$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2fb93f9-7e8a-3dcb-be12-c52956da4fb8.roa File: d2fb93f9-7e8a-3dcb-be12-c52956da4fb8.roa (raw, json) Hash identifier: tNXt1MsGmGqkZzsVRM3XWycl+oKeQww7byKm95OLMwE= Subject key identifier: F7:91:77:3A:2C:11:D8:A1:C9:AE:A9:DD:2F:1E:90:9F:3F:07:98:3E Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F94D354F3D9D9D9F6AFC47B00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2fb93f9-7e8a-3dcb-be12-c52956da4fb8.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:54:f3:d9:d9:d9:f6:af:c4:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=ce4c225f-94b0-450d-a6c8-36af8962b732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ba:d9:30:c0:31:4a:13:a5:72:72:8d:65:fb: fd:3f:c5:06:cb:5d:75:db:85:0f:bf:2f:e3:1c:9b: bc:bd:b1:92:1b:47:d5:2d:0a:14:fe:aa:5d:e3:34: 7d:74:87:51:c2:d1:02:d8:5b:93:12:7f:4d:af:d2: ee:35:e3:18:af:78:75:f3:f1:42:be:d8:f0:40:d6: 3f:c8:9a:cc:ce:d6:2d:cc:0f:e7:18:94:44:a8:44: 14:e0:0b:68:a1:d3:74:31:23:cc:9f:30:4f:27:be: 51:38:91:2a:71:23:20:56:c8:db:4c:bb:df:8a:cf: 0d:96:69:5a:f3:62:e7:84:39:3b:cc:bb:03:4a:17: 98:f0:78:35:2a:05:54:58:9c:c9:76:ee:28:a8:ed: e3:9c:5a:f3:07:09:ba:7f:65:6e:a3:2f:c9:48:9c: ea:6f:48:65:4c:3a:c9:39:e6:7e:69:68:b5:22:f2: 61:cf:31:d5:d4:72:85:8d:83:ea:cf:85:fb:4c:c3: 4f:77:7f:d6:5c:29:6e:c2:71:da:14:ba:9a:11:5d: 0e:96:f0:fb:82:75:59:d8:f3:3e:07:87:84:ad:c1: c2:79:8e:bc:23:7d:87:cf:8b:db:90:20:a2:29:f2: 02:8c:21:07:a6:af:65:6f:c9:0c:19:fd:4f:7a:f9: e0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:91:77:3A:2C:11:D8:A1:C9:AE:A9:DD:2F:1E:90:9F:3F:07:98:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d2fb93f9-7e8a-3dcb-be12-c52956da4fb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:5b:fa:ca:02:a7:ec:49:fe:7b:dc:ed:db:74:14:f1:b3:46: 42:36:e6:3e:68:23:4d:75:ea:23:d4:71:99:51:af:45:fc:0b: 3c:c7:a9:2b:f9:cf:86:7e:bf:47:b6:5b:9a:5a:55:42:7e:5e: 32:cd:9f:88:8f:70:ff:3f:6a:a5:e6:9b:38:83:74:01:75:b2: b7:94:0b:16:32:f8:98:7e:c8:1b:fc:c2:8d:03:e7:db:93:07: e6:00:ab:77:94:6f:21:4d:82:69:60:cc:c5:10:10:85:33:ab: 32:1b:40:9f:12:90:b1:c6:36:8b:ec:72:cc:af:f5:bf:1b:0b: 22:b2:15:bf:72:57:ec:7f:f8:39:59:38:e9:88:ca:eb:9f:68: d5:f1:c8:51:2b:0f:38:32:df:90:20:12:ae:c5:3a:a6:ed:ee: 07:f8:5e:15:88:8c:c5:6a:8c:1a:f6:fe:84:0c:24:87:df:2a: 3e:63:96:4f:2c:ee:99:d2:ba:0d:2b:61:f2:f1:ad:3c:a3:3e: 67:c3:2d:be:da:9e:c5:61:cb:8e:8a:4d:bc:7e:f3:5e:e8:8c: 71:af:83:48:ae:d8:36:98:75:c6:db:34:cc:dd:0d:8d:b0:72: de:c3:e6:2d:7a:0b:b5:96:fc:56:ec:bb:8b:8e:4f:f1:20:18: 21:24:1a:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U01Tz2dnZ9q/EewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk Y2U0YzIyNWYtOTRiMC00NTBkLWE2YzgtMzZhZjg5NjJiNzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLrZMMAxShOlcnKNZfv9P8UGy11124UPvy/j HJu8vbGSG0fVLQoU/qpd4zR9dIdRwtEC2FuTEn9Nr9LuNeMYr3h18/FCvtjwQNY/ yJrMztYtzA/nGJREqEQU4AtoodN0MSPMnzBPJ75ROJEqcSMgVsjbTLvfis8Nlmla 82LnhDk7zLsDSheY8Hg1KgVUWJzJdu4oqO3jnFrzBwm6f2Vuoy/JSJzqb0hlTDrJ OeZ+aWi1IvJhzzHV1HKFjYPqz4X7TMNPd3/WXCluwnHaFLqaEV0OlvD7gnVZ2PM+ B4eErcHCeY68I32Hz4vbkCCiKfICjCEHpq9lb8kMGf1PevngWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeRdzosEdihya6p3S8ekJ8/B5g+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDJmYjkzZjktN2U4YS0z ZGNiLWJlMTItYzUyOTU2ZGE0ZmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg31iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtb+soCp+xJ/nvc7dt0FPGzRkI25j5oI0116iPUcZlRr0X8CzzHqSv5 z4Z+v0e2W5paVUJ+XjLNn4iPcP8/aqXmmziDdAF1sreUCxYy+Jh+yBv8wo0D59uT B+YAq3eUbyFNgmlgzMUQEIUzqzIbQJ8SkLHGNovscsyv9b8bCyKyFb9yV+x/+DlZ OOmIyuufaNXxyFErDzgy35AgEq7FOqbt7gf4XhWIjMVqjBr2/oQMJIffKj5jlk8s 7pnSug0rYfLxrTyjPmfDLb7ansVhy46KTbx+817ojHGvg0iu2DaYdcbbNMzdDY2w ct7D5i16C7WW/Fbsu4uOT/EgGCEkGpo= -----END CERTIFICATE-----Generated at Tue Nov 10 22:47:33 2026 by rpki-client