$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2479096b-5c85-35f4-8ada-f5674035fc6e.roa File: 2479096b-5c85-35f4-8ada-f5674035fc6e.roa (raw, json) Hash identifier: oFWpOFn9/JQyfUVK1KW7IWgKDl+qDUmJJOPS1O3ePoA= Subject key identifier: 86:95:DB:94:0B:09:D6:75:5F:78:98:73:CE:CF:FF:73:1E:1B:24:BA Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584ACF710205AC8EEC1527867900 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2479096b-5c85-35f4-8ada-f5674035fc6e.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 54113 IP address blocks: 131.125.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:02:05:ac:8e:ec:15:27:86:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=5f912055-fea6-40d6-beb7-217810ea0aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7e:14:68:68:61:a1:85:ff:61:9d:bf:15:23: 0d:95:e7:b2:36:2b:88:84:d0:4d:d3:62:d6:9f:c6: f8:7b:11:08:0d:48:ef:64:93:87:3b:d8:74:63:29: 1f:43:cf:4c:b0:3f:27:c2:8d:e2:4a:4f:75:bb:59: fa:1e:1c:a4:2c:2a:22:92:e2:0a:55:cb:3d:7c:12: 13:8e:e8:81:f5:be:5b:0e:bf:c6:6c:d8:49:ad:54: 10:0d:4a:7b:05:88:ec:65:1c:b8:a8:c0:6c:ed:b6: d3:b0:c3:16:51:06:37:8a:3d:84:e7:71:f1:b1:61: a2:6d:f3:b9:44:1b:e6:4c:4c:97:32:59:7d:1a:15: 7a:eb:d3:7b:b3:f8:ac:68:6c:36:c6:54:c0:9f:a3: 6f:ea:10:04:02:00:5f:d9:21:a7:7f:bf:1e:9e:7a: fe:ed:59:07:23:a8:00:f1:39:f3:e6:38:9e:ab:99: c3:27:11:62:9e:16:54:24:97:cb:e9:3f:ee:0f:b8: 33:f0:00:da:6a:a6:71:e8:c0:e7:0f:06:a7:5b:1b: f8:10:d1:29:4f:b8:42:75:b4:14:2f:d0:63:ec:c4: 05:98:81:ec:1e:f6:ad:7a:e5:33:88:91:d7:29:dd: 57:f1:08:39:d6:42:52:27:17:a8:15:c9:52:36:e5: db:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:95:DB:94:0B:09:D6:75:5F:78:98:73:CE:CF:FF:73:1E:1B:24:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2479096b-5c85-35f4-8ada-f5674035fc6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d8:eb:2e:56:49:99:0c:7f:2e:b0:09:c9:d6:fe:66:4f:7f: 13:e5:29:f8:47:91:80:e5:0b:95:6b:8d:75:4c:54:9f:57:c9: e1:21:71:68:4d:ee:b9:8a:6a:75:e7:af:10:56:e9:9e:23:1d: 23:e7:dd:5a:dc:25:5d:36:ec:bc:c2:61:2d:d2:f0:bb:cb:22: 99:07:22:5c:17:b3:50:53:68:b5:aa:e5:6f:e2:63:d6:d1:f4: 4b:92:6c:9e:b2:d6:41:26:60:c6:4a:3f:ed:6d:4f:48:93:04: 16:5b:4e:ec:d4:7f:4b:26:2a:da:41:6b:dc:0c:47:d7:4d:d7: 90:01:bc:22:bd:8f:85:48:51:a0:7b:d9:65:a7:5a:5e:7f:6c: 61:cc:24:77:6a:7f:30:85:9a:f5:49:3a:1b:2a:06:ee:b9:f4: aa:f9:00:89:20:d7:ed:35:19:8b:95:d9:ad:32:1d:5e:a0:58: 1d:89:1f:90:0b:1c:8d:5a:0f:26:f2:b9:e8:8b:f8:9e:0a:3b: 5e:3f:d9:e3:1f:e5:31:1e:f0:ae:58:9c:9d:ef:ec:76:44:07: e3:c7:8c:8f:14:88:97:3e:0f:a5:4d:f6:36:c7:9a:6f:21:04: 5e:aa:8d:2b:5b:9d:c0:bc:35:37:03:10:12:e2:24:ff:81:a9: f5:5e:54:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQIFrI7sFSeGeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk NWY5MTIwNTUtZmVhNi00MGQ2LWJlYjctMjE3ODEwZWEwYWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX4UaGhhoYX/YZ2/FSMNleeyNiuIhNBN02LW n8b4exEIDUjvZJOHO9h0YykfQ89MsD8nwo3iSk91u1n6HhykLCoikuIKVcs9fBIT juiB9b5bDr/GbNhJrVQQDUp7BYjsZRy4qMBs7bbTsMMWUQY3ij2E53HxsWGibfO5 RBvmTEyXMll9GhV669N7s/isaGw2xlTAn6Nv6hAEAgBf2SGnf78ennr+7VkHI6gA 8Tnz5jieq5nDJxFinhZUJJfL6T/uD7gz8ADaaqZx6MDnDwanWxv4ENEpT7hCdbQU L9Bj7MQFmIHsHvateuUziJHXKd1X8Qg51kJSJxeoFclSNuXbywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaV25QLCdZ1X3iYc87P/3MeGyS6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjQ3OTA5NmItNWM4NS0z NWY0LThhZGEtZjU2NzQwMzVmYzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg31wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHY6y5WSZkMfy6wCcnW/mZPfxPlKfhHkYDlC5VrjXVMVJ9XyeEhcWhN 7rmKanXnrxBW6Z4jHSPn3VrcJV027LzCYS3S8LvLIpkHIlwXs1BTaLWq5W/iY9bR 9EuSbJ6y1kEmYMZKP+1tT0iTBBZbTuzUf0smKtpBa9wMR9dN15ABvCK9j4VIUaB7 2WWnWl5/bGHMJHdqfzCFmvVJOhsqBu659Kr5AIkg1+01GYuV2a0yHV6gWB2JH5AL HI1aDybyueiL+J4KO14/2eMf5TEe8K5YnJ3v7HZEB+PHjI8UiJc+D6VN9jbHmm8h BF6qjStbncC8NTcDEBLiJP+BqfVeVGU= -----END CERTIFICATE-----Generated at Sun Aug 24 06:19:35 2025 by rpki-client