$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/489ae89c-31d7-33ba-b705-59c12d52cb71.roa File: 489ae89c-31d7-33ba-b705-59c12d52cb71.roa (raw, json) Hash identifier: 7ITTzHVzTvyVidP76G/iGHr+M4lu+A+EHAUNlUwaaqU= Subject key identifier: A5:5A:AD:B6:C4:24:C2:C1:49:A6:E1:7C:23:6A:EF:BD:EB:87:CC:04 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584ACF71052175FC9CCD60B4B600 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/489ae89c-31d7-33ba-b705-59c12d52cb71.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 54113 IP address blocks: 131.125.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 17 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:05:21:75:fc:9c:cd:60:b4:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=f2dd771e-cff9-4b12-9ec9-7a163b563ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:4c:e0:f3:8d:d7:5c:d9:30:fe:a1:61:b6: 2d:f6:29:e8:d0:6f:0d:f7:1b:7b:0d:bc:4a:b5:b7: 87:52:06:88:1c:dc:73:90:8d:34:5c:07:1c:04:2d: 9b:be:2c:96:a4:c2:f5:f0:62:62:c7:44:03:d2:91: 37:5d:52:12:ba:2f:8f:37:0d:b7:5d:20:65:66:a0: e7:a9:39:77:51:3f:69:4f:08:75:5a:4d:5e:42:12: 8a:22:63:77:e8:70:da:88:53:2e:85:bc:aa:8a:45: b4:2f:47:5d:61:bd:0d:90:74:a0:4b:a0:0f:b7:b7: 49:d9:ff:9a:f7:7c:d3:70:1f:66:90:0c:77:ac:2a: b0:fa:bf:cd:7f:d9:6c:ce:9b:f2:1b:b1:df:77:c2: 9e:48:fe:a1:5d:34:ed:d4:c8:16:7f:ac:15:b9:26: 52:17:53:5d:83:3c:ae:fb:2e:76:33:4c:c3:bb:83: 05:8e:ec:0c:31:67:10:2a:49:48:0f:72:8f:12:92: 49:1b:b4:20:36:e7:1b:8a:e4:81:7d:5e:77:bc:5a: 84:f7:a2:57:1a:d4:89:e7:7c:79:87:48:0a:d8:99: 67:78:10:cc:fd:7c:de:7d:f7:9d:12:93:26:2b:38: 15:62:4b:77:ec:a8:fc:90:f4:3b:cb:bb:7b:3c:29: 7b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5A:AD:B6:C4:24:C2:C1:49:A6:E1:7C:23:6A:EF:BD:EB:87:CC:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/489ae89c-31d7-33ba-b705-59c12d52cb71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:55:97:c9:01:5c:1c:d7:a7:5e:61:78:73:69:af:cd:ff:d1: 8c:30:07:7d:d7:05:59:91:7e:e1:9b:44:66:a4:16:73:f2:83: 6e:59:6c:8b:71:85:79:dc:73:44:03:c4:2a:fa:6d:b3:86:6c: 34:94:fa:1e:ea:da:76:0a:aa:00:f5:47:cd:13:d5:01:ee:98: e6:00:cf:db:77:1b:cc:93:28:78:47:cf:b4:b4:f7:87:8a:08: d5:e3:34:fb:2e:dd:3b:80:4b:95:89:d8:e3:1d:87:03:4d:7b: 0f:8d:85:77:89:55:57:55:5d:31:34:d8:3f:b7:8c:ff:09:db: b8:87:e3:25:50:e0:a7:72:b1:df:79:08:10:b2:09:d5:c4:e1: e7:b8:23:9b:52:c9:73:70:fe:b0:0b:d1:27:c8:6b:2a:91:1a: 18:69:60:0b:a7:1a:dc:11:a6:b6:6c:84:f2:57:88:05:cb:e7: 3c:96:8c:aa:20:09:66:f9:6c:45:69:5d:61:9a:68:90:e3:5f: 01:30:8d:f6:d5:08:7d:82:f0:f2:57:da:d8:bf:99:c5:28:b2: 31:9c:c6:7d:bb:e9:30:ea:63:62:c6:68:90:24:13:a9:d8:07: f0:56:dc:e3:cb:7b:27:3f:41:fe:11:f0:04:01:95:db:d9:fb: fa:c9:78:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQUhdfyczWC0tgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk ZjJkZDc3MWUtY2ZmOS00YjEyLTllYzktN2ExNjNiNTYzY2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEVM4PON11zZMP6hYbYt9ino0G8N9xt7DbxK tbeHUgaIHNxzkI00XAccBC2bviyWpML18GJix0QD0pE3XVISui+PNw23XSBlZqDn qTl3UT9pTwh1Wk1eQhKKImN36HDaiFMuhbyqikW0L0ddYb0NkHSgS6APt7dJ2f+a 93zTcB9mkAx3rCqw+r/Nf9lszpvyG7Hfd8KeSP6hXTTt1MgWf6wVuSZSF1Ndgzyu +y52M0zDu4MFjuwMMWcQKklID3KPEpJJG7QgNucbiuSBfV53vFqE96JXGtSJ53x5 h0gK2JlneBDM/XzeffedEpMmKzgVYkt37Kj8kPQ7y7t7PCl7/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVarbbEJMLBSabhfCNq773rh8wEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDg5YWU4OWMtMzFkNy0z M2JhLWI3MDUtNTljMTJkNTJjYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg319MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxVl8kBXBzXp15heHNpr83/0YwwB33XBVmRfuGbRGakFnPyg25ZbItx hXncc0QDxCr6bbOGbDSU+h7q2nYKqgD1R80T1QHumOYAz9t3G8yTKHhHz7S094eK CNXjNPsu3TuAS5WJ2OMdhwNNew+NhXeJVVdVXTE02D+3jP8J27iH4yVQ4Kdysd95 CBCyCdXE4ee4I5tSyXNw/rAL0SfIayqRGhhpYAunGtwRprZshPJXiAXL5zyWjKog CWb5bEVpXWGaaJDjXwEwjfbVCH2C8PJX2ti/mcUosjGcxn276TDqY2LGaJAkE6nY B/BW3OPLeyc/Qf4R8AQBldvZ+/rJeBE= -----END CERTIFICATE-----Generated at Sat Aug 16 17:28:11 2025 by rpki-client