$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dff3557c-8510-362d-8886-ae8601c1c582.roa File: dff3557c-8510-362d-8886-ae8601c1c582.roa (raw, json) Hash identifier: mnp9bcV9CG0eiJmHnPDMgIo26dE+eu/A9pyDtR/1Ov8= Subject key identifier: F0:EA:3B:47:B7:C6:B1:5B:C9:4A:96:CC:28:E9:F8:E0:F1:69:94:DC Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584E5084A69228170C1A36312D00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dff3557c-8510-362d-8886-ae8601c1c582.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 54113 IP address blocks: 131.125.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:a6:92:28:17:0c:1a:36:31:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=1f74db3a-33c4-446a-a1fb-d3b30e161848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:f8:0b:43:c6:64:fd:f0:59:4a:54:d1:5a: fc:fa:23:20:19:e2:5b:ef:07:7c:b1:52:f0:7b:70: 69:ae:50:48:c2:9a:49:bf:7c:c1:bf:bf:39:cf:7a: cb:53:df:59:ef:89:a5:eb:66:3a:f2:ed:14:ac:6b: 8c:73:e9:eb:28:ab:12:39:4d:8c:bd:c6:79:e4:2b: b4:f2:43:92:aa:5d:5c:90:21:80:56:1c:d6:d2:94: 5c:4c:03:11:c5:73:b0:68:2e:86:c7:63:e3:53:b2: 8e:0e:be:ac:e9:d8:45:c6:ff:e3:a2:fd:c9:8e:69: 97:1d:73:d4:63:55:27:ac:fe:9a:61:8b:74:8c:1a: 53:bb:7f:fd:cc:2c:4b:ec:64:fe:41:08:05:a5:02: 92:a2:b8:60:b6:39:d9:83:f1:6f:3b:27:c7:c5:3c: 80:8e:d5:3f:98:b3:0c:28:38:36:6d:50:ee:cf:c5: e9:9a:59:c4:d3:34:e2:77:2c:74:53:06:3e:c9:24: dc:04:c9:27:6e:b8:b4:3f:5e:1e:8a:19:ca:6e:d6: 8e:45:84:ad:c5:b5:54:52:42:01:88:30:29:a9:2f: 87:ce:24:e4:1f:f1:71:46:42:96:fb:6b:43:e8:68: 01:e2:72:b8:82:f3:62:4c:d9:94:fb:23:b1:b9:88: 70:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:EA:3B:47:B7:C6:B1:5B:C9:4A:96:CC:28:E9:F8:E0:F1:69:94:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dff3557c-8510-362d-8886-ae8601c1c582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7a:db:90:5b:52:47:69:34:e8:28:33:00:d4:a8:2c:f3:48: 95:85:98:63:ef:94:91:62:b2:ae:41:55:cd:be:6e:be:8f:06: c4:33:e0:2f:e3:4f:19:4b:d5:3d:83:9b:c2:e3:90:03:1d:c2: 43:9d:4c:8c:7b:16:60:46:98:ff:c1:54:40:ca:ac:40:67:93: a4:60:68:bd:ca:60:f2:1f:a8:90:64:70:d9:9f:99:e5:1e:36: 89:9f:b4:97:5e:fb:b1:44:6a:f4:13:52:1f:7e:25:67:e2:92: 5f:f5:22:05:f2:f4:f8:2f:31:b3:16:23:76:26:4f:7f:73:0d: 26:95:ef:42:7c:73:c1:90:23:42:ea:0a:f5:d6:56:90:45:17: 2e:2c:68:6c:2a:41:6d:ff:49:41:96:6c:ce:39:af:02:d4:73: 32:63:59:52:91:c2:33:f1:a4:87:31:7c:62:b4:5f:8b:37:d0: 24:c3:e8:70:87:9a:81:70:dd:e9:d3:00:3c:84:8a:df:27:a5: d5:58:31:fa:b5:03:d6:36:dc:35:98:2b:bc:bd:fe:19:b0:a1: 6b:d5:83:96:99:0d:a3:49:9e:e6:d6:a1:a1:13:57:4e:18:0f: 96:12:8e:91:e9:88:2d:d9:77:9f:3c:5c:f4:f5:c6:7c:b8:d4: ad:4e:2b:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhKaSKBcMGjYxLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk MWY3NGRiM2EtMzNjNC00NDZhLWExZmItZDNiMzBlMTYxODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvT4C0PGZP3wWUpU0Vr8+iMgGeJb7wd8sVLw e3BprlBIwppJv3zBv785z3rLU99Z74ml62Y68u0UrGuMc+nrKKsSOU2MvcZ55Cu0 8kOSql1ckCGAVhzW0pRcTAMRxXOwaC6Gx2PjU7KODr6s6dhFxv/jov3JjmmXHXPU Y1UnrP6aYYt0jBpTu3/9zCxL7GT+QQgFpQKSorhgtjnZg/FvOyfHxTyAjtU/mLMM KDg2bVDuz8XpmlnE0zTidyx0UwY+ySTcBMknbri0P14eihnKbtaORYStxbVUUkIB iDApqS+HziTkH/FxRkKW+2tD6GgB4nK4gvNiTNmU+yOxuYhw9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDqO0e3xrFbyUqWzCjp+ODxaZTcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZGZmMzU1N2MtODUxMC0z NjJkLTg4ODYtYWU4NjAxYzFjNTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl625BbUkdpNOgoMwDUqCzzSJWFmGPvlJFisq5BVc2+br6PBsQz4C/j TxlL1T2Dm8LjkAMdwkOdTIx7FmBGmP/BVEDKrEBnk6RgaL3KYPIfqJBkcNmfmeUe NomftJde+7FEavQTUh9+JWfikl/1IgXy9PgvMbMWI3YmT39zDSaV70J8c8GQI0Lq CvXWVpBFFy4saGwqQW3/SUGWbM45rwLUczJjWVKRwjPxpIcxfGK0X4s30CTD6HCH moFw3enTADyEit8npdVYMfq1A9Y23DWYK7y9/hmwoWvVg5aZDaNJnubWoaETV04Y D5YSjpHpiC3Zd588XPT1xny41K1OK0w= -----END CERTIFICATE-----Generated at Sat Jul 18 02:58:39 2026 by rpki-client