$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/914009a0-531c-33eb-b2c6-005e1809d476.roa File: 914009a0-531c-33eb-b2c6-005e1809d476.roa (raw, json) Hash identifier: 9qV4eUZ+0iaqdkPhbZjj2tOTql+uzvs5nVvSET8qZuk= Subject key identifier: 67:BE:58:74:4C:D0:F7:89:91:92:A9:90:76:05:37:2E:BD:C7:4D:78 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584E5084A64CC592DB864AF8B280 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/914009a0-531c-33eb-b2c6-005e1809d476.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 54113 IP address blocks: 131.125.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:a6:4c:c5:92:db:86:4a:f8:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=7c69914c-2b3c-460c-98ed-40312b59dd77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ba:58:ec:77:87:2d:d8:d7:ea:e1:81:6d:08: da:f7:de:8f:32:29:89:c4:bb:ac:81:06:cb:bb:29: 34:43:b9:53:14:34:12:b8:2e:ee:c4:13:71:37:cc: 99:1b:fa:86:7a:06:52:50:52:52:f9:3b:e9:b8:b3: 13:c3:95:d5:df:ef:ed:e8:e7:8f:a8:9c:0d:af:27: 6e:14:2f:d2:87:59:30:cc:b1:9a:57:90:6a:69:57: a8:9b:e2:fa:7a:55:d0:7e:e8:90:9a:fa:81:1f:a3: 97:da:b0:cd:68:c9:c0:bc:2b:bc:a2:2e:ad:3b:da: f8:c3:b3:20:b4:8a:65:15:ca:55:6f:fd:7c:1f:c8: 2f:19:41:db:9a:bb:52:34:31:e7:c2:18:4d:ed:e8: 3c:ac:31:f9:34:7a:49:cd:4f:e0:ca:58:26:dc:3e: 32:3f:5c:2e:62:9d:3d:40:7a:2f:20:8c:03:00:c6: f3:fa:2b:a8:9c:e4:cc:08:15:fb:e9:94:f8:58:85: ff:9a:7f:18:1c:00:4c:fa:5c:bf:cd:16:44:ae:9e: 44:13:5e:2c:b1:3d:6e:00:34:4a:f7:9f:b4:18:26: e7:84:45:f1:a4:64:54:bc:1a:1e:32:2d:78:6a:3f: 1f:a2:03:61:c1:33:05:0a:25:b9:93:94:49:dd:21: ea:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BE:58:74:4C:D0:F7:89:91:92:A9:90:76:05:37:2E:BD:C7:4D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/914009a0-531c-33eb-b2c6-005e1809d476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e6:9a:70:90:f7:20:d8:13:47:05:a4:fc:d1:db:ac:e6:98: f6:9d:70:24:f6:17:b7:8e:2a:e5:83:db:4d:e7:43:e9:d4:00: 8c:3d:42:8a:85:4a:db:e2:1e:f7:1d:fe:ae:40:8b:b6:1f:2b: 02:a1:66:bb:d3:f6:93:bb:72:2e:aa:ca:0d:54:a1:05:30:ef: 0d:73:25:cd:58:3e:79:19:3d:b4:d0:07:60:1d:8f:ac:2b:d7: a6:6c:3e:eb:cf:1e:49:d3:05:f0:81:30:77:f9:90:b9:99:cd: 56:00:38:55:91:07:a3:8d:ff:eb:b8:f0:a2:4d:15:91:ce:d7: fe:27:98:53:9f:d0:d0:30:69:70:a7:14:c9:09:91:3a:58:6e: 1c:2a:2d:14:d7:11:c5:4c:ad:40:62:fa:ed:1a:c6:cf:5c:c5: 3d:1d:90:f2:f2:cd:e3:ef:ac:34:95:fc:eb:cb:bf:2a:a1:13: 20:eb:d5:85:06:6b:d2:79:63:36:d7:4f:0d:c2:c4:34:62:6f: 88:06:e6:d6:35:32:24:49:40:6a:ee:07:7d:f8:d3:0d:85:1e: e7:e8:bf:ed:04:12:ef:b1:d2:b4:ea:ca:2a:ec:62:14:38:c8: 8c:f1:aa:42:9b:a2:0f:b0:c0:c3:ca:75:85:d9:c5:64:ca:94: 10:cb:05:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhKZMxZLbhkr4soAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk N2M2OTkxNGMtMmIzYy00NjBjLTk4ZWQtNDAzMTJiNTlkZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbpY7HeHLdjX6uGBbQja996PMimJxLusgQbL uyk0Q7lTFDQSuC7uxBNxN8yZG/qGegZSUFJS+TvpuLMTw5XV3+/t6OePqJwNrydu FC/Sh1kwzLGaV5BqaVeom+L6elXQfuiQmvqBH6OX2rDNaMnAvCu8oi6tO9r4w7Mg tIplFcpVb/18H8gvGUHbmrtSNDHnwhhN7eg8rDH5NHpJzU/gylgm3D4yP1wuYp09 QHovIIwDAMbz+iuonOTMCBX76ZT4WIX/mn8YHABM+ly/zRZErp5EE14ssT1uADRK 95+0GCbnhEXxpGRUvBoeMi14aj8fogNhwTMFCiW5k5RJ3SHquQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGe+WHRM0PeJkZKpkHYFNy69x014MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTE0MDA5YTAtNTMxYy0z M2ViLWIyYzYtMDA1ZTE4MDlkNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/mmnCQ9yDYE0cFpPzR26zmmPadcCT2F7eOKuWD203nQ+nUAIw9QoqF StviHvcd/q5Ai7YfKwKhZrvT9pO7ci6qyg1UoQUw7w1zJc1YPnkZPbTQB2Adj6wr 16ZsPuvPHknTBfCBMHf5kLmZzVYAOFWRB6ON/+u48KJNFZHO1/4nmFOf0NAwaXCn FMkJkTpYbhwqLRTXEcVMrUBi+u0axs9cxT0dkPLyzePvrDSV/OvLvyqhEyDr1YUG a9J5YzbXTw3CxDRib4gG5tY1MiRJQGruB3340w2FHufov+0EEu+x0rTqyirsYhQ4 yIzxqkKbog+wwMPKdYXZxWTKlBDLBcA= -----END CERTIFICATE-----Generated at Sat Jul 18 02:58:11 2026 by rpki-client