$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/99ea3585-6244-37b0-a389-c797f3d06eb0.roa File: 99ea3585-6244-37b0-a389-c797f3d06eb0.roa (raw, json) Hash identifier: UJyC35DedjZMUQdt8l3XCECYtZ2ONbAKNNJ+zVGerLg= Subject key identifier: 2D:0E:99:D1:94:6B:03:01:E2:18:17:62:27:79:C5:3B:CA:D7:D6:BA Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F94D3534E15DF08B76C46F400 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/99ea3585-6244-37b0-a389-c797f3d06eb0.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:53:4e:15:df:08:b7:6c:46:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=602d5298-67fe-4623-8899-6df3cd9d99ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cc:14:61:84:2e:6c:2b:00:2b:c4:d4:5b:51: 40:70:bd:b0:91:8e:3b:8d:62:5b:0b:d0:62:95:e0: ef:67:09:42:a9:83:bd:fe:53:01:11:71:a9:bf:84: b1:a0:00:b2:49:04:b9:43:19:d1:c2:7b:41:2c:bf: 2e:15:da:22:1d:b0:29:c4:ed:6a:d2:f5:62:1a:dc: 43:f1:f3:b5:b5:b0:90:08:91:b9:95:28:71:86:51: 14:69:fc:0f:e8:09:22:68:6c:d6:71:25:28:ae:1b: ed:55:0a:20:fa:83:bf:da:b1:83:bc:b0:bb:16:d8: cd:00:90:16:ad:31:b4:16:57:92:3b:d9:62:84:c3: fe:57:6f:a6:a3:d1:8c:52:e4:56:14:d5:61:a3:02: 6d:25:46:ea:5b:bb:49:e1:18:70:79:74:ce:f0:3a: e3:d5:47:ba:1d:8b:68:ab:d6:07:8e:ea:3c:f4:86: 5e:a1:a7:a5:82:47:9f:bf:97:d8:07:d8:85:5e:27: 11:e8:57:f8:ee:74:a2:b4:74:db:1a:ed:37:53:8e: 37:10:4a:27:f9:a8:ec:15:42:63:f1:90:23:53:12: 66:24:38:e4:5f:38:6c:90:d8:b4:f1:53:7c:21:2a: 31:12:e9:eb:0b:17:6c:2b:8e:9d:3e:55:b4:d5:d3: 46:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0E:99:D1:94:6B:03:01:E2:18:17:62:27:79:C5:3B:CA:D7:D6:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/99ea3585-6244-37b0-a389-c797f3d06eb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c8:3e:00:0a:fa:d0:0a:27:4d:98:cf:a2:d8:97:3f:0c:df: 6f:45:e1:be:62:18:3c:ca:ea:6b:8a:67:ed:64:3c:3d:24:65: 1a:c5:bb:0e:b4:75:a7:ec:ee:c4:7c:6f:07:d1:37:cf:00:7f: 68:b4:3d:df:37:57:6f:20:38:2a:2d:c2:24:85:0e:33:4c:25: 2f:6b:ce:0d:11:cc:79:c2:df:e8:7d:c6:26:0a:bd:ca:a5:90: 2b:08:dc:20:5d:ef:58:9f:76:e7:41:2e:3c:e2:f3:a4:2f:fc: 80:0c:fc:30:08:16:5f:ed:16:88:95:f7:f6:e4:66:d5:d1:1f: 88:eb:65:b3:c5:06:4f:15:3d:c4:38:ad:54:f2:bc:35:30:75: 10:d7:b6:7b:ae:cd:6e:da:dc:61:7a:42:c5:9f:41:56:a5:49: db:b1:2f:a1:67:6e:4d:68:8c:8e:e7:e0:c5:05:63:9f:0c:fc: b2:61:a3:38:5c:0b:d0:c7:89:52:53:59:d7:ee:4e:0c:9c:71: 7e:d4:a7:04:00:a4:39:df:24:70:a0:b2:17:d7:2f:70:de:5c: a0:dc:38:3e:6f:f7:02:a1:c4:c9:d1:2c:0d:6b:69:de:a8:dd: 34:28:2f:28:c2:ca:85:43:81:40:84:ae:05:da:f5:b1:e2:8e: d5:7e:f4:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U01NOFd8It2xG9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NjAyZDUyOTgtNjdmZS00NjIzLTg4OTktNmRmM2NkOWQ5OWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMwUYYQubCsAK8TUW1FAcL2wkY47jWJbC9Bi leDvZwlCqYO9/lMBEXGpv4SxoACySQS5QxnRwntBLL8uFdoiHbApxO1q0vViGtxD 8fO1tbCQCJG5lShxhlEUafwP6AkiaGzWcSUorhvtVQog+oO/2rGDvLC7FtjNAJAW rTG0FleSO9lihMP+V2+mo9GMUuRWFNVhowJtJUbqW7tJ4RhweXTO8Drj1Ue6HYto q9YHjuo89IZeoaelgkefv5fYB9iFXicR6Ff47nSitHTbGu03U443EEon+ajsFUJj 8ZAjUxJmJDjkXzhskNi08VN8ISoxEunrCxdsK46dPlW01dNGRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0OmdGUawMB4hgXYid5xTvK19a6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTllYTM1ODUtNjI0NC0z N2IwLWEzODktYzc5N2YzZDA2ZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg314MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjIPgAK+tAKJ02Yz6LYlz8M329F4b5iGDzK6muKZ+1kPD0kZRrFuw60 dafs7sR8bwfRN88Af2i0Pd83V28gOCotwiSFDjNMJS9rzg0RzHnC3+h9xiYKvcql kCsI3CBd71ifdudBLjzi86Qv/IAM/DAIFl/tFoiV9/bkZtXRH4jrZbPFBk8VPcQ4 rVTyvDUwdRDXtnuuzW7a3GF6QsWfQValSduxL6Fnbk1ojI7n4MUFY58M/LJhozhc C9DHiVJTWdfuTgyccX7UpwQApDnfJHCgshfXL3DeXKDcOD5v9wKhxMnRLA1rad6o 3TQoLyjCyoVDgUCErgXa9bHijtV+9Cc= -----END CERTIFICATE-----Generated at Sun Nov 15 10:14:15 2026 by rpki-client