$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e654915c-c83e-3650-9274-3ac5bd8d7737.roa File: e654915c-c83e-3650-9274-3ac5bd8d7737.roa (raw, json) Hash identifier: cQ2OKSxPVFBwKaB0cN74T9s/DHpug0ApnlrShlnzTRI= Subject key identifier: EB:CF:91:3A:86:5A:50:3D:B0:9E:C1:C1:80:19:90:A1:1B:6F:2C:12 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F94D3552E60097DA8568D3E40 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e654915c-c83e-3650-9274-3ac5bd8d7737.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:55:2e:60:09:7d:a8:56:8d:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=0c5dfb43-5907-4c77-89f5-22285b0dea63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:44:9f:f2:e4:e3:a3:f4:f3:36:3e:26:3b:b1: 5c:35:1a:92:d1:e5:8e:db:e2:90:5e:6d:08:51:c9: 2f:61:17:7b:8e:cb:86:03:02:0e:f9:37:0d:07:c3: 05:53:c1:67:ef:7e:cf:4f:9d:f5:ba:b4:86:f5:91: bd:bb:0e:a3:cb:8e:9f:c3:f7:bd:47:40:bc:76:cc: 32:86:e7:ba:97:2c:49:22:6e:9d:48:d6:a0:08:65: 51:69:bd:32:94:aa:ff:2c:6e:a9:38:3e:f3:27:5d: 43:59:e4:5a:c2:93:6c:2b:a8:ee:fc:8e:73:bf:30: b9:22:b5:47:dc:96:ee:16:3a:b4:2a:56:fd:66:e1: 7b:0d:e0:0b:f0:1d:8f:8a:2b:6d:22:78:3a:01:53: 7b:31:d1:02:28:82:64:75:b7:ae:a7:f4:b6:b2:46: 96:d1:7a:78:8c:bc:32:07:3f:be:c9:a1:14:c3:d0: 69:c7:86:b6:0c:f4:98:4d:12:85:b0:df:66:7f:81: e2:fb:e1:63:6f:1a:9a:37:fa:c4:8a:da:99:13:a6: 3e:06:d5:ca:fa:ae:17:fa:25:d8:97:ec:d0:fa:d1: dd:b8:fb:77:b9:0b:9f:31:1f:60:ae:15:3e:5e:67: db:38:79:ff:83:4e:bf:4f:26:11:b4:19:77:da:b5: 43:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CF:91:3A:86:5A:50:3D:B0:9E:C1:C1:80:19:90:A1:1B:6F:2C:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e654915c-c83e-3650-9274-3ac5bd8d7737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:86:58:35:b8:39:7d:b5:2f:68:c4:51:ac:5e:de:7d:53:c0: 80:40:ee:dd:90:32:7c:3c:33:d8:9f:84:c1:76:20:d1:42:83: c4:86:7b:46:ab:5f:b4:11:5f:e3:9a:cc:bb:e5:23:15:7b:74: a0:9a:b1:a4:95:11:f8:ba:f9:3b:28:d5:e1:58:8e:cb:e9:3d: d8:18:ed:b6:cc:c2:ce:30:fc:39:c9:65:ce:c2:37:33:72:66: 42:54:22:00:7e:3d:d3:31:ef:55:a1:fb:ca:77:fd:12:ef:93: 08:e9:cf:08:17:a1:54:c7:cc:35:6f:77:85:83:3a:58:31:31: e4:9e:50:08:1d:28:a1:c1:c7:28:9a:42:50:27:1b:d5:29:3e: 39:4e:69:b4:bb:e7:2f:87:bf:f1:53:83:df:fc:41:5b:ab:0b: 50:f6:c0:14:07:aa:16:a1:00:ee:8e:23:2e:80:cb:72:fa:2b: 33:11:15:92:18:b3:52:ee:7f:87:cb:d7:26:69:88:fb:cb:fa: 82:21:00:d9:f0:06:76:0f:f6:3a:94:c4:23:7f:51:dd:6f:d5: 57:ab:14:26:b7:f7:9b:cc:05:ab:77:27:37:bd:15:fa:2d:09: cf:0f:02:b8:b6:3f:fe:3b:3c:1f:1d:a4:d4:2e:7b:30:f9:b6: db:4b:67:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U01UuYAl9qFaNPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MGM1ZGZiNDMtNTkwNy00Yzc3LTg5ZjUtMjIyODViMGRlYTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvESf8uTjo/TzNj4mO7FcNRqS0eWO2+KQXm0I UckvYRd7jsuGAwIO+TcNB8MFU8Fn737PT531urSG9ZG9uw6jy46fw/e9R0C8dswy hue6lyxJIm6dSNagCGVRab0ylKr/LG6pOD7zJ11DWeRawpNsK6ju/I5zvzC5IrVH 3JbuFjq0Klb9ZuF7DeAL8B2PiittIng6AVN7MdECKIJkdbeup/S2skaW0Xp4jLwy Bz++yaEUw9Bpx4a2DPSYTRKFsN9mf4Hi++FjbxqaN/rEitqZE6Y+BtXK+q4X+iXY l+zQ+tHduPt3uQufMR9grhU+XmfbOHn/g06/TyYRtBl32rVDXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvPkTqGWlA9sJ7BwYAZkKEbbywSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZTY1NDkxNWMtYzgzZS0z NjUwLTkyNzQtM2FjNWJkOGQ3NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg314MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSGWDW4OX21L2jEUaxe3n1TwIBA7t2QMnw8M9ifhMF2INFCg8SGe0ar X7QRX+OazLvlIxV7dKCasaSVEfi6+Tso1eFYjsvpPdgY7bbMws4w/DnJZc7CNzNy ZkJUIgB+PdMx71Wh+8p3/RLvkwjpzwgXoVTHzDVvd4WDOlgxMeSeUAgdKKHBxyia QlAnG9UpPjlOabS75y+Hv/FTg9/8QVurC1D2wBQHqhahAO6OIy6Ay3L6KzMRFZIY s1Luf4fL1yZpiPvL+oIhANnwBnYP9jqUxCN/Ud1v1VerFCa395vMBat3Jze9Ffot Cc8PAri2P/47PB8dpNQuezD5tttLZ00= -----END CERTIFICATE-----Generated at Sun Nov 15 15:39:20 2026 by rpki-client