$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/08e7cc25-5d1f-3e45-a8b4-53e868927662.roa File: 08e7cc25-5d1f-3e45-a8b4-53e868927662.roa (raw, json) Hash identifier: xpPtvXDxs97oLvJ7mnOvaaf5a2fvv16yaZVK5IYpFSU= Subject key identifier: 2B:4D:AC:80:28:40:AA:F8:28:E6:59:81:5C:4D:4B:9C:41:6F:11:6C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584ACF710405E8BF36102A3C2B28 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/08e7cc25-5d1f-3e45-a8b4-53e868927662.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 54113 IP address blocks: 131.125.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:04:05:e8:bf:36:10:2a:3c:2b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=fde50302-7be1-42e0-aa38-d21bc150739d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:93:eb:4a:e2:4f:a1:c6:77:7e:fd:76:84:61: 0e:91:1e:19:1d:4c:33:b0:20:78:c1:3a:ee:39:57: dd:2e:2c:4d:3e:b8:ed:be:97:48:28:13:f6:db:3d: 23:1e:25:4b:08:e2:ac:a2:12:06:2b:02:e6:a5:0a: d9:c3:bb:e2:2f:6e:5b:3e:bc:72:76:f2:91:e5:ef: af:9a:a4:d6:e0:22:c0:5b:8f:89:37:7d:d2:32:54: c6:36:47:d9:31:06:a9:11:a9:4b:20:d1:a6:8b:1d: 8e:95:d3:e5:62:11:b9:66:f3:e4:0b:50:48:52:4a: 7d:4c:29:84:7e:f0:69:27:eb:cb:13:b3:3b:c1:43: 24:4e:f1:8c:a7:38:63:73:7f:11:82:97:9f:1f:a0: 7d:6f:88:ef:de:1f:4f:c2:4b:bf:86:a6:58:6c:7c: f1:c4:6a:49:c4:e6:db:55:cb:12:a0:55:61:48:b9: 4d:68:d8:cd:2a:97:67:6b:98:a9:73:6a:24:86:03: 16:4b:02:7a:71:1c:97:a9:69:06:7f:db:d7:e1:cc: ff:1c:b1:d4:92:07:31:2a:43:24:fa:32:89:d1:d7: 28:41:ff:62:73:54:be:e8:97:85:f9:8b:23:bb:2f: b7:ae:2f:17:2c:34:42:9c:69:ea:98:ac:53:93:ce: 76:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4D:AC:80:28:40:AA:F8:28:E6:59:81:5C:4D:4B:9C:41:6F:11:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/08e7cc25-5d1f-3e45-a8b4-53e868927662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e4:9b:82:1c:ce:7b:48:a7:45:04:fc:f7:1a:97:e1:2e:e0: 7d:03:4c:62:d5:f7:0a:ff:bd:09:dc:28:b5:7f:7c:68:d6:ec: 6b:9c:a4:41:2c:a0:25:54:f0:aa:27:b0:b9:3d:6f:99:d5:53: db:a8:9a:02:66:52:62:d6:bd:1c:94:14:18:35:bb:20:90:2a: 1f:8e:1c:08:51:e0:d8:e9:d6:ec:c0:a8:30:6a:08:d4:c4:ae: b7:21:37:34:fb:57:02:cd:1f:45:e8:57:3c:72:9b:86:63:c5: 4d:15:92:bc:5e:e2:7c:d4:58:bc:ff:bb:08:e1:b5:80:bd:e7: f4:3b:bf:b8:ac:47:0d:05:be:ea:26:e2:5e:13:bc:94:c3:c1: 54:5e:2b:15:f9:83:71:2d:80:54:b9:54:20:3a:a3:ed:1d:75: 10:e8:d2:5a:ac:75:e7:d4:d2:54:d9:2f:bc:7c:61:61:a3:77: 92:c9:04:bc:94:cf:5c:05:c4:a6:2a:72:14:49:7b:d2:d7:f9: 3a:83:75:f4:e2:ba:f6:c5:9e:fd:ab:1b:06:16:8a:84:ab:56: 7b:ff:dc:01:c8:a3:15:7e:62:c5:a1:fa:31:4f:70:7b:d5:f5: 86:a4:35:8b:94:7b:7b:d0:84:b2:66:32:74:8a:dd:db:4f:d7: 0a:a0:b0:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQQF6L82ECo8KygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk ZmRlNTAzMDItN2JlMS00MmUwLWFhMzgtZDIxYmMxNTA3MzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5PrSuJPocZ3fv12hGEOkR4ZHUwzsCB4wTru OVfdLixNPrjtvpdIKBP22z0jHiVLCOKsohIGKwLmpQrZw7viL25bPrxydvKR5e+v mqTW4CLAW4+JN33SMlTGNkfZMQapEalLINGmix2OldPlYhG5ZvPkC1BIUkp9TCmE fvBpJ+vLE7M7wUMkTvGMpzhjc38RgpefH6B9b4jv3h9Pwku/hqZYbHzxxGpJxObb VcsSoFVhSLlNaNjNKpdna5ipc2okhgMWSwJ6cRyXqWkGf9vX4cz/HLHUkgcxKkMk +jKJ0dcoQf9ic1S+6JeF+Ysjuy+3ri8XLDRCnGnqmKxTk852hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtNrIAoQKr4KOZZgVxNS5xBbxFsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMDhlN2NjMjUtNWQxZi0z ZTQ1LWE4YjQtNTNlODY4OTI3NjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg31mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXkm4IczntIp0UE/Pcal+Eu4H0DTGLV9wr/vQncKLV/fGjW7GucpEEs oCVU8KonsLk9b5nVU9uomgJmUmLWvRyUFBg1uyCQKh+OHAhR4Njp1uzAqDBqCNTE rrchNzT7VwLNH0XoVzxym4ZjxU0Vkrxe4nzUWLz/uwjhtYC95/Q7v7isRw0Fvuom 4l4TvJTDwVReKxX5g3EtgFS5VCA6o+0ddRDo0lqsdefU0lTZL7x8YWGjd5LJBLyU z1wFxKYqchRJe9LX+TqDdfTiuvbFnv2rGwYWioSrVnv/3AHIoxV+YsWh+jFPcHvV 9YakNYuUe3vQhLJmMnSK3dtP1wqgsGM= -----END CERTIFICATE-----Generated at Sat Aug 23 23:17:22 2025 by rpki-client