$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/914009a0-531c-33eb-b2c6-005e1809d476.roa File: 914009a0-531c-33eb-b2c6-005e1809d476.roa (raw, json) Hash identifier: vIKAoxMwP9hHYQm6J2r0bNAWsoT5AWphGjuJNiqhaQk= Subject key identifier: 9D:C7:49:39:0F:18:D4:9A:2E:53:57:8C:C3:09:97:63:60:01:6C:47 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858490F7C0467D6C92506C2BB3B00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/914009a0-531c-33eb-b2c6-005e1809d476.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 54113 IP address blocks: 131.125.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7c:04:67:d6:c9:25:06:c2:bb:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=1a4bec69-6087-43e7-9033-dfe486184eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0c:8e:c4:a7:2a:75:6d:56:6c:73:c6:f8:b9: 4c:4d:3b:a8:a8:8e:6c:01:e0:87:28:1d:b8:6f:5e: c4:a8:69:c6:bf:44:2f:0d:57:e5:d4:ba:f5:96:40: 8d:61:f3:90:be:8f:f7:3d:01:fc:35:88:18:24:01: 35:0f:4a:ce:b8:c9:b8:5d:24:7c:9e:fb:76:c6:0d: 0a:11:8b:17:de:aa:5a:f8:54:dd:60:60:b0:cd:16: 23:8a:73:63:20:5b:d4:4a:8e:57:9a:68:8a:7f:e1: 37:9f:e5:f6:4e:11:21:97:e1:48:f2:19:03:21:6f: 84:52:10:8d:40:58:32:ad:ee:35:6e:23:1e:6c:c4: 5d:d0:5c:50:a4:d0:72:5d:20:ba:f9:09:05:64:53: 4d:cd:ec:cb:1e:1c:11:44:4f:71:b9:6e:d9:da:9d: 35:60:de:a6:e2:a7:a7:e8:00:db:37:10:c7:23:0a: ae:29:52:c2:c7:b4:5e:c4:ff:c0:dc:e5:c6:74:a5: 31:ca:54:08:81:1f:56:91:64:3c:20:ad:5b:9b:8f: 75:27:d7:1c:2c:00:00:47:ae:3c:34:f8:c1:3d:23: b4:2b:8e:31:51:af:5e:3c:02:8c:61:4e:5b:0b:be: eb:e8:e8:16:86:2b:cb:92:7c:7b:21:96:35:55:c5: 31:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C7:49:39:0F:18:D4:9A:2E:53:57:8C:C3:09:97:63:60:01:6C:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/914009a0-531c-33eb-b2c6-005e1809d476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:9c:15:f6:62:08:a9:95:2e:17:00:f8:e9:98:75:7e:5d:d5: fe:57:2b:31:a2:b1:d4:5a:e6:53:91:29:fc:3e:34:d7:ca:95: 0c:b4:cf:bc:69:84:5d:d9:fe:72:4b:d1:4e:62:08:d0:48:ec: f5:c2:00:94:92:1a:50:2f:e0:a7:ec:72:55:57:f2:ad:6d:97: 1d:a2:ed:cb:e1:1e:be:bd:09:b0:a4:7a:db:2b:2c:bb:f8:7d: 55:9f:c6:ae:5a:fe:ea:f5:61:90:11:4b:d3:74:17:72:4d:ba: 45:44:e2:41:81:6e:6c:a7:74:73:a8:f2:0c:41:e6:47:55:29: de:4e:d8:85:22:b6:36:19:d8:dc:4c:bd:9d:86:fd:d7:bc:90: 25:57:de:8a:7a:f9:6c:22:fa:8b:2a:77:ff:3c:d7:dd:5c:27: dc:ac:11:46:2f:b1:7f:87:45:c8:2f:b5:65:c1:05:83:6b:de: 79:fc:68:2c:33:86:f0:a4:04:9b:25:03:c3:6f:ec:c6:a9:de: 92:c4:b0:95:d4:c9:d0:51:42:8d:34:81:7f:2c:14:ab:42:f7: 2c:74:3a:b5:b5:90:65:d8:8f:dc:b9:26:a9:b7:ca:f7:9a:97: c4:7d:b6:fd:c1:b3:45:7e:cf:02:70:a0:15:ea:ed:31:3c:40: a2:67:a0:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPfARn1sklBsK7OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk MWE0YmVjNjktNjA4Ny00M2U3LTkwMzMtZGZlNDg2MTg0ZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugyOxKcqdW1WbHPG+LlMTTuoqI5sAeCHKB24 b17EqGnGv0QvDVfl1Lr1lkCNYfOQvo/3PQH8NYgYJAE1D0rOuMm4XSR8nvt2xg0K EYsX3qpa+FTdYGCwzRYjinNjIFvUSo5XmmiKf+E3n+X2ThEhl+FI8hkDIW+EUhCN QFgyre41biMebMRd0FxQpNByXSC6+QkFZFNNzezLHhwRRE9xuW7Z2p01YN6m4qen 6ADbNxDHIwquKVLCx7RexP/A3OXGdKUxylQIgR9WkWQ8IK1bm491J9ccLAAAR648 NPjBPSO0K44xUa9ePAKMYU5bC77r6OgWhivLknx7IZY1VcUx4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3HSTkPGNSaLlNXjMMJl2NgAWxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTE0MDA5YTAtNTMxYy0z M2ViLWIyYzYtMDA1ZTE4MDlkNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHicFfZiCKmVLhcA+OmYdX5d1f5XKzGisdRa5lORKfw+NNfKlQy0z7xp hF3Z/nJL0U5iCNBI7PXCAJSSGlAv4KfsclVX8q1tlx2i7cvhHr69CbCketsrLLv4 fVWfxq5a/ur1YZARS9N0F3JNukVE4kGBbmyndHOo8gxB5kdVKd5O2IUitjYZ2NxM vZ2G/de8kCVX3op6+Wwi+osqd/88191cJ9ysEUYvsX+HRcgvtWXBBYNr3nn8aCwz hvCkBJslA8Nv7Map3pLEsJXUydBRQo00gX8sFKtC9yx0OrW1kGXYj9y5Jqm3yvea l8R9tv3Bs0V+zwJwoBXq7TE8QKJnoFo= -----END CERTIFICATE-----Generated at Thu Apr 3 02:42:42 2025 by rpki-client