$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/087ec3e5-7f63-331f-a693-d6a3371d30fb.roa File: 087ec3e5-7f63-331f-a693-d6a3371d30fb.roa (raw, json) Hash identifier: 3bJqWR7PeyPtb0GNRy5Vqsmvh83CYMd9A/M8dMB5yiA= Subject key identifier: 20:20:8C:FB:75:6E:83:10:A8:0B:BA:43:92:FF:27:FB:95:40:2A:BF Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584ACF710348314F78A874ED7CC0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/087ec3e5-7f63-331f-a693-d6a3371d30fb.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 54113 IP address blocks: 131.125.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:03:48:31:4f:78:a8:74:ed:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=11706ea2-1069-43c6-a9a8-f70e216808db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0e:e5:16:88:cb:63:a6:e7:5c:76:f8:07:fb: 5b:05:a6:71:0e:46:0b:4e:52:17:53:e7:4c:f9:77: 50:5e:78:54:82:c4:6d:43:ff:fa:0e:12:be:1d:22: 27:db:84:65:53:41:e9:3e:89:91:c8:8a:dd:8c:2f: f9:19:e5:e2:ed:47:c8:4f:f0:72:f6:fe:09:c5:3e: cd:ef:82:bd:5e:22:82:5b:a1:4d:c1:d2:ad:db:6c: d6:c2:20:86:14:76:5b:88:6a:e3:79:22:b5:47:0f: b0:2f:a4:03:e6:97:97:82:f1:58:70:02:d8:e1:c9: 3e:e8:1d:ef:5d:b7:84:ab:2d:fd:c0:6d:06:8d:83: c4:fc:7e:b2:21:b4:a2:e3:68:f6:bc:cb:08:a2:9a: d2:8f:ef:02:d4:73:ec:17:13:22:a5:01:2b:9b:2e: fa:1f:e7:de:59:d2:66:07:d5:26:63:3c:2d:04:a6: b0:6f:a6:04:4d:d0:fd:c5:bb:a1:f6:9e:5f:d5:66: 57:1f:b1:d0:3a:d0:3f:19:df:ab:1f:95:3b:a0:81: 54:6e:e2:82:06:6a:47:7e:23:15:a5:6f:f8:e7:13: 3c:50:2c:d2:d8:73:05:8e:6e:3f:e6:c3:dd:51:a1: f0:17:3b:86:9c:fd:98:93:e4:07:69:2a:bb:70:65: 39:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:20:8C:FB:75:6E:83:10:A8:0B:BA:43:92:FF:27:FB:95:40:2A:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/087ec3e5-7f63-331f-a693-d6a3371d30fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:93:eb:27:3e:22:10:76:43:84:05:66:7f:24:e7:89:73:3a: 4e:e5:63:9b:e2:a6:a6:82:71:44:97:f8:9a:7f:0f:ee:53:70: b9:57:4d:01:fc:09:b3:33:22:7d:ea:63:ab:43:38:42:08:55: 5e:0f:c2:fa:68:cf:59:db:74:9a:93:e1:be:13:39:8d:d1:92: 5b:92:b2:b7:9e:bf:d9:da:21:3d:5a:89:98:c7:6e:9a:20:f0: 06:51:92:f4:01:06:ce:e5:b1:9d:6c:d4:69:65:a2:1f:b4:93: 34:44:8f:04:36:de:06:fc:87:20:7f:dc:2b:2a:cc:2f:6a:c8: 7d:2f:d1:0e:da:dd:d7:a2:6c:2a:c4:7e:b4:49:7a:7e:72:34: 0d:25:99:ba:4f:f1:d0:ec:15:3b:89:a5:dd:e4:dc:ac:99:b3: 71:6e:d4:29:12:af:9d:6e:9e:80:75:d8:6c:38:d6:fa:8e:7b: b4:0a:e8:93:e3:96:41:67:79:ee:3b:7f:d5:09:57:35:ce:71: 3c:1c:c9:f3:04:d0:48:03:79:81:57:07:01:a3:ed:a1:79:66: 40:ca:9c:1d:93:5d:80:e3:55:98:d3:1d:3e:c7:e3:eb:2b:55: 90:c0:06:9c:7e:fd:33:1b:45:92:e5:fb:cd:60:cc:27:17:fb: 8f:dd:df:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQNIMU94qHTtfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk MTE3MDZlYTItMTA2OS00M2M2LWE5YTgtZjcwZTIxNjgwOGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg7lFojLY6bnXHb4B/tbBaZxDkYLTlIXU+dM +XdQXnhUgsRtQ//6DhK+HSIn24RlU0HpPomRyIrdjC/5GeXi7UfIT/By9v4JxT7N 74K9XiKCW6FNwdKt22zWwiCGFHZbiGrjeSK1Rw+wL6QD5peXgvFYcALY4ck+6B3v XbeEqy39wG0GjYPE/H6yIbSi42j2vMsIoprSj+8C1HPsFxMipQErmy76H+feWdJm B9UmYzwtBKawb6YETdD9xbuh9p5f1WZXH7HQOtA/Gd+rH5U7oIFUbuKCBmpHfiMV pW/45xM8UCzS2HMFjm4/5sPdUaHwFzuGnP2Yk+QHaSq7cGU5JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAgjPt1boMQqAu6Q5L/J/uVQCq/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMDg3ZWMzZTUtN2Y2My0z MzFmLWE2OTMtZDZhMzM3MWQzMGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKT6yc+IhB2Q4QFZn8k54lzOk7lY5vipqaCcUSX+Jp/D+5TcLlXTQH8 CbMzIn3qY6tDOEIIVV4Pwvpoz1nbdJqT4b4TOY3RkluSsreev9naIT1aiZjHbpog 8AZRkvQBBs7lsZ1s1Glloh+0kzREjwQ23gb8hyB/3CsqzC9qyH0v0Q7a3deibCrE frRJen5yNA0lmbpP8dDsFTuJpd3k3KyZs3Fu1CkSr51unoB12Gw41vqOe7QK6JPj lkFnee47f9UJVzXOcTwcyfME0EgDeYFXBwGj7aF5ZkDKnB2TXYDjVZjTHT7H4+sr VZDABpx+/TMbRZLl+81gzCcX+4/d38E= -----END CERTIFICATE-----Generated at Sun Aug 24 03:55:50 2025 by rpki-client