$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa File: fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa (raw, json) Hash identifier: Ynpty8uuGvWonzIouyjkXGNR0Rgd9a09bWhi+amDaD0= Subject key identifier: 96:0B:62:9C:C9:A5:90:05:FC:80:38:04:44:9C:0E:25:A0:F4:28:D1 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F94D355170B83AC506CC37CB0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:55:17:0b:83:ac:50:6c:c3:7c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=f2b19725-07b0-46b7-9d51-6db736920697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:64:75:5f:7f:c7:b8:a4:a2:31:3f:05:77: 10:2b:70:be:90:4a:01:3f:0a:b5:ae:f6:3e:89:b6: 89:a1:75:5f:3e:55:ea:6e:34:a5:d7:ac:08:1b:71: 15:28:4b:60:5f:14:cf:2b:b7:c7:bd:97:21:f0:cb: 2d:a8:39:1a:34:57:3a:85:a1:1a:d8:bd:bb:c8:9b: fa:78:77:b1:2a:c9:cb:4e:80:7f:e8:82:5f:57:79: 49:8d:ef:df:18:d5:28:78:ed:39:c0:f2:8c:d6:45: 58:b6:48:f7:c3:29:85:46:56:af:c1:80:a5:cb:52: 2e:b0:5c:69:80:bf:13:99:05:b9:90:1f:ff:68:75: 6e:7c:48:40:9d:08:db:ba:3d:56:c5:3f:70:a5:ad: 33:b0:d7:40:f7:97:57:d7:40:27:fa:54:c9:d3:d4: fb:cd:4b:d9:3c:ad:65:f4:c9:63:71:c3:b3:14:64: 95:5e:01:74:3f:6f:45:1a:8f:a4:f6:d5:b8:2d:55: a2:83:67:41:6e:d7:a0:68:47:e1:56:fe:89:1c:48: 2f:7a:3d:a6:d3:3e:15:31:6a:62:49:4a:09:9d:6b: 7d:60:2f:ae:0b:e1:20:61:67:e3:5d:ae:33:15:d4: ad:68:35:b3:ce:21:57:c3:54:9a:42:14:ff:2c:48: a5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0B:62:9C:C9:A5:90:05:FC:80:38:04:44:9C:0E:25:A0:F4:28:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:9c:49:ba:b6:9b:57:63:0a:5b:f3:58:d1:17:cf:e6:34:8d: 81:d7:63:78:9e:16:67:66:9c:16:39:cc:0f:4e:3d:30:60:13: 4c:62:1b:7c:4c:ef:5f:0b:52:60:26:b8:ec:42:1b:cb:90:cf: 34:17:dd:4c:c8:6d:76:78:68:66:ae:85:15:2c:34:7e:99:c2: 39:b1:2d:9d:cd:3b:19:4e:39:42:f9:37:3f:4c:9a:1b:9e:a2: a1:35:54:2b:4e:31:17:cc:e9:44:2f:a7:48:30:52:bf:cf:e1: 1c:37:1c:e6:be:53:f6:10:99:17:91:17:90:60:22:00:df:1f: c2:71:31:da:42:21:ab:bb:81:67:2a:9d:20:a8:ae:11:dc:eb: e8:50:dd:1a:d1:ad:15:d0:56:7a:07:f3:93:17:ec:6c:a1:97: 1d:18:c9:b6:d1:2d:7a:85:50:09:56:ee:7e:81:55:e8:a4:57: 8a:23:e3:1f:3c:2c:49:96:d2:32:3b:6a:77:59:b3:0a:04:ca: 69:04:12:81:e5:a8:36:e1:f5:fd:de:dc:f0:dd:14:b1:37:d0: bd:3c:96:fa:9f:2a:69:52:95:b1:9a:89:ee:45:da:30:30:b7: 2a:d1:71:63:18:79:9c:c6:42:78:76:d0:6e:57:94:e2:44:96: d1:3b:68:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U01UXC4OsUGzDfLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZjJiMTk3MjUtMDdiMC00NmI3LTlkNTEtNmRiNzM2OTIwNjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYpkdV9/x7ikojE/BXcQK3C+kEoBPwq1rvY+ ibaJoXVfPlXqbjSl16wIG3EVKEtgXxTPK7fHvZch8MstqDkaNFc6haEa2L27yJv6 eHexKsnLToB/6IJfV3lJje/fGNUoeO05wPKM1kVYtkj3wymFRlavwYCly1IusFxp gL8TmQW5kB//aHVufEhAnQjbuj1WxT9wpa0zsNdA95dX10An+lTJ09T7zUvZPK1l 9MljccOzFGSVXgF0P29FGo+k9tW4LVWig2dBbtegaEfhVv6JHEgvej2m0z4VMWpi SUoJnWt9YC+uC+EgYWfjXa4zFdStaDWzziFXw1SaQhT/LEilFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYLYpzJpZAF/IA4BEScDiWg9CjRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZmRkNDc1MGMtZDAxNi0z YjdlLWI2ZjktMWM3MDJmZmJjZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg31sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWcSbq2m1djClvzWNEXz+Y0jYHXY3ieFmdmnBY5zA9OPTBgE0xiG3xM 718LUmAmuOxCG8uQzzQX3UzIbXZ4aGauhRUsNH6ZwjmxLZ3NOxlOOUL5Nz9Mmhue oqE1VCtOMRfM6UQvp0gwUr/P4Rw3HOa+U/YQmReRF5BgIgDfH8JxMdpCIau7gWcq nSCorhHc6+hQ3RrRrRXQVnoH85MX7Gyhlx0YybbRLXqFUAlW7n6BVeikV4oj4x88 LEmW0jI7andZswoEymkEEoHlqDbh9f3e3PDdFLE30L08lvqfKmlSlbGaie5F2jAw tyrRcWMYeZzGQnh20G5XlOJEltE7aP0= -----END CERTIFICATE-----Generated at Sun Nov 15 14:31:24 2026 by rpki-client