$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/03198728-8c41-30ee-b9e7-0c0bed23b10d.roa File: 03198728-8c41-30ee-b9e7-0c0bed23b10d.roa (raw, json) Hash identifier: 2UlvzkBU1c3hODa2w1p7Pkb8AwvMtE8TZmAV1FLKxio= Subject key identifier: 0E:70:FE:A9:5C:B1:D1:3A:73:DF:41:05:6D:39:14:68:34:24:B2:0E Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858490F7C04DA3341083AC3326560 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/03198728-8c41-30ee-b9e7-0c0bed23b10d.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 54113 IP address blocks: 131.125.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7c:04:da:33:41:08:3a:c3:32:65:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=45fc8a8b-364c-4e88-a292-ac9aa0cc08f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c1:44:18:e8:5b:af:74:6a:0c:6d:ca:e3:f3: 6e:b8:03:6e:27:e2:53:fa:13:57:38:a9:2f:9f:4a: e9:95:bc:74:0a:e9:5d:9b:08:51:bd:7a:49:8b:71: 0b:f4:32:c6:e3:c5:ad:52:55:a5:b3:be:5d:76:0e: 05:f1:79:02:a4:46:b2:9a:b9:f1:a8:43:e2:6c:b9: fb:ac:c5:73:d5:80:d8:b6:90:60:00:26:a3:0f:be: 4c:30:a9:05:2e:89:1d:af:fb:dc:15:84:49:b6:e9: 96:02:32:f3:d2:12:1c:28:ed:29:8d:ae:d0:ee:e7: 9d:46:76:fa:16:04:f8:89:9c:79:05:e7:55:c7:db: 45:25:8d:c6:3b:89:e7:49:4d:4e:9e:4c:af:85:3f: ad:4e:7a:02:fc:ec:04:40:ff:1b:ca:44:fb:8f:55: 6f:58:86:95:12:f1:d2:c3:bb:08:a0:f9:1e:3c:fd: bb:8b:3a:51:ac:a0:46:04:41:61:c8:ba:b8:d3:3a: 97:61:f6:fb:2d:ae:69:68:53:f5:47:0d:3b:11:10: e3:59:e4:6f:7d:e7:94:55:51:ce:94:b5:44:0e:65: ee:d6:e7:cb:dd:81:f1:06:8e:14:2a:a3:10:29:ee: f2:c2:c6:4d:43:84:87:08:ea:e9:9d:14:5f:7a:6f: 82:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:70:FE:A9:5C:B1:D1:3A:73:DF:41:05:6D:39:14:68:34:24:B2:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/03198728-8c41-30ee-b9e7-0c0bed23b10d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:07:57:78:40:4c:0e:f0:dc:f2:12:56:30:bc:d8:a5:44:d8: 8b:b2:0d:4e:a5:f0:d2:fb:a0:ec:3e:1b:c4:a9:8b:ac:60:b5: 7f:74:29:37:3c:8b:a7:ec:f8:46:b4:1d:03:3a:f8:03:fe:65: a5:33:44:2d:8f:19:29:31:17:ad:d7:e8:f1:7f:3b:ec:55:8a: 1c:2a:ae:10:46:83:a7:2d:fe:ff:47:3a:06:21:01:b8:26:4e: 09:fa:17:b3:85:3b:70:9d:61:36:6a:75:71:81:8b:ff:10:c9: 18:a1:6e:bd:53:e1:08:d9:8f:f5:18:9c:a0:74:ea:97:f2:ca: ee:03:6d:0b:c0:aa:7d:96:8c:7f:0c:f0:b7:e6:6d:84:be:80: df:36:68:46:b9:e0:45:c6:5a:bc:87:0c:c3:53:89:2a:c2:2c: 37:0a:76:4a:9a:98:e0:46:e2:b8:99:d6:a1:1d:c8:46:4c:b2: 69:ee:cd:d3:2a:76:a2:fd:2d:99:96:cf:42:8d:e6:65:15:e1: 8e:06:cb:f1:34:0b:5c:38:56:df:7a:f9:b2:95:8f:f9:55:f3: e2:05:cf:07:e3:3a:64:c4:a0:90:40:36:4c:28:4b:43:3e:69: 5d:f5:2f:c1:0e:c2:61:e8:c8:c3:2d:6b:eb:ab:56:54:5d:40: f7:40:a1:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPfATaM0EIOsMyZWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk NDVmYzhhOGItMzY0Yy00ZTg4LWEyOTItYWM5YWEwY2MwOGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMFEGOhbr3RqDG3K4/NuuANuJ+JT+hNXOKkv n0rplbx0CuldmwhRvXpJi3EL9DLG48WtUlWls75ddg4F8XkCpEaymrnxqEPibLn7 rMVz1YDYtpBgACajD75MMKkFLokdr/vcFYRJtumWAjLz0hIcKO0pja7Q7uedRnb6 FgT4iZx5BedVx9tFJY3GO4nnSU1OnkyvhT+tTnoC/OwEQP8bykT7j1VvWIaVEvHS w7sIoPkePP27izpRrKBGBEFhyLq40zqXYfb7La5paFP1Rw07ERDjWeRvfeeUVVHO lLVEDmXu1ufL3YHxBo4UKqMQKe7ywsZNQ4SHCOrpnRRfem+CAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5w/qlcsdE6c99BBW05FGg0JLIOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMDMxOTg3MjgtOGM0MS0z MGVlLWI5ZTctMGMwYmVkMjNiMTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg317MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYHV3hATA7w3PISVjC82KVE2IuyDU6l8NL7oOw+G8Spi6xgtX90KTc8 i6fs+Ea0HQM6+AP+ZaUzRC2PGSkxF63X6PF/O+xVihwqrhBGg6ct/v9HOgYhAbgm Tgn6F7OFO3CdYTZqdXGBi/8QyRihbr1T4QjZj/UYnKB06pfyyu4DbQvAqn2WjH8M 8LfmbYS+gN82aEa54EXGWryHDMNTiSrCLDcKdkqamOBG4riZ1qEdyEZMsmnuzdMq dqL9LZmWz0KN5mUV4Y4Gy/E0C1w4Vt96+bKVj/lV8+IFzwfjOmTEoJBANkwoS0M+ aV31L8EOwmHoyMMta+urVlRdQPdAocc= -----END CERTIFICATE-----Generated at Fri Mar 14 09:36:24 2025 by rpki-client