$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc65e1b4-e76b-31c2-9b7f-873703b2c9a2.roa File: cc65e1b4-e76b-31c2-9b7f-873703b2c9a2.roa (raw, json) Hash identifier: l++4YGbWUlkKuBwthyiqxfb6Oh/IkB3MCmuOeYaxQog= Subject key identifier: 55:E3:87:81:91:52:1E:7F:31:6C:10:5C:74:CF:8E:4F:77:90:34:B1 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F94D3550AA0BC6AA8B91F6280 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc65e1b4-e76b-31c2-9b7f-873703b2c9a2.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:55:0a:a0:bc:6a:a8:b9:1f:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=43dcb838-34c0-467f-8ce4-f74b9f9ecd00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8e:3c:e7:c5:40:ef:41:7e:c2:2d:04:51:14: 5d:15:92:09:03:a7:b8:9f:33:de:da:86:f5:94:6b: 50:4c:18:d9:c1:78:ec:e6:49:de:70:c6:be:c4:d7: 67:e8:ed:db:df:07:cd:cd:3e:54:9f:3e:82:2e:30: cc:be:84:28:54:09:62:79:d6:5f:a0:68:3f:da:bd: 97:49:39:8a:96:36:72:33:c1:87:20:b5:f3:f9:a0: df:9f:94:82:6b:bb:4b:25:92:da:ac:f9:96:33:49: 80:a9:78:3d:a5:58:47:b4:2e:1a:66:a8:9f:45:0e: 37:59:df:81:40:12:d1:99:49:b3:57:29:24:b0:c6: 13:d6:8c:05:05:ed:b8:39:68:66:40:d5:cb:34:d9: 98:d4:b8:05:a7:35:4a:7c:29:18:42:3e:9e:5e:30: 32:60:86:f2:01:a4:23:53:eb:c2:4a:d7:97:f3:28: 6d:aa:9c:8e:86:94:fd:eb:b0:84:a5:5e:98:df:7e: 57:e0:aa:a4:37:3f:01:a7:c8:2b:b7:f9:7a:5a:a4: fd:d0:ab:e7:c2:fb:47:29:b9:ea:a3:ac:f4:3d:d9: 27:3d:08:6b:f2:38:52:e9:ea:e2:28:4e:43:d1:e5: e1:08:3d:0f:14:fb:4b:c1:6e:8a:a7:5d:95:d4:e3: bf:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E3:87:81:91:52:1E:7F:31:6C:10:5C:74:CF:8E:4F:77:90:34:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cc65e1b4-e76b-31c2-9b7f-873703b2c9a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:7d:28:07:c2:2a:e5:01:bc:d9:d1:db:6c:b8:52:f5:ce:e5: 1b:78:aa:0c:d1:d9:c9:96:82:ae:01:b6:ad:53:f6:ff:11:a2: c4:f0:c2:a6:fe:e3:99:a0:8a:eb:30:de:54:cd:22:92:84:d6: f7:1b:25:4a:c3:c8:f0:b0:e0:c2:c3:8f:18:e9:62:3f:3b:68: 80:e6:84:7b:b7:0d:e9:65:3f:5a:62:18:83:cd:d2:00:f9:38: 7e:6a:a3:49:75:f4:fc:d6:5c:3c:58:c6:2f:2d:57:1d:9b:5e: 5c:22:94:3a:99:17:17:96:8b:26:03:96:0f:88:dd:cf:3d:4d: 2c:2c:6e:9d:a9:e9:8f:9a:67:9d:ba:c7:b3:b4:24:26:d7:fd: 9e:7b:ef:9a:34:d7:c9:55:c0:1b:da:f4:5b:8e:43:0f:a4:39: fe:93:3b:ca:01:aa:da:d3:be:1e:b6:83:ec:34:7d:72:47:70: 56:a5:3b:84:32:89:53:8b:f1:9f:aa:8e:84:a5:cb:5d:2e:2d: 6e:50:77:e6:21:f7:3b:98:bc:90:18:b9:f9:fa:20:20:dd:35: 36:41:eb:32:71:a0:f0:87:c0:5f:3b:8f:de:77:7c:df:2f:f1: 89:a2:c7:81:30:a5:bc:31:bb:94:99:d5:10:ae:fb:90:dd:cc: a2:24:45:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U01UKoLxqqLkfYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NDNkY2I4MzgtMzRjMC00NjdmLThjZTQtZjc0YjlmOWVjZDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY4858VA70F+wi0EURRdFZIJA6e4nzPe2ob1 lGtQTBjZwXjs5knecMa+xNdn6O3b3wfNzT5Unz6CLjDMvoQoVAliedZfoGg/2r2X STmKljZyM8GHILXz+aDfn5SCa7tLJZLarPmWM0mAqXg9pVhHtC4aZqifRQ43Wd+B QBLRmUmzVykksMYT1owFBe24OWhmQNXLNNmY1LgFpzVKfCkYQj6eXjAyYIbyAaQj U+vCSteX8yhtqpyOhpT967CEpV6Y335X4KqkNz8Bp8grt/l6WqT90KvnwvtHKbnq o6z0PdknPQhr8jhS6eriKE5D0eXhCD0PFPtLwW6Kp12V1OO/BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXjh4GRUh5/MWwQXHTPjk93kDSxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2M2NWUxYjQtZTc2Yi0z MWMyLTliN2YtODczNzAzYjJjOWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl9KAfCKuUBvNnR22y4UvXO5Rt4qgzR2cmWgq4Btq1T9v8RosTwwqb+ 45mgiusw3lTNIpKE1vcbJUrDyPCw4MLDjxjpYj87aIDmhHu3DellP1piGIPN0gD5 OH5qo0l19PzWXDxYxi8tVx2bXlwilDqZFxeWiyYDlg+I3c89TSwsbp2p6Y+aZ526 x7O0JCbX/Z5775o018lVwBva9FuOQw+kOf6TO8oBqtrTvh62g+w0fXJHcFalO4Qy iVOL8Z+qjoSly10uLW5Qd+Yh9zuYvJAYufn6ICDdNTZB6zJxoPCHwF87j953fN8v 8Ymix4Ewpbwxu5SZ1RCu+5DdzKIkRYE= -----END CERTIFICATE-----Generated at Tue Nov 10 22:48:34 2026 by rpki-client