$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e654915c-c83e-3650-9274-3ac5bd8d7737.roa File: e654915c-c83e-3650-9274-3ac5bd8d7737.roa (raw, json) Hash identifier: AyM2eKHUv44+2h9wZbFWR2EmwljeZl1wB3TL9E83yDc= Subject key identifier: 21:04:DB:52:4C:3B:42:01:13:D4:F6:8D:40:D5:45:A8:BB:25:70:56 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858490F7C05F280BC59BC1666CC80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e654915c-c83e-3650-9274-3ac5bd8d7737.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 54113 IP address blocks: 131.125.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7c:05:f2:80:bc:59:bc:16:66:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=51ccb9ee-e98c-4b65-9967-a94aa05b851b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:04:54:0a:57:17:0b:a9:ab:be:87:91:08:21: 30:3f:37:47:5b:b7:2d:1b:3d:0e:45:1a:d4:a7:9d: f0:2a:df:df:2b:65:e1:09:db:14:7e:32:a3:be:70: 76:28:2a:97:97:67:d9:94:50:c2:3d:c4:ea:21:f7: 9b:59:20:53:45:be:5b:c3:ef:13:26:1d:a9:79:98: 8c:0f:5b:1f:89:7c:4e:f2:05:63:cc:fd:b9:bf:2f: 8b:4c:15:7d:fe:a0:dc:33:aa:05:42:04:72:ba:9e: 40:c0:9b:f1:ba:a8:0c:70:ec:00:87:fd:1a:de:3e: 0c:4c:41:56:51:12:10:51:85:9d:1d:a5:00:8a:52: 3c:be:62:70:a9:ed:bd:72:79:96:06:2c:33:0d:0d: 2c:0b:bf:1e:63:54:ad:03:b9:21:d0:90:65:ef:00: 3e:38:59:00:bb:86:f8:1c:fe:b5:2b:4c:cd:a7:8b: 34:32:08:d7:d0:35:12:53:7d:93:93:00:3f:31:b0: da:50:3d:2a:a9:38:01:b0:5b:df:45:f3:4f:75:86: e4:75:f6:57:92:f2:5c:61:8b:de:9d:ec:c8:be:f9: 9a:bd:96:5b:bf:31:d9:94:ad:2f:69:da:96:d5:d1: f1:1b:cc:78:d6:d5:90:9e:1c:04:ff:7f:41:aa:bc: a2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:04:DB:52:4C:3B:42:01:13:D4:F6:8D:40:D5:45:A8:BB:25:70:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e654915c-c83e-3650-9274-3ac5bd8d7737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a2:63:2e:37:4e:6e:87:6d:30:fb:c7:f4:a1:03:2f:76:78: 98:73:dd:99:74:7b:8e:a5:ed:7d:e4:c2:f7:99:e7:cb:18:a6: 1c:05:61:bb:78:7e:64:79:bb:e1:fe:8c:df:26:8a:2d:47:26: d9:b3:85:f8:7a:0e:ae:f0:e4:03:d8:83:cf:84:07:f6:5e:30: 17:da:15:23:7a:29:84:ee:55:36:74:a4:4b:b7:68:c4:b0:10: 2b:57:19:5a:ab:bd:95:a1:fb:11:73:0f:13:01:3b:c2:f9:6d: 53:22:3e:13:69:50:f9:3a:63:8c:fe:9b:4c:e8:e6:76:66:82: 60:d5:85:23:66:10:09:8c:78:ac:c6:e9:8a:ab:09:ef:75:45: 83:ed:62:ac:4a:83:b1:19:58:ff:24:f1:82:42:21:28:36:05: 4d:fd:35:15:4b:44:10:fe:33:96:5f:a4:d1:af:a8:7e:f5:c2: ef:54:84:65:09:64:44:36:6c:f6:d1:50:e7:cc:07:22:a2:4e: 8c:d5:05:18:32:71:56:ee:48:c2:9f:c8:15:7d:a1:cb:82:1c: 51:6e:e0:83:a0:7d:74:de:92:09:f7:8c:6c:a1:00:9f:b9:e0: d8:0d:98:11:a6:47:ca:a2:12:62:14:2f:ab:64:62:ff:96:01: 77:60:cb:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPfAXygLxZvBZmzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk NTFjY2I5ZWUtZTk4Yy00YjY1LTk5NjctYTk0YWEwNWI4NTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqARUClcXC6mrvoeRCCEwPzdHW7ctGz0ORRrU p53wKt/fK2XhCdsUfjKjvnB2KCqXl2fZlFDCPcTqIfebWSBTRb5bw+8TJh2peZiM D1sfiXxO8gVjzP25vy+LTBV9/qDcM6oFQgRyup5AwJvxuqgMcOwAh/0a3j4MTEFW URIQUYWdHaUAilI8vmJwqe29cnmWBiwzDQ0sC78eY1StA7kh0JBl7wA+OFkAu4b4 HP61K0zNp4s0MgjX0DUSU32TkwA/MbDaUD0qqTgBsFvfRfNPdYbkdfZXkvJcYYve nezIvvmavZZbvzHZlK0vadqW1dHxG8x41tWQnhwE/39BqryixwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEE21JMO0IBE9T2jUDVRai7JXBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZTY1NDkxNWMtYzgzZS0z NjUwLTkyNzQtM2FjNWJkOGQ3NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg314MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaiYy43Tm6HbTD7x/ShAy92eJhz3Zl0e46l7X3kwveZ58sYphwFYbt4 fmR5u+H+jN8mii1HJtmzhfh6Dq7w5APYg8+EB/ZeMBfaFSN6KYTuVTZ0pEu3aMSw ECtXGVqrvZWh+xFzDxMBO8L5bVMiPhNpUPk6Y4z+m0zo5nZmgmDVhSNmEAmMeKzG 6YqrCe91RYPtYqxKg7EZWP8k8YJCISg2BU39NRVLRBD+M5ZfpNGvqH71wu9UhGUJ ZEQ2bPbRUOfMByKiTozVBRgycVbuSMKfyBV9ocuCHFFu4IOgfXTekgn3jGyhAJ+5 4NgNmBGmR8qiEmIUL6tkYv+WAXdgy1s= -----END CERTIFICATE-----Generated at Fri Mar 14 08:27:43 2025 by rpki-client