$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dd65191f-2400-3b1f-84e0-bfcd5b67598a.roa File: dd65191f-2400-3b1f-84e0-bfcd5b67598a.roa (raw, json) Hash identifier: qEZ+LmTZTbvxrcHLuvmTIiFfdiwO4InuLgj60q/6nb0= Subject key identifier: CB:8F:79:41:1C:B4:C0:00:B8:7A:66:78:B9:29:58:21:3F:1B:D3:25 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584E5084A571C134EF2FC8F3A080 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dd65191f-2400-3b1f-84e0-bfcd5b67598a.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 54113 IP address blocks: 131.125.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:a5:71:c1:34:ef:2f:c8:f3:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=4e8cb5f0-be4c-4120-8041-77dc1186a849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4d:b0:2b:17:e4:7c:77:d4:98:d6:e7:80:9b: 06:80:68:f9:bd:09:cc:4e:07:4f:eb:36:bb:a3:9d: 50:5b:f9:1f:8a:50:41:3a:a4:e1:bc:cc:42:be:a9: ac:28:c3:32:70:0b:28:98:f2:8d:d5:b9:cc:13:f1: 03:34:b5:ca:4c:78:2b:3c:23:a7:35:d2:b1:8e:2f: 06:5d:a3:d4:cc:9b:f9:0a:a3:4a:3c:1c:80:7e:95: 9f:a6:d3:41:4d:c7:6f:62:f5:ba:be:72:d3:ef:7f: f8:26:38:13:98:89:ca:c0:34:7b:f1:67:1f:04:15: 53:cb:79:39:5d:ab:87:85:0d:88:5c:30:0d:7e:b5: c7:58:fb:25:3e:f9:e5:11:3d:3b:a8:de:97:89:92: 31:c2:6b:3a:eb:bf:81:e3:1f:1f:0b:37:99:5d:9b: 67:ed:75:8a:f9:43:97:e8:44:86:89:15:f9:c6:b4: 1b:b9:c7:97:47:ee:61:c7:af:27:bc:46:de:c2:f7: 7c:ee:6c:ef:f4:67:0b:30:a9:6f:b0:05:ce:ad:64: 1d:11:9f:46:0f:3a:2f:8c:4c:d1:f0:86:c1:31:b2: be:d7:f6:39:79:1e:6f:06:f1:7b:38:c8:23:d2:ef: 85:b1:51:de:2c:f8:23:7d:09:8e:8c:39:07:75:2d: 2e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8F:79:41:1C:B4:C0:00:B8:7A:66:78:B9:29:58:21:3F:1B:D3:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dd65191f-2400-3b1f-84e0-bfcd5b67598a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:4e:f4:81:98:df:0d:70:a8:03:3c:72:02:c3:da:89:52:0e: c1:c3:f9:d8:69:b4:20:c7:6c:02:6e:2e:88:8f:a1:cd:34:bd: a0:1a:44:3a:16:3c:44:48:2c:04:cd:07:de:73:29:87:ae:ea: ef:9f:b4:5f:3f:d8:2c:5f:57:4e:5d:ed:d5:08:d0:6b:03:04: ab:2c:45:9e:4c:2b:ee:5c:3b:74:d5:82:73:b7:eb:57:6c:87: dc:f5:f6:53:1c:fc:ac:ba:9e:c9:85:6a:8c:6f:58:98:6c:cb: 05:d5:73:de:6d:1f:44:cd:14:5e:0c:40:8d:01:56:ec:0b:a6: a1:81:3e:80:90:1b:4a:40:08:f4:c7:63:72:6b:77:62:ec:d4: c7:b0:b5:bf:06:44:6b:74:c5:a5:c4:4d:30:34:ce:33:02:c3: 86:39:a2:9b:a6:7a:ef:90:19:e6:6b:d5:f6:88:bc:e5:2d:65: 5c:0a:8d:14:a2:32:7d:7a:a3:93:2f:fc:31:f8:b3:78:58:f7: d3:34:9c:c7:f7:94:28:d8:37:89:9b:19:e7:df:6f:e1:6d:51: c8:ca:cd:db:3f:71:50:42:c2:cb:37:52:70:f1:c2:67:af:f5: b4:f8:c5:52:83:62:0a:b9:e2:5a:18:d2:b6:b2:42:4f:aa:c8: 32:04:94:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhKVxwTTvL8jzoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk NGU4Y2I1ZjAtYmU0Yy00MTIwLTgwNDEtNzdkYzExODZhODQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh02wKxfkfHfUmNbngJsGgGj5vQnMTgdP6za7 o51QW/kfilBBOqThvMxCvqmsKMMycAsomPKN1bnME/EDNLXKTHgrPCOnNdKxji8G XaPUzJv5CqNKPByAfpWfptNBTcdvYvW6vnLT73/4JjgTmInKwDR78WcfBBVTy3k5 XauHhQ2IXDANfrXHWPslPvnlET07qN6XiZIxwms667+B4x8fCzeZXZtn7XWK+UOX 6ESGiRX5xrQbuceXR+5hx68nvEbewvd87mzv9GcLMKlvsAXOrWQdEZ9GDzovjEzR 8IbBMbK+1/Y5eR5vBvF7OMgj0u+FsVHeLPgjfQmOjDkHdS0ufwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuPeUEctMAAuHpmeLkpWCE/G9MlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZGQ2NTE5MWYtMjQwMC0z YjFmLTg0ZTAtYmZjZDViNjc1OThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZO9IGY3w1wqAM8cgLD2olSDsHD+dhptCDHbAJuLoiPoc00vaAaRDoW PERILATNB95zKYeu6u+ftF8/2CxfV05d7dUI0GsDBKssRZ5MK+5cO3TVgnO361ds h9z19lMc/Ky6nsmFaoxvWJhsywXVc95tH0TNFF4MQI0BVuwLpqGBPoCQG0pACPTH Y3Jrd2Ls1Mewtb8GRGt0xaXETTA0zjMCw4Y5opumeu+QGeZr1faIvOUtZVwKjRSi Mn16o5Mv/DH4s3hY99M0nMf3lCjYN4mbGeffb+FtUcjKzds/cVBCwss3UnDxwmev 9bT4xVKDYgq54loY0rayQk+qyDIElLY= -----END CERTIFICATE-----Generated at Sat Jul 18 02:58:06 2026 by rpki-client