$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/458d08ae-db95-35c8-a848-dba5242c611e.roa File: 458d08ae-db95-35c8-a848-dba5242c611e.roa (raw, json) Hash identifier: fDQuvrmUDAknbTQlhfctljCdma3STLSbj5HmfelPGX4= Subject key identifier: 25:71:00:72:65:E4:74:01:0E:32:A8:6B:D6:13:67:22:62:4B:2F:CF Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584E5084A55AF5237E7C1BDEF200 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/458d08ae-db95-35c8-a848-dba5242c611e.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 54113 IP address blocks: 131.125.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:a5:5a:f5:23:7e:7c:1b:de:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=985ab734-e17a-4767-9cb5-f44b6e7c859e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b0:f7:25:6b:2a:26:5a:7e:42:8a:0e:24:35: 4d:71:d8:81:66:8f:4c:4f:7e:5f:b0:50:9f:46:63: 07:97:dc:38:65:78:65:a3:d1:f5:99:f7:98:63:15: fe:fe:e0:2f:2b:7e:7d:89:a7:56:27:04:a7:68:4d: d0:57:51:3b:f1:88:62:e1:d0:bf:6a:b5:ae:ae:d0: 4a:5f:23:8d:b3:ee:90:b9:11:de:5d:ff:70:96:81: 03:b9:4f:ca:7b:b4:6d:43:fb:5b:c8:3e:47:81:0b: 2c:2d:29:ff:ce:4a:06:36:be:11:72:fe:b9:e3:1b: 71:c7:f8:c0:c0:6f:50:78:5f:f1:d1:74:a8:0d:ef: 0e:d1:32:a0:a3:6e:b1:70:02:16:cf:7e:2f:1c:63: b3:f7:71:8f:4c:68:e8:61:2c:98:df:e6:9f:f3:32: 7c:a2:8b:98:7c:2d:af:cb:1f:8e:42:36:1f:a2:4d: 51:e5:34:52:52:77:f7:e6:30:d7:43:83:0f:a0:ec: 8a:4e:54:b4:a4:f6:96:9e:3a:4c:36:20:2d:b7:72: d7:19:01:43:26:57:ca:20:99:9d:fb:bf:c9:ee:0a: 80:f1:f6:97:cf:c4:a0:35:a2:bb:77:1d:95:a9:a9: 18:9e:bc:8e:34:b9:b3:98:a7:3d:e3:83:e4:79:8c: 54:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:71:00:72:65:E4:74:01:0E:32:A8:6B:D6:13:67:22:62:4B:2F:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/458d08ae-db95-35c8-a848-dba5242c611e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:cb:2a:ec:58:06:63:28:67:41:60:38:8b:86:6e:b1:08:fe: 8b:76:7a:1b:b4:c7:c1:c8:6c:f5:16:75:2f:62:5d:61:75:70: ef:1b:5a:9d:ac:bc:22:6c:8e:e1:79:86:25:e4:40:7f:78:31: ce:b6:ab:ff:a3:90:0f:a4:0d:83:14:69:b8:d3:2f:60:52:e0: 9c:69:99:72:70:09:89:1b:ca:a6:ff:19:01:ea:1d:0e:71:dc: d2:8d:ef:2b:ce:de:21:13:7d:59:24:59:d0:0d:9d:cd:88:f7: e1:3e:4d:65:c6:a7:d6:ca:ea:e3:05:2c:08:dd:14:81:c7:dc: 87:dc:d5:dc:0c:dd:8f:88:d7:f8:5a:e0:d0:65:5c:d6:e0:d7: ff:a7:5e:84:b3:39:a0:6e:d2:17:90:e2:24:fc:94:3e:26:ff: 0a:ce:bd:f6:de:95:49:f5:41:76:79:a7:b3:00:7b:cb:11:cc: d9:d9:5d:1d:44:70:a3:f5:19:54:80:bd:fa:31:2f:4f:68:58: b2:9a:13:e0:a9:40:f9:7b:7a:09:f9:ff:0e:88:78:19:ad:df: 00:8a:b5:fa:cd:23:b3:06:2a:7a:f3:a7:1b:80:8d:a9:0a:49: 3e:2e:34:f3:b3:13:86:b2:7f:1a:96:b0:30:9b:20:0c:61:7c: 17:4e:81:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhKVa9SN+fBve8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk OTg1YWI3MzQtZTE3YS00NzY3LTljYjUtZjQ0YjZlN2M4NTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrD3JWsqJlp+QooOJDVNcdiBZo9MT35fsFCf RmMHl9w4ZXhlo9H1mfeYYxX+/uAvK359iadWJwSnaE3QV1E78Yhi4dC/arWurtBK XyONs+6QuRHeXf9wloEDuU/Ke7RtQ/tbyD5HgQssLSn/zkoGNr4Rcv654xtxx/jA wG9QeF/x0XSoDe8O0TKgo26xcAIWz34vHGOz93GPTGjoYSyY3+af8zJ8oouYfC2v yx+OQjYfok1R5TRSUnf35jDXQ4MPoOyKTlS0pPaWnjpMNiAtt3LXGQFDJlfKIJmd +7/J7gqA8faXz8SgNaK7dx2VqakYnryONLmzmKc944PkeYxUpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVxAHJl5HQBDjKoa9YTZyJiSy/PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDU4ZDA4YWUtZGI5NS0z NWM4LWE4NDgtZGJhNTI0MmM2MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjLKuxYBmMoZ0FgOIuGbrEI/ot2ehu0x8HIbPUWdS9iXWF1cO8bWp2s vCJsjuF5hiXkQH94Mc62q/+jkA+kDYMUabjTL2BS4JxpmXJwCYkbyqb/GQHqHQ5x 3NKN7yvO3iETfVkkWdANnc2I9+E+TWXGp9bK6uMFLAjdFIHH3Ifc1dwM3Y+I1/ha 4NBlXNbg1/+nXoSzOaBu0heQ4iT8lD4m/wrOvfbelUn1QXZ5p7MAe8sRzNnZXR1E cKP1GVSAvfoxL09oWLKaE+CpQPl7egn5/w6IeBmt3wCKtfrNI7MGKnrzpxuAjakK ST4uNPOzE4ayfxqWsDCbIAxhfBdOgZM= -----END CERTIFICATE-----Generated at Sat Jul 18 02:56:36 2026 by rpki-client