$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ffb029a7-f77b-3196-9f9f-f64043f0eaa6.roa File: ffb029a7-f77b-3196-9f9f-f64043f0eaa6.roa (raw, json) Hash identifier: KqslV0CJCqwSpRbYSdbCa5zbXoQI1gsz8I778WgZreY= Subject key identifier: C7:18:91:F2:A5:F2:10:34:98:D5:A2:4A:D0:2E:E5:3A:78:24:E9:D6 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF2E7734FA0AC625C6D8E1970 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ffb029a7-f77b-3196-9f9f-f64043f0eaa6.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:73:4f:a0:ac:62:5c:6d:8e:19:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=a2278ac6-db41-4c01-b8da-ce67599d0bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b7:43:f6:7e:8d:67:ca:7d:7f:3e:5b:13:85: 87:9d:48:0a:38:f9:41:2c:1e:e8:86:16:d7:16:c4: d1:78:63:88:ce:be:82:a9:ba:9f:09:38:52:74:4b: b7:e1:59:93:e1:9e:0c:3e:fb:5b:af:1d:1c:71:1e: bf:81:88:bd:fa:89:e1:2b:a3:aa:86:9c:8e:b6:c0: 16:ae:da:bf:5c:39:1e:4d:8a:dc:95:ed:a6:24:56: 4d:50:72:88:81:f6:17:e5:58:24:f6:96:88:da:42: 8e:e6:fb:ba:c7:e1:68:14:1e:3d:ac:38:59:87:19: 6e:56:ad:f9:aa:15:c1:b0:aa:ec:5f:df:94:51:2c: bc:f5:23:6d:b7:bb:3f:e9:94:0d:89:32:3c:9b:a6: 02:fd:fc:88:86:3d:f7:f7:59:1c:ab:3f:87:91:b5: b1:9e:5e:ef:de:f9:ee:07:b6:ed:88:81:4d:06:ac: 9a:1d:6c:79:1e:84:e3:ea:14:5c:37:14:63:8c:93: 91:da:3d:7a:90:a5:22:c7:b0:48:7a:42:40:b4:7f: 0f:d1:c9:dd:f2:4f:7d:3a:02:10:42:d7:40:86:e7: 0d:b4:7d:51:5a:0c:61:ea:10:8c:de:aa:52:08:0b: a3:f9:87:5b:3c:15:9c:fa:80:64:65:60:40:28:49: 5b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:18:91:F2:A5:F2:10:34:98:D5:A2:4A:D0:2E:E5:3A:78:24:E9:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ffb029a7-f77b-3196-9f9f-f64043f0eaa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:89:60:a1:1c:c7:e5:f1:60:65:45:38:d5:8a:98:8c:d1:c9: bf:08:c2:23:55:b3:b6:dd:26:66:65:0e:80:4b:6a:36:1a:a2: c3:3c:28:a9:40:53:bc:ef:80:14:4e:f6:aa:56:c3:7a:3d:84: af:04:e3:0d:45:86:47:61:6b:3a:7b:41:4c:18:70:ee:b1:42: 93:60:31:9e:3b:a4:e2:d0:73:c1:56:77:44:14:a6:a2:3d:24: b5:0d:49:67:ea:57:29:ae:ca:76:a5:f6:35:c5:d2:45:31:49: f4:fd:f7:31:fa:47:88:3f:08:72:73:87:36:db:da:d1:38:14: 99:6d:5d:86:6d:14:53:ba:04:43:60:1f:77:11:a3:66:55:77: c5:95:28:d4:2d:dc:8e:ce:10:00:a8:ea:27:75:7f:84:70:36: 2b:0c:30:a8:5d:f3:ce:a5:3d:a9:36:e8:5d:fd:ab:24:38:60: d3:87:66:bb:93:af:c2:de:e7:25:62:f7:70:09:cc:7b:4d:f0: 34:16:ca:d8:3c:ee:f0:c3:a8:3d:6a:90:2e:39:70:69:40:d4: cc:1e:32:0a:1f:fe:10:a1:68:20:b7:0e:54:23:bc:c8:e4:31: e9:22:37:9f:9d:50:f3:7d:24:cc:76:b4:52:7b:9b:9a:da:91: 65:ad:65:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53NPoKxiXG2OGXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk YTIyNzhhYzYtZGI0MS00YzAxLWI4ZGEtY2U2NzU5OWQwYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7dD9n6NZ8p9fz5bE4WHnUgKOPlBLB7ohhbX FsTReGOIzr6CqbqfCThSdEu34VmT4Z4MPvtbrx0ccR6/gYi9+onhK6OqhpyOtsAW rtq/XDkeTYrcle2mJFZNUHKIgfYX5Vgk9paI2kKO5vu6x+FoFB49rDhZhxluVq35 qhXBsKrsX9+UUSy89SNtt7s/6ZQNiTI8m6YC/fyIhj3391kcqz+HkbWxnl7v3vnu B7btiIFNBqyaHWx5HoTj6hRcNxRjjJOR2j16kKUix7BIekJAtH8P0cnd8k99OgIQ QtdAhucNtH1RWgxh6hCM3qpSCAuj+YdbPBWc+oBkZWBAKElbDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcYkfKl8hA0mNWiStAu5Tp4JOnWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZmZiMDI5YTctZjc3Yi0z MTk2LTlmOWYtZjY0MDQzZjBlYWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeJYKEcx+XxYGVFONWKmIzRyb8IwiNVs7bdJmZlDoBLajYaosM8KKlA U7zvgBRO9qpWw3o9hK8E4w1Fhkdhazp7QUwYcO6xQpNgMZ47pOLQc8FWd0QUpqI9 JLUNSWfqVymuynal9jXF0kUxSfT99zH6R4g/CHJzhzbb2tE4FJltXYZtFFO6BENg H3cRo2ZVd8WVKNQt3I7OEACo6id1f4RwNisMMKhd886lPak26F39qyQ4YNOHZruT r8Le5yVi93AJzHtN8DQWytg87vDDqD1qkC45cGlA1MweMgof/hChaCC3DlQjvMjk MekiN5+dUPN9JMx2tFJ7m5rakWWtZa4= -----END CERTIFICATE-----Generated at Fri Sep 25 09:32:18 2026 by rpki-client