$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7de174a5-fe02-37dc-9bcb-1f777220641f.roa File: 7de174a5-fe02-37dc-9bcb-1f777220641f.roa (raw, json) Hash identifier: eMIMnqE49OxY1rrN1BkrOFiq3KNvIRpXuRtssXumsqc= Subject key identifier: 10:82:F4:FE:E5:14:86:C0:D2:0B:67:B7:A5:EB:42:08:52:28:10:C6 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F94D3548C4FEBAD9C60B70B80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7de174a5-fe02-37dc-9bcb-1f777220641f.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:54:8c:4f:eb:ad:9c:60:b7:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=6e16a640-6137-41fc-94b2-d5adaf4c8d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:4e:0d:48:e3:11:39:dc:77:78:1b:d6:3a: 5d:f8:5b:09:99:7a:7f:27:b4:2e:11:bf:a2:7b:6a: 27:8e:b5:a3:25:8d:c9:df:07:cc:b9:65:8d:15:f2: e4:29:3e:d3:5f:17:80:e2:59:77:e9:13:4b:2d:43: 03:9c:dc:80:18:60:50:03:77:c1:4c:22:15:9d:47: 6a:98:1c:e8:40:e9:23:51:8c:26:0d:d2:ae:2f:44: 99:f2:4b:a1:73:77:fe:16:5e:c2:df:9d:a0:a8:01: a0:d4:e3:7b:9e:f8:e3:2c:c7:9b:97:48:59:03:1d: 3a:47:94:85:b5:d9:4b:37:62:6a:6b:45:9f:a4:cc: 6a:4b:c9:1e:e6:f6:7f:24:7b:ac:94:b7:7c:85:b0: c7:5d:9e:a6:7f:c9:78:35:cf:ce:a8:f5:f2:ef:9d: d3:a0:23:cb:7a:77:0f:92:d2:ce:1d:47:e1:18:44: be:32:72:d2:22:f2:69:cc:7b:80:e6:21:5e:73:a1: 42:7c:6c:03:5a:de:78:5a:c4:0f:30:9f:72:0d:67: 38:b8:78:f8:b4:76:6d:1c:e0:a8:67:48:04:7b:e1: ad:36:e4:cd:c9:86:a6:3e:28:86:ea:48:dd:c4:80: 7b:f4:f6:d6:14:8f:5b:68:28:f6:c2:30:bf:88:d9: c2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:82:F4:FE:E5:14:86:C0:D2:0B:67:B7:A5:EB:42:08:52:28:10:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7de174a5-fe02-37dc-9bcb-1f777220641f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:00:5d:42:9d:09:93:95:ee:15:a6:09:9c:9b:a1:21:bf:fd: a8:e9:ef:99:23:a1:4c:b5:9b:a2:d9:8a:0c:74:1b:d2:e0:ca: ed:27:a8:ff:8e:b7:c9:e1:a0:0e:a8:82:3b:ac:bf:ae:80:32: 05:fd:9e:e0:0d:1a:d4:2c:80:c4:66:5d:c1:d9:a2:a1:ea:07: 90:9d:c3:92:46:51:8d:83:7c:c1:5c:63:e5:7e:55:f1:1c:67: 7b:18:59:58:af:e4:2d:a7:73:c2:de:d6:2b:9b:3f:b2:dc:81: e6:5c:d5:8b:1e:b8:4d:1c:15:2f:b0:e0:78:df:ac:81:ff:39: 83:20:30:74:d6:e8:63:59:ce:a6:2e:55:0c:a9:67:d2:e3:59: a1:ba:7a:b9:82:35:13:30:45:24:6a:5f:7d:7f:4f:9b:56:65: 3f:e2:c3:40:70:28:63:c7:2e:f6:b5:61:c7:bd:53:e7:aa:6d: c5:fe:73:c1:dc:ec:61:ed:d5:0f:ac:4b:c0:c9:f7:c7:8e:c5: cc:0d:e5:2c:1e:69:77:ca:7c:98:0b:f7:19:b2:a7:38:63:5a: ce:09:81:47:60:a7:2d:a1:54:2e:29:f6:da:f3:f3:14:7f:ed: 77:a5:24:4e:06:1e:3f:62:f4:d7:50:8e:8a:ae:e4:06:c5:65: ed:bb:21:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U01SMT+utnGC3C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NmUxNmE2NDAtNjEzNy00MWZjLTk0YjItZDVhZGFmNGM4ZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp79ODUjjETncd3gb1jpd+FsJmXp/J7QuEb+i e2onjrWjJY3J3wfMuWWNFfLkKT7TXxeA4ll36RNLLUMDnNyAGGBQA3fBTCIVnUdq mBzoQOkjUYwmDdKuL0SZ8kuhc3f+Fl7C352gqAGg1ON7nvjjLMebl0hZAx06R5SF tdlLN2Jqa0WfpMxqS8ke5vZ/JHuslLd8hbDHXZ6mf8l4Nc/OqPXy753ToCPLencP ktLOHUfhGES+MnLSIvJpzHuA5iFec6FCfGwDWt54WsQPMJ9yDWc4uHj4tHZtHOCo Z0gEe+GtNuTNyYamPiiG6kjdxIB79PbWFI9baCj2wjC/iNnCMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCC9P7lFIbA0gtnt6XrQghSKBDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvN2RlMTc0YTUtZmUwMi0z N2RjLTliY2ItMWY3NzcyMjA2NDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMAXUKdCZOV7hWmCZyboSG//ajp75kjoUy1m6LZigx0G9Lgyu0nqP+O t8nhoA6ogjusv66AMgX9nuANGtQsgMRmXcHZoqHqB5Cdw5JGUY2DfMFcY+V+VfEc Z3sYWViv5C2nc8Le1iubP7LcgeZc1YseuE0cFS+w4HjfrIH/OYMgMHTW6GNZzqYu VQypZ9LjWaG6ermCNRMwRSRqX31/T5tWZT/iw0BwKGPHLva1Yce9U+eqbcX+c8Hc 7GHt1Q+sS8DJ98eOxcwN5SweaXfKfJgL9xmypzhjWs4JgUdgpy2hVC4p9trz8xR/ 7XelJE4GHj9i9NdQjoqu5AbFZe27IY8= -----END CERTIFICATE-----Generated at Sun Nov 15 11:51:17 2026 by rpki-client