$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6ea8b981-1cc6-373b-8172-08d7a05b2a72.roa File: 6ea8b981-1cc6-373b-8172-08d7a05b2a72.roa (raw, json) Hash identifier: 3QBYOzCTBlevPUhG3HeEoT8bAWT/Ymc81+2sjpl0C0Y= Subject key identifier: FE:51:86:B8:34:62:72:1F:48:47:87:A5:58:07:5F:A9:36:21:14:19 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F94D353E66CF3546D8EEEF600 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6ea8b981-1cc6-373b-8172-08d7a05b2a72.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:53:e6:6c:f3:54:6d:8e:ee:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=8f7cbde0-c186-4c4c-a960-d4507e85792e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8a:df:95:d9:96:c5:96:60:42:f2:8b:cc:12: 43:c1:03:5a:75:7d:84:5b:d9:25:3b:b8:fd:a9:8c: 4e:84:28:5b:61:b3:ff:c7:20:87:d1:5a:4a:fe:be: aa:4f:5f:bf:04:e6:a9:97:f5:60:e0:75:ec:5b:52: 59:73:53:ba:d3:66:dc:c4:da:6f:d9:2d:05:a5:a9: f5:a2:e7:2c:c6:fe:17:25:b9:29:49:d9:b0:2a:2f: f2:de:ae:93:88:38:50:64:f3:52:78:51:89:7e:9a: 0c:3f:09:e0:55:94:9d:82:61:9c:b5:ad:14:06:9f: 56:4b:0e:41:ba:4b:12:6f:5e:27:04:fb:a7:ee:4c: 14:1b:48:57:43:d3:8f:38:1f:f7:b2:ec:52:17:ff: a8:74:b0:25:6c:99:bf:ca:ab:05:3f:bb:2d:4e:cb: 9e:ed:9a:da:1a:62:1a:4e:ae:7a:82:de:ba:71:aa: ff:bb:f9:b1:90:ff:36:5c:b0:dc:54:ec:85:40:e6: 3b:46:de:7b:dd:7a:18:f7:b7:10:b9:10:40:22:6f: 71:25:8b:85:ca:7e:4d:6a:57:8e:e0:86:ae:de:88: e1:3d:b2:34:c2:c3:df:5f:a8:02:d6:6b:a7:32:f6: f3:41:a6:96:5d:3a:d3:c3:94:ee:50:c1:8b:17:6d: f4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:51:86:B8:34:62:72:1F:48:47:87:A5:58:07:5F:A9:36:21:14:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/6ea8b981-1cc6-373b-8172-08d7a05b2a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:33:71:c6:53:c0:cf:c9:1a:3f:32:2e:7a:f4:07:62:d0:18: 60:79:20:7c:7c:7a:3e:1c:36:35:d7:bd:cd:5c:cb:ca:88:16: 42:b0:77:75:54:f0:e5:76:0c:e9:65:57:40:20:d5:bc:9d:05: 3c:a2:9f:af:11:37:2c:06:ff:a6:c0:aa:9d:69:81:05:ac:3c: b1:95:33:91:9c:00:89:1a:fd:44:d6:8a:68:32:0b:4e:e2:9f: 15:fd:5f:66:14:d9:75:cd:67:8e:f1:d8:19:55:57:55:62:f5: 49:6f:6c:f8:5d:1e:12:2b:89:3d:c3:60:61:77:9d:28:e2:5e: 7c:01:d0:85:e8:2c:67:34:b1:03:25:06:8f:6d:27:d8:78:56: c7:b5:54:22:6c:36:6c:90:05:be:1f:c4:54:cc:58:db:d1:c1: 03:5c:2b:6c:07:dd:f9:0d:d9:69:e4:c8:fe:e4:21:33:6d:f4: 73:b3:26:60:4d:f1:ec:ef:fd:dd:02:2b:9c:db:fe:b9:79:5a: cd:2d:57:9c:8f:8d:f9:ef:d1:7e:c0:d7:07:a5:04:6d:f8:2e: e9:6e:29:2f:49:c3:58:75:e9:b1:b4:55:94:7c:2d:b2:5b:33: 91:5e:f4:e8:2c:1f:75:67:bf:14:3d:c8:9a:0e:36:14:dd:5b: e1:9c:06:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U01PmbPNUbY7u9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk OGY3Y2JkZTAtYzE4Ni00YzRjLWE5NjAtZDQ1MDdlODU3OTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YrfldmWxZZgQvKLzBJDwQNadX2EW9klO7j9 qYxOhChbYbP/xyCH0VpK/r6qT1+/BOapl/Vg4HXsW1JZc1O602bcxNpv2S0Fpan1 oucsxv4XJbkpSdmwKi/y3q6TiDhQZPNSeFGJfpoMPwngVZSdgmGcta0UBp9WSw5B uksSb14nBPun7kwUG0hXQ9OPOB/3suxSF/+odLAlbJm/yqsFP7stTsue7ZraGmIa Tq56gt66car/u/mxkP82XLDcVOyFQOY7Rt573XoY97cQuRBAIm9xJYuFyn5NaleO 4Iau3ojhPbI0wsPfX6gC1munMvbzQaaWXTrTw5TuUMGLF230zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5Rhrg0YnIfSEeHpVgHX6k2IRQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNmVhOGI5ODEtMWNjNi0z NzNiLTgxNzItMDhkN2EwNWIyYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFozccZTwM/JGj8yLnr0B2LQGGB5IHx8ej4cNjXXvc1cy8qIFkKwd3VU 8OV2DOllV0Ag1bydBTyin68RNywG/6bAqp1pgQWsPLGVM5GcAIka/UTWimgyC07i nxX9X2YU2XXNZ47x2BlVV1Vi9UlvbPhdHhIriT3DYGF3nSjiXnwB0IXoLGc0sQMl Bo9tJ9h4Vse1VCJsNmyQBb4fxFTMWNvRwQNcK2wH3fkN2WnkyP7kITNt9HOzJmBN 8ezv/d0CK5zb/rl5Ws0tV5yPjfnv0X7A1welBG34LuluKS9Jw1h16bG0VZR8LbJb M5Fe9OgsH3VnvxQ9yJoONhTdW+GcBgU= -----END CERTIFICATE-----Generated at Sun Nov 15 11:38:07 2026 by rpki-client