$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4c5c9bca-7b5a-35ad-8094-e95f278bcc7c.roa File: 4c5c9bca-7b5a-35ad-8094-e95f278bcc7c.roa (raw, json) Hash identifier: SAFrIt8sLZSHvVQgFDHp6Ojv8RhCp+uePACav/6oo3A= Subject key identifier: 36:35:BD:71:0E:0B:B0:F1:67:84:F4:F6:C6:7B:AE:94:E2:8D:9B:E1 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858490F7C02CC64B96C4C5BD0B400 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4c5c9bca-7b5a-35ad-8094-e95f278bcc7c.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 54113 IP address blocks: 131.125.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7c:02:cc:64:b9:6c:4c:5b:d0:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=2afde46e-9ac7-455b-8523-61dda2a61339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b4:74:50:fb:43:e0:7f:90:39:f3:79:91:ce: 49:9d:cf:0e:71:aa:d9:ab:de:c6:53:ae:6a:df:c9: 47:a9:26:f8:8d:8d:56:ac:58:57:c5:5b:f2:14:5a: 01:e0:c6:4b:29:c8:8c:06:e2:c4:23:e6:13:82:9f: c7:33:b5:11:ef:2a:8b:6a:12:23:6a:d6:2e:11:f0: 20:05:b6:e3:08:6f:f9:72:76:bd:e3:d2:d3:c1:b1: e6:1b:b3:b1:23:e6:00:5b:f8:f3:14:3a:61:03:2a: 35:f3:67:e3:0a:0b:d1:1b:0f:e4:ac:96:eb:b4:dd: db:0c:63:8a:29:19:98:d9:b1:6a:f6:6c:f1:51:b1: 49:44:9d:36:a1:db:d9:be:0a:3b:a6:d2:45:a1:fa: d8:ee:49:80:36:46:64:7d:3a:01:62:8e:25:70:a3: 41:5b:80:c2:24:5c:aa:3f:a9:86:a6:bd:df:7b:4e: ea:ff:da:da:e8:f3:01:2c:ac:37:38:f6:41:16:6c: 75:9e:02:45:8e:45:64:54:89:4e:91:81:d6:1b:9b: 8c:79:e5:fd:a8:5d:cf:81:13:ff:75:44:30:97:da: 9c:ad:07:f4:b9:fe:75:c6:eb:36:01:20:2f:6c:0a: 82:50:84:45:bd:21:ac:6f:23:0c:d4:0f:dc:ca:1b: 08:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:35:BD:71:0E:0B:B0:F1:67:84:F4:F6:C6:7B:AE:94:E2:8D:9B:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4c5c9bca-7b5a-35ad-8094-e95f278bcc7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f3:f4:67:91:c0:2b:1d:51:f7:9a:bb:db:e5:be:91:47:c7: d0:78:e6:ff:3c:b9:23:eb:b3:ce:da:bf:a1:78:67:6b:09:56: 43:da:7e:30:7c:17:d0:44:7c:26:8f:75:98:42:c9:eb:18:92: b6:98:e1:b4:de:39:91:9b:7c:84:76:0d:7d:99:bb:db:20:e0: 7d:35:15:0b:a6:17:62:1f:00:25:1e:5f:4b:df:8e:d0:61:77: 41:23:8d:0c:c8:c0:f7:28:66:84:29:00:d3:a9:d7:6f:0d:0b: 79:b0:f7:7c:bd:77:43:bc:02:14:da:9d:28:c0:32:ac:1f:4a: c8:44:59:2a:d9:ee:13:4a:7b:f2:b3:e8:9f:cd:6b:7a:01:61: b4:38:0d:c3:ac:f1:f7:26:31:d5:94:9d:2b:e1:8b:fd:5c:62: dc:6b:a8:88:a9:26:ec:c0:fc:6e:27:e2:f1:7e:ba:0a:ec:24: 74:65:5e:50:11:fe:de:9d:e3:8f:26:99:6a:ec:71:56:fd:ab: 09:fc:8e:7c:59:e8:33:f1:f1:f2:50:51:1a:05:85:b3:bc:11: 40:df:67:08:3e:f8:96:58:46:b2:da:46:9e:8a:45:a8:a3:e5: 8a:bd:6a:4b:79:eb:48:75:74:76:52:c0:df:d9:2c:94:ec:6a: 51:93:0e:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPfALMZLlsTFvQtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk MmFmZGU0NmUtOWFjNy00NTViLTg1MjMtNjFkZGEyYTYxMzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrR0UPtD4H+QOfN5kc5Jnc8OcarZq97GU65q 38lHqSb4jY1WrFhXxVvyFFoB4MZLKciMBuLEI+YTgp/HM7UR7yqLahIjatYuEfAg BbbjCG/5cna949LTwbHmG7OxI+YAW/jzFDphAyo182fjCgvRGw/krJbrtN3bDGOK KRmY2bFq9mzxUbFJRJ02odvZvgo7ptJFofrY7kmANkZkfToBYo4lcKNBW4DCJFyq P6mGpr3fe07q/9ra6PMBLKw3OPZBFmx1ngJFjkVkVIlOkYHWG5uMeeX9qF3PgRP/ dUQwl9qcrQf0uf51xus2ASAvbAqCUIRFvSGsbyMM1A/cyhsI8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDY1vXEOC7DxZ4T09sZ7rpTijZvhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNGM1YzliY2EtN2I1YS0z NWFkLTgwOTQtZTk1ZjI3OGJjYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg313MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHz9GeRwCsdUfeau9vlvpFHx9B45v88uSPrs87av6F4Z2sJVkPafjB8 F9BEfCaPdZhCyesYkraY4bTeOZGbfIR2DX2Zu9sg4H01FQumF2IfACUeX0vfjtBh d0EjjQzIwPcoZoQpANOp128NC3mw93y9d0O8AhTanSjAMqwfSshEWSrZ7hNKe/Kz 6J/Na3oBYbQ4DcOs8fcmMdWUnSvhi/1cYtxrqIipJuzA/G4n4vF+ugrsJHRlXlAR /t6d448mmWrscVb9qwn8jnxZ6DPx8fJQURoFhbO8EUDfZwg++JZYRrLaRp6KRaij 5Yq9akt560h1dHZSwN/ZLJTsalGTDqM= -----END CERTIFICATE-----Generated at Fri Mar 14 08:35:47 2025 by rpki-client