$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa File: fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa (raw, json) Hash identifier: os/Cqh1zab5QN02N47Nj6kvZ5wla8IOhf3hRNk9qfKU= Subject key identifier: A8:DC:4A:4E:C0:60:78:43:6D:F4:34:96:75:FC:ED:3B:74:94:EA:96 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584BB02D07B0145B286647CDEBC0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 54113 IP address blocks: 131.125.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:07:b0:14:5b:28:66:47:cd:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=a67c49e7-957c-48ed-a08a-56b0fd890218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6c:a4:7c:be:8a:20:3e:9f:86:98:7c:5d:79: 61:07:46:1c:a2:ac:40:da:8e:ab:60:ae:8e:4d:ab: 05:af:b4:cb:b8:2d:0f:ed:aa:5b:57:53:83:33:b6: 69:6f:01:84:72:13:78:fd:a1:b2:d4:ad:16:a4:87: 9a:5f:49:d3:fd:68:a5:37:3d:c4:06:55:d8:25:b3: 41:42:c8:b2:17:32:c9:1c:08:54:c9:25:3d:59:6d: e4:16:f6:ff:97:af:f6:2e:a5:bf:92:02:ab:df:1a: 25:2e:d8:d0:8e:6e:32:60:a8:cc:ec:e6:e6:d2:90: 2c:31:10:7e:06:84:5f:f6:9c:6d:f2:ac:57:de:cd: d5:89:27:1e:68:b0:e6:22:6b:fe:b7:7e:86:5b:07: e9:5d:7a:4f:5a:9c:10:e3:30:c7:57:f1:53:e8:a0: 6b:80:82:ee:b9:5f:88:42:81:6b:45:d6:07:9e:f3: f4:93:d7:ac:d0:b1:b7:b6:ca:6b:81:40:49:46:02: bd:c4:f1:71:4f:df:ed:9a:c8:88:d2:b5:5b:c1:c1: 42:e1:36:42:77:db:00:31:15:70:01:5e:c6:6d:5a: d0:cf:f8:be:75:36:9c:ad:62:db:df:88:81:cf:d5: 03:3b:e9:8c:d0:db:19:71:fd:51:50:a0:ae:51:d3: 74:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DC:4A:4E:C0:60:78:43:6D:F4:34:96:75:FC:ED:3B:74:94:EA:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c6:2b:eb:b4:a3:4c:e6:dc:97:38:96:23:fb:58:3d:c4:24: 7b:12:7d:d7:ad:d7:26:07:97:ed:6e:93:3b:75:92:87:b7:bb: c6:12:b0:84:cf:d2:19:76:70:c7:8a:cf:5b:a3:02:98:21:e8: a8:53:6b:93:a0:de:81:77:4b:f1:18:7e:04:29:7a:19:be:ba: 0e:ba:2c:4b:68:60:10:a4:38:38:53:31:08:f3:a8:7a:d0:93: f5:4f:77:54:a7:26:d2:a4:1b:75:e5:3b:8f:0d:4c:4d:4a:3c: 01:92:36:a0:70:b0:fe:1f:a7:ae:f8:74:ed:1b:4c:ef:06:3b: f1:b8:a1:4a:4d:4f:d2:42:54:a0:54:27:29:64:b0:44:b6:c8: 04:52:2d:c3:8b:39:9f:26:e7:85:53:11:0e:e8:ec:cc:a7:ae: ea:f6:a8:13:50:44:9e:71:a3:2b:04:13:b9:aa:dd:4d:fa:d4: 57:b6:4e:6e:25:58:85:d9:e7:50:6e:4a:64:2c:b3:c0:85:25: 43:28:b0:e9:50:89:cd:28:0d:ae:8e:2c:b5:b9:fd:e5:ff:2a: c4:28:46:01:28:80:14:17:fb:08:b5:a4:f4:47:ed:bd:90:cf: c8:db:22:be:bc:15:1e:47:a5:d1:08:bf:d0:a5:6d:69:92:c4: cd:3c:d5:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLQewFFsoZkfN68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk YTY3YzQ5ZTctOTU3Yy00OGVkLWEwOGEtNTZiMGZkODkwMjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGykfL6KID6fhph8XXlhB0YcoqxA2o6rYK6O TasFr7TLuC0P7apbV1ODM7ZpbwGEchN4/aGy1K0WpIeaX0nT/WilNz3EBlXYJbNB QsiyFzLJHAhUySU9WW3kFvb/l6/2LqW/kgKr3xolLtjQjm4yYKjM7Obm0pAsMRB+ BoRf9pxt8qxX3s3ViSceaLDmImv+t36GWwfpXXpPWpwQ4zDHV/FT6KBrgILuuV+I QoFrRdYHnvP0k9es0LG3tsprgUBJRgK9xPFxT9/tmsiI0rVbwcFC4TZCd9sAMRVw AV7GbVrQz/i+dTacrWLb34iBz9UDO+mM0NsZcf1RUKCuUdN0UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjcSk7AYHhDbfQ0lnX87Tt0lOqWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZmRkNDc1MGMtZDAxNi0z YjdlLWI2ZjktMWM3MDJmZmJjZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg31sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXGK+u0o0zm3Jc4liP7WD3EJHsSfdet1yYHl+1ukzt1koe3u8YSsITP 0hl2cMeKz1ujApgh6KhTa5Og3oF3S/EYfgQpehm+ug66LEtoYBCkODhTMQjzqHrQ k/VPd1SnJtKkG3XlO48NTE1KPAGSNqBwsP4fp674dO0bTO8GO/G4oUpNT9JCVKBU JylksES2yARSLcOLOZ8m54VTEQ7o7Mynrur2qBNQRJ5xoysEE7mq3U361Fe2Tm4l WIXZ51BuSmQss8CFJUMosOlQic0oDa6OLLW5/eX/KsQoRgEogBQX+wi1pPRH7b2Q z8jbIr68FR5HpdEIv9ClbWmSxM081S4= -----END CERTIFICATE-----Generated at Wed Nov 5 08:36:28 2025 by rpki-client