$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b75f0928-afa7-3631-8814-783a2e20fda1.roa File: b75f0928-afa7-3631-8814-783a2e20fda1.roa (raw, json) Hash identifier: e/oSnUicei6eXPjmPCaaNfpd11GC67dFYgMe0MQkc40= Subject key identifier: FE:A1:E1:26:E7:53:65:1A:FC:D6:30:21:18:63:2F:AB:9B:2C:50:54 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F94D354AE6E26A6723F456580 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b75f0928-afa7-3631-8814-783a2e20fda1.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:54:ae:6e:26:a6:72:3f:45:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=99421a76-66d4-4c9f-81b4-4b568bdc9c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:08:8a:2a:00:3c:b2:9f:ef:15:f1:e1:df:69: 38:a0:99:6e:92:45:4f:58:56:c9:1d:13:e7:19:30: f3:b0:f0:66:dc:b0:ee:61:6a:bf:2d:09:15:24:0f: 21:bd:44:84:1e:9d:48:5f:8d:95:29:ba:31:ff:b4: 3f:9c:3b:c6:0b:3e:43:63:25:fd:15:91:21:be:4f: 09:d9:93:3c:6f:eb:66:3a:85:16:d7:52:72:22:3f: c0:e7:cb:5e:03:a0:50:51:c2:c3:a8:ca:09:3b:c3: ab:65:1b:d2:48:25:21:ad:74:0e:eb:c0:1f:6b:a8: 9c:49:71:5b:87:53:5d:e3:3b:ac:f3:94:93:62:4e: 4a:fd:c8:f5:62:86:5e:cf:83:4c:27:0d:39:1a:d7: f1:84:a8:4d:85:0a:2b:35:f5:27:de:99:15:1c:3e: 91:d8:f9:f9:1f:0d:55:16:fb:bc:84:02:60:1d:81: 02:21:29:d2:2a:c7:99:66:a5:48:f7:43:df:eb:b5: dc:8a:5e:0e:f7:ba:60:de:27:88:12:e8:28:1a:f4: 17:26:5f:66:f3:73:a0:c0:b8:61:3d:71:6f:e5:2a: 7b:0f:37:18:03:9e:21:c7:97:fa:e4:b1:64:24:3b: 30:46:f2:79:37:a0:07:e2:1d:34:a8:da:95:4f:c4: 35:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A1:E1:26:E7:53:65:1A:FC:D6:30:21:18:63:2F:AB:9B:2C:50:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b75f0928-afa7-3631-8814-783a2e20fda1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:16:f1:c7:2b:1f:6f:25:37:84:44:39:d2:61:92:70:b5:cd: b9:f6:ee:d8:4c:cc:2b:d8:42:37:17:ae:4e:f4:f0:64:9b:20: d6:56:3b:2c:ba:81:9f:10:30:3c:b9:60:fd:37:6c:d0:8a:66: 4b:00:0b:d3:b4:2c:fd:cf:c9:0a:85:7b:79:4d:de:26:a2:d9: 93:56:69:68:1c:dd:ed:85:85:4f:9d:db:90:98:f2:b5:71:b2: ba:00:5b:d2:7e:d8:50:b2:44:82:31:4e:8f:e7:ca:6a:d2:33: 2a:0c:90:80:95:49:f3:88:73:fe:f4:bf:5e:43:d4:ad:4d:29: 72:e1:7a:e9:e7:d7:6d:90:25:09:38:e2:a4:81:ef:05:80:48: 80:6f:41:91:aa:3b:60:fa:52:ee:ac:9c:38:c1:26:75:20:d4: 94:34:10:21:0d:37:87:15:75:98:08:f0:da:dd:3d:e9:e7:0c: 1f:09:d9:8d:ef:f3:2d:fa:11:b9:ab:22:4c:30:80:65:c4:14: 30:d8:54:24:cd:93:32:09:5b:ac:7f:cc:a7:a5:c9:14:00:01: ff:3c:1e:aa:87:5f:e9:33:b7:80:99:f6:8e:a2:35:c0:c3:2b: 07:bc:7e:54:f8:33:17:7b:da:a5:d7:a0:01:8a:d4:7d:62:55: 40:bc:db:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U01Subiamcj9FZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk OTk0MjFhNzYtNjZkNC00YzlmLTgxYjQtNGI1NjhiZGM5YzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAiKKgA8sp/vFfHh32k4oJlukkVPWFbJHRPn GTDzsPBm3LDuYWq/LQkVJA8hvUSEHp1IX42VKbox/7Q/nDvGCz5DYyX9FZEhvk8J 2ZM8b+tmOoUW11JyIj/A58teA6BQUcLDqMoJO8OrZRvSSCUhrXQO68Afa6icSXFb h1Nd4zus85STYk5K/cj1YoZez4NMJw05GtfxhKhNhQorNfUn3pkVHD6R2Pn5Hw1V Fvu8hAJgHYECISnSKseZZqVI90Pf67Xcil4O97pg3ieIEugoGvQXJl9m83OgwLhh PXFv5Sp7DzcYA54hx5f65LFkJDswRvJ5N6AH4h00qNqVT8Q1xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6h4SbnU2Ua/NYwIRhjL6ubLFBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjc1ZjA5MjgtYWZhNy0z NjMxLTg4MTQtNzgzYTJlMjBmZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg31gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQW8ccrH28lN4REOdJhknC1zbn27thMzCvYQjcXrk708GSbINZWOyy6 gZ8QMDy5YP03bNCKZksAC9O0LP3PyQqFe3lN3iai2ZNWaWgc3e2FhU+d25CY8rVx sroAW9J+2FCyRIIxTo/nymrSMyoMkICVSfOIc/70v15D1K1NKXLheunn122QJQk4 4qSB7wWASIBvQZGqO2D6Uu6snDjBJnUg1JQ0ECENN4cVdZgI8NrdPennDB8J2Y3v 8y36EbmrIkwwgGXEFDDYVCTNkzIJW6x/zKelyRQAAf88HqqHX+kzt4CZ9o6iNcDD Kwe8flT4Mxd72qXXoAGK1H1iVUC8288= -----END CERTIFICATE-----Generated at Sun Nov 15 13:26:37 2026 by rpki-client