$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4c5c9bca-7b5a-35ad-8094-e95f278bcc7c.roa File: 4c5c9bca-7b5a-35ad-8094-e95f278bcc7c.roa (raw, json) Hash identifier: DbMD1nfkdDby6OL0XacDrD0JCMrKycZATVZFCHLxaKw= Subject key identifier: 63:72:27:97:60:FC:77:E8:56:E7:ED:C8:CD:EA:E9:37:54:4F:07:61 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285848302539FF27260187425FA700 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4c5c9bca-7b5a-35ad-8094-e95f278bcc7c.roa Signing time: Fri 13 Dec 2024 02:00:39 +0000 ROA not before: Fri 13 Dec 2024 02:00:39 +0000 ROA not after: Thu 13 Mar 2025 01:00:39 +0000 asID: 54113 IP address blocks: 131.125.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:30:25:39:ff:27:26:01:87:42:5f:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Dec 13 02:00:39 2024 GMT Not After : Mar 13 01:00:39 2025 GMT Subject: CN=2e63e8e9-5702-4d4d-a134-2b2cb3b813b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:46:58:a0:b2:a6:62:11:c9:6c:0c:32:69: 91:36:ec:db:47:72:3b:3c:ae:4e:c4:12:ad:55:4f: 4b:69:a5:a3:62:47:de:69:5e:5b:9f:fc:2e:df:e0: 81:de:cb:db:65:c1:b8:da:1e:17:b0:fb:82:48:fe: 8c:39:ca:ba:10:a6:93:2e:10:21:18:ec:b6:a6:60: 31:ca:50:27:15:9a:2e:19:85:d4:c9:f1:47:7a:59: 19:b0:9d:8f:83:5c:a8:78:18:d1:f7:a7:33:23:1e: 27:6d:0a:7e:06:41:42:bf:cb:e3:48:0e:47:5a:2b: 14:4e:fc:78:68:a6:eb:80:91:6c:0b:ca:d2:45:4f: 87:5e:fd:8c:87:e8:71:e8:01:94:ce:25:68:f7:f1: c5:50:41:a3:a1:49:44:40:27:a6:b8:6f:f2:d1:a6: e9:93:8b:83:b8:27:0b:6f:46:12:11:e3:d0:aa:fe: fc:c1:a6:1d:c5:c5:80:c9:a6:41:b5:79:bf:cb:ec: 73:50:a9:fc:b4:17:35:22:da:d9:5c:cd:1e:fe:3d: 0b:15:fd:8c:1a:09:eb:b1:5a:9e:b8:88:9b:ce:e3: d8:33:6d:e1:05:c5:26:eb:b6:8f:d8:2f:48:42:9b: fd:33:7f:51:87:7a:2d:ab:09:c8:5c:a6:d1:75:17: 74:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:72:27:97:60:FC:77:E8:56:E7:ED:C8:CD:EA:E9:37:54:4F:07:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4c5c9bca-7b5a-35ad-8094-e95f278bcc7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:6d:ca:dd:24:69:64:48:6c:62:ae:4f:6a:f0:a2:65:f7:35: 38:11:6f:52:95:dc:45:ef:1f:17:00:ef:c7:28:b4:91:fc:3c: 68:15:9a:bd:e8:5f:db:4e:af:ba:f2:c2:7a:7e:44:5c:30:ba: 2d:96:d0:ab:8c:20:f4:e4:98:13:18:dd:ed:1c:6f:ba:b2:a4: ef:a2:a6:37:2c:02:8d:5e:7f:89:a9:06:b8:de:8c:9c:a1:4d: 26:1d:2d:95:b8:42:ee:b8:83:6c:ce:21:08:8d:cd:14:ed:fa: c8:bf:b9:3d:a9:59:da:6c:0a:d7:1e:a8:63:e9:97:79:02:24: 03:55:50:5b:72:83:66:fe:6f:ff:26:bc:86:93:0b:2c:eb:7a: 91:a9:bf:d8:32:fb:fe:9a:42:de:29:dd:b4:57:29:e1:3c:8b: 71:b6:b0:f5:30:fa:85:53:52:b5:a5:33:e3:70:58:4c:3c:53: 1a:e3:83:c7:09:fd:45:9c:a9:13:f6:e6:a4:78:b4:53:36:10: a4:0b:ea:ee:2a:05:a3:7b:52:a6:69:a0:91:31:fc:74:48:74: 71:2d:21:64:3c:fe:83:79:4d:96:cf:f9:33:b6:56:bf:a6:85: d3:80:f0:be:ff:d5:d4:32:e1:d7:bd:47:65:0d:44:7b:e4:c0: 34:2a:f6:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwJTn/JyYBh0JfpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI0MTIxMzAyMDAzOVoXDTI1MDMxMzAxMDAzOVowLzEtMCsGA1UEAxMk MmU2M2U4ZTktNTcwMi00ZDRkLWExMzQtMmIyY2IzYjgxM2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuONGWKCypmIRyWwMMmmRNuzbR3I7PK5OxBKt VU9LaaWjYkfeaV5bn/wu3+CB3svbZcG42h4XsPuCSP6MOcq6EKaTLhAhGOy2pmAx ylAnFZouGYXUyfFHelkZsJ2Pg1yoeBjR96czIx4nbQp+BkFCv8vjSA5HWisUTvx4 aKbrgJFsC8rSRU+HXv2Mh+hx6AGUziVo9/HFUEGjoUlEQCemuG/y0abpk4uDuCcL b0YSEePQqv78waYdxcWAyaZBtXm/y+xzUKn8tBc1ItrZXM0e/j0LFf2MGgnrsVqe uIibzuPYM23hBcUm67aP2C9IQpv9M39Rh3otqwnIXKbRdRd0AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNyJ5dg/HfoVuftyM3q6TdUTwdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNGM1YzliY2EtN2I1YS0z NWFkLTgwOTQtZTk1ZjI3OGJjYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg313MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChtyt0kaWRIbGKuT2rwomX3NTgRb1KV3EXvHxcA78cotJH8PGgVmr3o X9tOr7rywnp+RFwwui2W0KuMIPTkmBMY3e0cb7qypO+ipjcsAo1ef4mpBrjejJyh TSYdLZW4Qu64g2zOIQiNzRTt+si/uT2pWdpsCtceqGPpl3kCJANVUFtyg2b+b/8m vIaTCyzrepGpv9gy+/6aQt4p3bRXKeE8i3G2sPUw+oVTUrWlM+NwWEw8Uxrjg8cJ /UWcqRP25qR4tFM2EKQL6u4qBaN7UqZpoJEx/HRIdHEtIWQ8/oN5TZbP+TO2Vr+m hdOA8L7/1dQy4de9R2UNRHvkwDQq9j8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:21 2025 by rpki-client