$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/03198728-8c41-30ee-b9e7-0c0bed23b10d.roa File: 03198728-8c41-30ee-b9e7-0c0bed23b10d.roa (raw, json) Hash identifier: Lx6QwE8nf2b+5B500S4Y6leQrrd+IvKjL2ZcFT1pgxU= Subject key identifier: 37:82:E8:8D:A2:37:48:A2:41:F2:D2:A6:92:7E:3A:3D:DC:2D:84:B5 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F94D35467F3866D3E2705BD90 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/03198728-8c41-30ee-b9e7-0c0bed23b10d.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:54:67:f3:86:6d:3e:27:05:bd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=8d06e872-1d2e-4905-bade-3b103f854ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0d:ac:70:50:c7:db:4c:1a:de:07:4c:38:4d: 8e:44:23:eb:61:3f:3c:c8:fa:ab:cd:71:48:0b:4d: ff:f8:ff:bd:cb:f2:39:a9:ba:10:d4:51:b6:ad:62: 1c:ff:67:c0:43:a8:43:15:53:3f:47:b1:1f:7c:ac: 3f:49:20:66:8f:17:d7:d6:df:b7:dc:08:95:cc:1b: b5:fe:f2:2e:df:df:06:96:27:a2:1b:4e:ef:0a:31: 4f:f5:92:7a:97:ea:bb:86:28:61:63:4d:d1:72:05: 20:b6:c6:16:96:49:d5:99:e4:da:57:35:62:a9:1e: aa:4a:1b:18:17:ee:a4:ee:54:6a:16:d8:ed:ce:d3: 18:64:8c:02:d4:50:88:8c:7b:8c:3d:c1:2b:b0:d4: 97:d1:ca:62:28:0d:64:0a:a6:ec:0f:97:95:a1:33: 0f:ef:3d:21:9f:dd:4e:e0:5f:4e:4d:67:be:f1:a8: 85:64:9a:80:2c:d2:9d:ed:e0:cc:88:89:46:20:d0: 2c:6e:4b:31:15:d5:9b:66:ae:85:6a:16:42:b0:0c: d1:4c:ff:16:52:06:eb:13:da:ef:a8:ff:c7:c1:32: 36:c7:18:fb:4b:f1:58:53:ad:33:7d:13:d8:37:52: 67:d7:89:76:82:a1:e6:72:9a:52:85:cb:67:6a:20: af:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:82:E8:8D:A2:37:48:A2:41:F2:D2:A6:92:7E:3A:3D:DC:2D:84:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/03198728-8c41-30ee-b9e7-0c0bed23b10d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e6:98:17:cd:9b:5b:9d:39:c7:4f:5c:d8:86:e5:96:d5:88: ed:49:b4:24:3b:1c:95:47:fc:f3:94:a1:a7:8b:fd:5c:69:7e: c3:e7:08:bf:91:c4:b3:04:e6:9f:44:58:fb:18:a3:fa:49:90: f0:fa:04:f9:14:6b:19:e0:7c:d8:f8:00:7e:ba:81:87:aa:22: a3:ee:4a:bd:b1:40:92:e4:ce:8a:42:e3:90:bd:a2:05:15:ab: 86:79:7f:29:14:cd:3f:5e:58:84:62:ad:78:43:9d:7b:a5:c0: c8:20:88:53:a0:82:15:5f:6b:6b:9f:a5:34:6b:21:e5:ea:23: de:d5:58:12:6a:a8:eb:57:76:44:a7:7a:46:54:6e:21:3e:1d: 11:5e:49:86:b4:e4:9b:c7:80:7f:53:0e:72:67:f5:07:bd:70: 18:17:31:ac:03:c9:42:73:4a:04:c9:37:ed:2c:05:a6:b7:ca: 1c:f8:5e:53:ed:5a:9c:67:72:c0:7c:83:70:c9:18:7e:73:8c: 95:98:ee:25:6f:48:76:71:8e:f8:f5:10:be:93:12:b0:90:97: 15:b5:52:e2:68:ce:c2:b2:bc:58:18:0f:4c:23:13:ce:fc:71: e9:6f:58:34:77:bb:d8:a7:fd:10:58:82:7b:6d:5a:86:98:ae: 45:ca:9e:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U01Rn84ZtPicFvZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk OGQwNmU4NzItMWQyZS00OTA1LWJhZGUtM2IxMDNmODU0YWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g2scFDH20wa3gdMOE2ORCPrYT88yPqrzXFI C03/+P+9y/I5qboQ1FG2rWIc/2fAQ6hDFVM/R7EffKw/SSBmjxfX1t+33AiVzBu1 /vIu398GlieiG07vCjFP9ZJ6l+q7hihhY03RcgUgtsYWlknVmeTaVzViqR6qShsY F+6k7lRqFtjtztMYZIwC1FCIjHuMPcErsNSX0cpiKA1kCqbsD5eVoTMP7z0hn91O 4F9OTWe+8aiFZJqALNKd7eDMiIlGINAsbksxFdWbZq6FahZCsAzRTP8WUgbrE9rv qP/HwTI2xxj7S/FYU60zfRPYN1Jn14l2gqHmcppShctnaiCv4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeC6I2iN0iiQfLSppJ+Oj3cLYS1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMDMxOTg3MjgtOGM0MS0z MGVlLWI5ZTctMGMwYmVkMjNiMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg317MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrmmBfNm1udOcdPXNiG5ZbViO1JtCQ7HJVH/POUoaeL/VxpfsPnCL+R xLME5p9EWPsYo/pJkPD6BPkUaxngfNj4AH66gYeqIqPuSr2xQJLkzopC45C9ogUV q4Z5fykUzT9eWIRirXhDnXulwMggiFOgghVfa2ufpTRrIeXqI97VWBJqqOtXdkSn ekZUbiE+HRFeSYa05JvHgH9TDnJn9Qe9cBgXMawDyUJzSgTJN+0sBaa3yhz4XlPt WpxncsB8g3DJGH5zjJWY7iVvSHZxjvj1EL6TErCQlxW1UuJozsKyvFgYD0wjE878 celvWDR3u9in/RBYgnttWoaYrkXKnjU= -----END CERTIFICATE-----Generated at Sun Nov 15 21:28:03 2026 by rpki-client