$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/340cd8f4-08a6-38c3-8f36-276f75a9fdd5.roa File: 340cd8f4-08a6-38c3-8f36-276f75a9fdd5.roa (raw, json) Hash identifier: 5Qf2KEk1n8UxzhIwGcLWH6+o5RPxhTd0n8L6ImLGL0E= Subject key identifier: 0C:02:71:1D:58:31:4F:C1:4C:87:9D:68:A0:DB:4D:C7:53:3A:BF:29 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858490F7C02DB911FBE9340696980 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/340cd8f4-08a6-38c3-8f36-276f75a9fdd5.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 54113 IP address blocks: 131.125.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7c:02:db:91:1f:be:93:40:69:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=220a5282-ae66-4c89-8791-69a9a7b571de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:32:64:0b:f7:ce:4d:b8:bd:55:2f:b1:01:d2: de:fb:6f:3e:1b:4d:9e:1a:97:6c:f7:7c:7a:bc:fa: 21:1a:27:b9:82:c0:61:f4:5e:19:4d:b8:28:5d:0a: d6:06:bb:02:48:d9:d3:6c:4e:f3:cc:bf:d7:0d:7d: 8b:6b:6f:79:de:27:dd:2a:29:23:86:06:38:0a:d2: 4b:43:a4:b1:fa:da:7c:e4:e5:ba:85:8f:99:f4:e5: 2d:d7:fc:7c:22:ed:fd:07:40:b4:1a:b8:b7:a2:c2: ef:6f:cf:88:80:ee:e5:72:f7:b9:46:e7:96:e6:91: 3f:c0:a9:32:76:78:62:85:8b:a6:93:26:2c:7b:83: d5:0f:3e:90:14:df:75:8f:32:d7:fb:73:19:05:ab: 19:63:02:6b:63:cd:ac:85:da:48:cf:86:78:1b:76: ad:44:3f:e1:32:54:6f:79:b1:04:1e:a4:f9:b5:5a: 72:11:2c:75:9e:0e:55:c7:2e:b3:d1:c1:16:a2:28: 40:aa:29:ce:a4:c4:37:9f:93:2b:e1:85:34:8c:92: 1c:cf:f0:96:cb:5e:26:1a:d4:23:77:36:eb:66:63: e6:e1:ad:4f:9b:0a:ac:4a:0a:4a:f7:6d:65:d5:04: a7:8f:91:98:f8:b6:72:0a:b3:fb:1e:4c:29:b4:71: 71:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:02:71:1D:58:31:4F:C1:4C:87:9D:68:A0:DB:4D:C7:53:3A:BF:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/340cd8f4-08a6-38c3-8f36-276f75a9fdd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:82:64:a2:0c:79:12:8d:76:96:ca:6c:fb:e9:30:78:00:ff: cd:81:38:d8:e5:6f:f3:ff:3d:c1:8d:52:f1:1a:46:cf:77:be: 82:93:27:bf:16:66:a1:84:ec:f8:43:c5:8c:8d:a9:df:a8:1f: fd:e3:00:3a:a4:87:bc:7a:ae:0b:0c:59:00:30:95:19:97:de: b5:7b:30:cb:d6:fb:25:13:39:17:41:6e:d7:c5:90:f4:51:57: 82:e2:bf:71:f5:20:2c:66:f6:bd:c0:75:f0:55:f2:f1:85:e3: a5:65:65:1c:e3:fb:82:69:31:c6:f6:d1:7f:16:f1:1f:61:80: a5:94:9f:24:b1:28:a8:50:cf:46:e9:ae:04:df:92:3f:57:a0: cb:13:19:d3:39:a1:c1:83:1f:e6:77:5a:fb:e0:ee:e6:ae:84: f4:68:b8:f6:65:42:dc:aa:e0:79:a9:bc:6d:66:2e:9f:8b:fd: ec:1d:b4:a3:10:78:64:ed:3f:c5:55:43:bd:ab:f0:a3:f4:2f: 12:bd:c1:7d:44:bc:7a:e2:84:a1:80:d5:fd:39:70:e3:ba:3b: e8:c3:b0:ae:25:61:a1:fd:c8:1c:9c:12:13:b1:6b:9e:d7:3d: b0:9f:bd:45:80:da:fd:43:b0:97:98:ac:ba:55:cb:27:3f:b0: 5b:15:8b:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPfALbkR++k0BpaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk MjIwYTUyODItYWU2Ni00Yzg5LTg3OTEtNjlhOWE3YjU3MWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDJkC/fOTbi9VS+xAdLe+28+G02eGpds93x6 vPohGie5gsBh9F4ZTbgoXQrWBrsCSNnTbE7zzL/XDX2La2953ifdKikjhgY4CtJL Q6Sx+tp85OW6hY+Z9OUt1/x8Iu39B0C0Gri3osLvb8+IgO7lcve5RueW5pE/wKky dnhihYumkyYse4PVDz6QFN91jzLX+3MZBasZYwJrY82shdpIz4Z4G3atRD/hMlRv ebEEHqT5tVpyESx1ng5Vxy6z0cEWoihAqinOpMQ3n5Mr4YU0jJIcz/CWy14mGtQj dzbrZmPm4a1PmwqsSgpK921l1QSnj5GY+LZyCrP7HkwptHFxhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwCcR1YMU/BTIedaKDbTcdTOr8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzQwY2Q4ZjQtMDhhNi0z OGMzLThmMzYtMjc2Zjc1YTlmZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqCZKIMeRKNdpbKbPvpMHgA/82BONjlb/P/PcGNUvEaRs93voKTJ78W ZqGE7PhDxYyNqd+oH/3jADqkh7x6rgsMWQAwlRmX3rV7MMvW+yUTORdBbtfFkPRR V4Liv3H1ICxm9r3AdfBV8vGF46VlZRzj+4JpMcb20X8W8R9hgKWUnySxKKhQz0bp rgTfkj9XoMsTGdM5ocGDH+Z3Wvvg7uauhPRouPZlQtyq4HmpvG1mLp+L/ewdtKMQ eGTtP8VVQ72r8KP0LxK9wX1EvHrihKGA1f05cOO6O+jDsK4lYaH9yBycEhOxa57X PbCfvUWA2v1DsJeYrLpVyyc/sFsVi24= -----END CERTIFICATE-----Generated at Fri Mar 14 10:17:41 2025 by rpki-client