$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/458d08ae-db95-35c8-a848-dba5242c611e.roa File: 458d08ae-db95-35c8-a848-dba5242c611e.roa (raw, json) Hash identifier: n+o7vcSD3p1p2PraycuggXQwPJa55OCm2tS2KWPd1cM= Subject key identifier: 55:A2:F1:16:C7:5C:18:AA:F7:F2:1E:56:CF:87:72:CC:93:BC:B4:75 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858490F7C030BD2720BDCDD3BC000 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/458d08ae-db95-35c8-a848-dba5242c611e.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 54113 IP address blocks: 131.125.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7c:03:0b:d2:72:0b:dc:dd:3b:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=d9a31ae1-701c-4763-aa21-2647427f50be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d1:42:14:9e:b3:22:45:81:2d:c9:e5:40:da: 6d:8a:a2:7e:f8:22:01:0e:ff:8f:f7:7c:df:29:17: 0e:37:79:14:64:5d:8a:51:b6:98:1f:05:12:db:69: fd:b2:3b:e6:69:d4:40:1e:6b:87:7d:20:76:02:e2: aa:aa:4a:7a:db:15:41:ef:b4:7b:6b:7b:1c:9f:d9: 49:82:89:bf:5d:5f:77:7a:46:dd:50:c5:02:a9:bd: 49:4a:4c:15:85:da:5b:63:bf:1c:80:5b:25:ad:cb: 57:9e:db:23:b7:06:85:85:e4:5f:eb:59:dc:c4:3f: 7c:87:63:71:55:49:29:c8:b7:29:ca:1d:2e:c8:12: 35:0b:2a:fa:ab:6c:13:ad:4e:ce:1d:47:26:52:f7: 86:ff:8a:d4:d3:5f:e7:00:6f:12:26:30:86:88:1a: c6:a5:d3:6e:c6:bd:e3:6e:45:2a:8b:06:aa:54:88: ac:34:4b:b7:a7:0d:bd:89:21:3c:88:33:65:6c:d6: ff:eb:e1:9b:60:be:8f:9f:3a:08:2b:52:2c:b5:0f: 48:a7:04:cd:1e:4b:95:39:46:62:00:ea:58:22:a9: e4:1f:b7:22:ae:11:81:d4:36:e0:30:63:8c:60:43: 9b:bd:31:2e:75:1e:d9:d3:9c:99:08:14:2e:be:75: 94:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A2:F1:16:C7:5C:18:AA:F7:F2:1E:56:CF:87:72:CC:93:BC:B4:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/458d08ae-db95-35c8-a848-dba5242c611e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:76:8e:a4:48:6f:e7:72:c3:35:2c:91:35:88:de:6c:f6:cc: a1:89:05:45:aa:41:cd:51:ba:08:9c:cf:33:51:92:0e:3c:c8: 6c:15:f8:bb:a4:b4:5f:1f:03:41:7b:81:cc:d4:06:ed:05:1b: 65:b3:a6:ad:31:df:c3:5f:32:54:b4:b6:ec:26:06:97:96:02: e3:f5:de:42:f9:c0:40:3c:45:53:93:93:8a:c4:8e:3a:b7:1a: bd:fb:15:d0:6b:a4:e7:f8:16:16:49:2b:d3:bb:9e:e6:b9:bb: 1e:95:a3:f7:10:47:36:54:23:0e:ae:86:5b:02:b4:6d:9e:cd: a1:be:5d:05:b4:d3:88:4b:15:cc:54:66:ca:4b:b4:a7:4a:87: d2:2a:78:17:5d:68:b7:ce:60:09:2c:3d:1a:46:e3:0b:2b:ad: e0:57:11:66:fd:15:e4:db:24:4b:b9:7d:c9:44:a8:16:07:2f: 74:6d:da:3b:48:40:c0:4f:67:0e:ed:15:ea:9d:5e:21:aa:2a: 6a:07:ff:ec:74:c0:e9:44:ec:69:b4:07:bd:0f:6c:df:ea:b2: cf:67:a3:9b:e0:17:23:89:8f:9a:84:f6:f2:11:e2:68:99:d4: 99:55:5b:93:f3:65:07:52:a4:01:c9:70:2e:b6:cc:dc:c3:43: d4:1b:21:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPfAML0nIL3N07wAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk ZDlhMzFhZTEtNzAxYy00NzYzLWFhMjEtMjY0NzQyN2Y1MGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidFCFJ6zIkWBLcnlQNptiqJ++CIBDv+P93zf KRcON3kUZF2KUbaYHwUS22n9sjvmadRAHmuHfSB2AuKqqkp62xVB77R7a3scn9lJ gom/XV93ekbdUMUCqb1JSkwVhdpbY78cgFslrctXntsjtwaFheRf61ncxD98h2Nx VUkpyLcpyh0uyBI1Cyr6q2wTrU7OHUcmUveG/4rU01/nAG8SJjCGiBrGpdNuxr3j bkUqiwaqVIisNEu3pw29iSE8iDNlbNb/6+GbYL6PnzoIK1IstQ9IpwTNHkuVOUZi AOpYIqnkH7cirhGB1DbgMGOMYEObvTEudR7Z05yZCBQuvnWUEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWi8RbHXBiq9/IeVs+HcsyTvLR1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDU4ZDA4YWUtZGI5NS0z NWM4LWE4NDgtZGJhNTI0MmM2MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABN2jqRIb+dywzUskTWI3mz2zKGJBUWqQc1RugiczzNRkg48yGwV+Luk tF8fA0F7gczUBu0FG2Wzpq0x38NfMlS0tuwmBpeWAuP13kL5wEA8RVOTk4rEjjq3 Gr37FdBrpOf4FhZJK9O7nua5ux6Vo/cQRzZUIw6uhlsCtG2ezaG+XQW004hLFcxU ZspLtKdKh9IqeBddaLfOYAksPRpG4wsrreBXEWb9FeTbJEu5fclEqBYHL3Rt2jtI QMBPZw7tFeqdXiGqKmoH/+x0wOlE7Gm0B70PbN/qss9no5vgFyOJj5qE9vIR4miZ 1JlVW5PzZQdSpAHJcC62zNzDQ9QbIfE= -----END CERTIFICATE-----Generated at Fri Mar 14 14:03:12 2025 by rpki-client