c8:22: 05:c7:11:00:ed:d1:1e:f3:bb:95:0c:0c:14:20:af:a7:5c:10: 38:e4:1f:bb:9f:83:52:21:da:f8:06:2c:9f:aa:69:9a:4c:4d: bc:67:81:6a:34:6c:80:49:3a:75:80:e3:1b:7f:13:41:11:fd: f8:64:23:07:39:76:71:65:40:9e:52:98:ea:99:cc:d7:9b:1c: 97:f7:7b:32:0c:2c:c8:0d:23:96:27:c3:00:68:16:12:4a:14: b8:3f:ed:f1:c6:b5:0c:00:23:86:f0:a9:6f:d2:31:c5:67:e2: 2f:0f:74:34:90:42:ac:bc:18:ac:03:b7:22:76:a5:ff:2b:c0: 5e:92:37:66:8d:b9:32:52:ea:14:09:1b:04:e8:58:4e:e9:ee: f7:bb:c2:4e:40:4a:67:72:64:5d:d8:26:d0:22:8d:4c:af:d5: d4:ab:4c:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+s2940DviOtYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk OTBmNWQwYmQtMjhiOC00M2IxLTk1ZTctMjMwZWZjOTQ1YTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDBV9b8ZJUoT8xFkTGvWGOxXf6/g6dT/RtWF n+HrMacAxZvuR4kIMddyM+4y4XWNvanzZNxeP7hRiac+Im+CvRuB/8NjO5Q0aLV7 6oYwp+Znsk7GP6qxqgMUFffpnbK4NERaUe5HwyfdAg82Hs1pc0VbaCC701zulerC uyd+0L7LqQRRnanZMT5hR9E4D8ZLWIw3MS+vEe9RhNYPullHGRItM+sU4JkkSLy/ DTmfWtEp37CByBcgsSPfizAp5ubr2J+UT6gK0P1iYGRUPgzqvs3CIJJw9E55xGcM eh+cy5DYWczuJNbSb8ZJlbThY95zZnzGJvlfYgYFdwnk5XCi8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZjPcGRvbZT8K1riU5b96H1J4eMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZjZjYWQwNDctZDIwOC0z MjQ4LTlkMGItMWY0YzFjMWM3ZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFizE048zRWVEWV5iavJl2wrYTkXUnCtr2H6UdsGdGe4Uc6MVmypAwj5 WgR4vkuKyOGZVmjo0ldscttMjFM28Zakzf5EEBdHH6uU3IpoEEGyj2lWPO4USbnI IgXHEQDt0R7zu5UMDBQgr6dcEDjkH7ufg1Ih2vgGLJ+qaZpMTbxngWo0bIBJOnWA 4xt/E0ER/fhkIwc5dnFlQJ5SmOqZzNebHJf3ezIMLMgNI5YnwwBoFhJKFLg/7fHG tQwAI4bwqW/SMcVn4i8PdDSQQqy8GKwDtyJ2pf8rwF6SN2aNuTJS6hQJGwToWE7p 7ve7wk5ASmdyZF3YJtAijUyv1dSrTEQ= -----END CERTIFICATE-----Generated at Fri Apr 17 12:37:56 2026 by rpki-client