$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/194b8d23-1a34-3d35-882a-848632a85b0b.roa File: 194b8d23-1a34-3d35-882a-848632a85b0b.roa (raw, json) Hash identifier: o12QO5sxSx5vMARKJjsicahMvjZttkZNccRnlzEXz4c= Subject key identifier: 00:B2:A3:BF:77:03:98:00:22:67:90:BA:FF:1F:57:31:81:50:36:80 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F94D3537156C22A9AAC1D3080 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/194b8d23-1a34-3d35-882a-848632a85b0b.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:53:71:56:c2:2a:9a:ac:1d:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=45e771bc-e9d0-4d83-86ea-cd6f54f82cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0b:82:53:85:f0:ab:94:eb:ea:09:51:db:46: eb:5b:52:7f:da:93:6c:ea:c2:6e:c9:26:22:36:de: 6f:74:0b:0b:6e:86:4d:af:23:9b:5a:d7:f8:0e:4a: c0:67:74:18:1e:85:be:8b:8c:ae:6b:88:33:84:22: 32:74:9f:a3:61:b4:4c:b8:33:6a:7f:a8:ea:31:7f: 12:7d:81:32:b0:bb:d6:58:53:68:7d:60:b9:63:62: c3:06:57:46:81:7e:09:94:22:3f:62:a7:77:52:e0: 8d:a4:a9:9b:30:82:26:3a:ad:71:31:72:61:3f:b4: a2:f4:32:59:d0:9c:4c:25:97:0b:e8:e2:ed:e4:f2: 9c:86:66:5b:06:ff:86:7d:ea:b9:f2:12:d9:c4:5c: 5b:06:2c:04:3f:36:8f:fc:96:ad:76:4d:2f:61:62: 6c:95:e8:7a:0c:1b:20:bc:92:95:16:58:6e:42:81: f9:b9:41:a6:e1:8b:53:d7:ab:d8:b2:52:bd:29:64: 1e:b0:ea:9c:2e:39:03:f6:25:09:d3:69:8a:2c:92: 8e:4d:48:07:f1:0a:bd:ee:53:53:df:18:b1:ea:30: f8:3e:30:8c:b6:ae:88:77:36:7a:74:f0:85:3c:70: 7b:74:bf:3c:30:19:cd:39:59:4e:bb:f3:11:71:f9: ab:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B2:A3:BF:77:03:98:00:22:67:90:BA:FF:1F:57:31:81:50:36:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/194b8d23-1a34-3d35-882a-848632a85b0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:08:9c:50:b3:30:8e:85:17:0b:ee:14:68:67:f5:ec:c3:a2: eb:50:d5:f8:ce:99:78:11:cd:ea:00:03:13:5a:4a:72:9a:14: 0d:d6:d0:2c:12:71:43:85:ed:b8:03:7f:b9:d0:9d:70:e7:2f: 7e:49:9d:9c:a0:4d:b2:fb:61:66:45:a0:6c:93:df:8a:51:42: 6d:0e:ac:7b:99:f9:c7:d4:43:3b:60:7b:7f:e4:9b:d4:33:50: 7f:70:1e:d2:97:6c:1a:64:54:59:6d:47:b4:5f:da:a7:2f:39: 89:28:29:8c:79:fb:5a:2b:cf:f0:69:a2:b8:1c:93:51:76:4a: be:02:ee:03:2a:a4:ce:24:81:f5:2b:47:6d:46:77:c5:a4:ab: 8f:6c:92:d8:cd:5c:38:d8:2f:1c:57:12:6c:79:7c:0c:53:54: fe:5a:7e:58:22:ce:a7:55:cf:66:67:1a:3b:cf:4f:85:31:b5: c0:27:94:d9:08:3a:26:06:d3:ff:8c:4d:51:1e:88:e7:65:ab: b0:8e:8f:1f:59:e5:fa:a6:83:c9:17:c2:b5:be:2b:f4:c5:3c: 7b:3c:62:bf:d0:a0:11:0f:58:90:ee:c1:c0:69:2d:33:32:99: 5d:19:f6:54:f1:0a:2b:f6:4a:c3:24:eb:ec:8e:3d:e7:47:d1: a3:3f:39:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U01NxVsIqmqwdMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NDVlNzcxYmMtZTlkMC00ZDgzLTg2ZWEtY2Q2ZjU0ZjgyY2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQuCU4Xwq5Tr6glR20brW1J/2pNs6sJuySYi Nt5vdAsLboZNryObWtf4DkrAZ3QYHoW+i4yua4gzhCIydJ+jYbRMuDNqf6jqMX8S fYEysLvWWFNofWC5Y2LDBldGgX4JlCI/Yqd3UuCNpKmbMIImOq1xMXJhP7Si9DJZ 0JxMJZcL6OLt5PKchmZbBv+Gfeq58hLZxFxbBiwEPzaP/Jatdk0vYWJsleh6DBsg vJKVFlhuQoH5uUGm4YtT16vYslK9KWQesOqcLjkD9iUJ02mKLJKOTUgH8Qq97lNT 3xix6jD4PjCMtq6IdzZ6dPCFPHB7dL88MBnNOVlOu/MRcfmrSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACyo793A5gAImeQuv8fVzGBUDaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMTk0YjhkMjMtMWEzNC0z ZDM1LTg4MmEtODQ4NjMyYTg1YjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg318MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcInFCzMI6FFwvuFGhn9ezDoutQ1fjOmXgRzeoAAxNaSnKaFA3W0CwS cUOF7bgDf7nQnXDnL35JnZygTbL7YWZFoGyT34pRQm0OrHuZ+cfUQztge3/km9Qz UH9wHtKXbBpkVFltR7Rf2qcvOYkoKYx5+1orz/Bporgck1F2Sr4C7gMqpM4kgfUr R21Gd8Wkq49sktjNXDjYLxxXEmx5fAxTVP5aflgizqdVz2ZnGjvPT4UxtcAnlNkI OiYG0/+MTVEeiOdlq7COjx9Z5fqmg8kXwrW+K/TFPHs8Yr/QoBEPWJDuwcBpLTMy mV0Z9lTxCiv2SsMk6+yOPedH0aM/Oa8= -----END CERTIFICATE-----Generated at Sun Nov 15 10:11:51 2026 by rpki-client