$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cfa1457e-6b66-3dc3-b8d4-52718701d476.roa File: cfa1457e-6b66-3dc3-b8d4-52718701d476.roa (raw, json) Hash identifier: W5T5wojibpcc+FNVBQ3HEkdEDiC1jvmUNux4xu09ePQ= Subject key identifier: 40:44:95:A8:CE:03:FC:43:B9:F2:5E:6F:A6:26:9C:03:52:06:E8:B1 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF2E7735C1C348A19890E7EC0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cfa1457e-6b66-3dc3-b8d4-52718701d476.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:73:5c:1c:34:8a:19:89:0e:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=5ec8548d-ed16-4d1c-b5e0-66910d2992ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:39:c0:50:1c:6f:54:4e:5c:fb:d4:af:56:97: 30:f9:b0:b3:09:aa:d6:79:43:d3:7c:44:f8:1e:ca: db:97:c2:c1:06:6d:92:02:3d:e6:96:eb:df:70:3b: a2:8e:b2:62:3a:8b:2a:2d:03:30:c7:30:b8:73:d7: 02:4c:37:5a:05:a9:48:b5:47:6d:e6:74:37:c4:28: 7d:66:80:8e:18:c6:1d:82:1b:97:79:5c:fb:3e:63: 39:59:6c:91:86:f1:d7:c7:e7:ea:d6:e9:7b:4a:60: 45:41:ea:ac:14:8c:b4:17:0f:da:6e:1b:39:cf:f5: 4a:eb:c2:be:5c:09:64:4e:42:79:d2:1d:ae:50:87: 0d:34:43:64:ac:55:e6:49:88:3d:d9:b6:4b:da:d9: 81:9f:ca:32:82:68:95:42:29:b7:29:e1:35:b4:35: e0:89:d8:0e:02:af:c7:11:b9:2e:f2:0a:95:fb:05: 95:85:d5:3b:a5:37:28:6e:9b:2f:17:27:89:cc:af: b6:69:7c:0e:ff:83:f0:c8:d5:31:3c:58:00:0a:8b: ef:88:fe:8f:81:c7:4d:d5:77:a2:80:18:16:3f:90: 7b:92:6d:57:39:02:3d:88:70:65:31:8e:9b:3e:7a: 43:f4:52:4d:4c:c1:80:0a:64:3c:70:27:ad:44:a2: d6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:44:95:A8:CE:03:FC:43:B9:F2:5E:6F:A6:26:9C:03:52:06:E8:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cfa1457e-6b66-3dc3-b8d4-52718701d476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:7d:a7:8e:ee:9d:88:c9:71:4f:52:4e:44:bc:be:95:69:d2: b5:b3:7b:50:d1:40:96:ef:cc:c6:53:e9:5e:22:48:08:c6:10: ed:fa:03:a8:fe:de:b8:b6:a2:3d:95:60:17:50:d8:3d:cd:0f: 2e:7c:d2:bd:23:f5:48:2f:07:d4:7f:43:bc:e5:bd:f9:94:aa: f4:3d:cd:a4:9d:90:e1:3f:77:b6:b0:a1:80:ec:ea:f4:3c:b0: 69:3c:66:d6:75:77:64:20:6f:1e:72:32:c4:5a:0a:a3:70:a6: 13:8f:c1:d2:20:33:bb:b5:8c:06:7b:85:2d:e5:f9:d8:65:09: d3:12:d5:17:ca:bb:a1:da:53:7c:70:4e:10:24:6f:d1:e6:e5: e2:a6:b9:d2:78:ec:39:82:a7:58:50:a0:44:18:07:79:11:16: 1c:60:96:36:c2:e7:a5:45:66:57:30:48:f8:34:2c:9a:c2:99: dd:a3:f7:3e:20:6a:58:13:d7:34:c3:e3:69:16:1b:18:5d:54: 45:1d:6c:91:2b:c1:68:52:07:f5:e0:5e:45:ec:31:16:c1:08: 91:81:6d:d2:f3:a0:cb:b1:68:de:12:0b:49:3a:33:15:c0:fc: c4:ba:41:29:7e:0a:e2:0e:72:39:aa:2e:65:93:5d:ab:ca:a6: 96:85:1f:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53NcHDSKGYkOfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk NWVjODU0OGQtZWQxNi00ZDFjLWI1ZTAtNjY5MTBkMjk5MmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDnAUBxvVE5c+9SvVpcw+bCzCarWeUPTfET4 Hsrbl8LBBm2SAj3mluvfcDuijrJiOosqLQMwxzC4c9cCTDdaBalItUdt5nQ3xCh9 ZoCOGMYdghuXeVz7PmM5WWyRhvHXx+fq1ul7SmBFQeqsFIy0Fw/abhs5z/VK68K+ XAlkTkJ50h2uUIcNNENkrFXmSYg92bZL2tmBn8oygmiVQim3KeE1tDXgidgOAq/H Ebku8gqV+wWVhdU7pTcobpsvFyeJzK+2aXwO/4PwyNUxPFgACovviP6PgcdN1Xei gBgWP5B7km1XOQI9iHBlMY6bPnpD9FJNTMGACmQ8cCetRKLWhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBElajOA/xDufJeb6YmnANSBuixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2ZhMTQ1N2UtNmI2Ni0z ZGMzLWI4ZDQtNTI3MTg3MDFkNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg318MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt9p47unYjJcU9STkS8vpVp0rWze1DRQJbvzMZT6V4iSAjGEO36A6j+ 3ri2oj2VYBdQ2D3NDy580r0j9UgvB9R/Q7zlvfmUqvQ9zaSdkOE/d7awoYDs6vQ8 sGk8ZtZ1d2Qgbx5yMsRaCqNwphOPwdIgM7u1jAZ7hS3l+dhlCdMS1RfKu6HaU3xw ThAkb9Hm5eKmudJ47DmCp1hQoEQYB3kRFhxgljbC56VFZlcwSPg0LJrCmd2j9z4g algT1zTD42kWGxhdVEUdbJErwWhSB/XgXkXsMRbBCJGBbdLzoMuxaN4SC0k6MxXA /MS6QSl+CuIOcjmqLmWTXavKppaFH3s= -----END CERTIFICATE-----Generated at Fri Sep 25 08:12:08 2026 by rpki-client