$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d03a193-10c3-35f5-a570-a05c4616b50a.roa File: 2d03a193-10c3-35f5-a570-a05c4616b50a.roa (raw, json) Hash identifier: ab7UzaV4JCnW6o30I8XdP/YKs1aSyaMuBRPAOMPfCio= Subject key identifier: 97:C1:1D:7C:C2:92:3E:C7:F7:D7:4F:38:8D:DF:40:7A:E8:9C:72:5B Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584ACF71021ACDF925E49B26C980 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d03a193-10c3-35f5-a570-a05c4616b50a.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 54113 IP address blocks: 131.125.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:02:1a:cd:f9:25:e4:9b:26:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=9c5fd623-79c8-42c2-a024-9cebd22009d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:77:f5:e1:e6:c0:72:43:28:34:90:cf:7d: 0c:a5:da:57:88:c8:bd:e4:55:87:0f:bc:e2:e9:bb: 74:3a:43:7e:67:db:f5:b7:03:1c:12:ca:68:5c:f9: ec:24:e4:51:61:8b:b6:37:67:b2:af:70:77:37:f9: f9:1b:59:41:0b:c0:c6:74:e6:a0:62:b5:8c:32:05: e8:06:2f:1f:96:dc:8c:c5:1b:a6:2d:ec:3b:3a:92: bb:a2:fa:fb:b7:01:1c:7e:32:18:55:51:0b:7c:5b: 42:33:d9:10:fb:bf:07:b3:86:fe:61:58:f7:26:94: a5:68:6a:ae:d9:57:4e:ec:72:2e:7c:da:ff:3d:a3: c1:93:de:74:0b:59:8c:e4:49:a2:13:28:35:b0:c6: 48:61:e3:22:da:f8:50:f5:d3:e4:6d:f3:33:61:3e: f2:1c:83:97:ff:f4:0c:55:1e:65:c3:c4:96:6e:78: 72:2d:4d:83:52:8a:e2:16:02:51:cd:11:54:f3:c3: fc:52:de:c0:cd:16:bc:c8:c7:4c:fb:80:4d:06:50: 48:fe:15:f6:dd:f8:24:3a:21:4c:62:f5:8b:12:4a: 40:94:f3:04:af:63:39:38:2c:95:1d:f7:22:13:cf: 7d:70:91:34:96:16:ea:b1:b5:af:59:32:c2:eb:87: ac:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C1:1D:7C:C2:92:3E:C7:F7:D7:4F:38:8D:DF:40:7A:E8:9C:72:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d03a193-10c3-35f5-a570-a05c4616b50a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f2:77:00:9d:01:cf:20:5d:34:54:fe:8d:1f:a4:a0:e1:69: 17:b9:76:82:bd:b6:74:3f:f4:02:6e:32:f3:23:26:74:fb:fc: 13:93:54:5f:a1:12:ea:66:33:0e:b0:64:0b:1f:4d:af:5b:26: 15:cf:45:50:65:85:5a:d8:8a:be:80:dd:30:05:6e:08:b9:ad: 35:55:e3:be:af:e3:77:ad:fb:47:43:0e:c9:be:75:91:8b:42: 72:c7:dc:1a:4c:08:d8:3e:38:9f:07:b6:ad:ab:13:b9:06:b1: 74:d7:f3:a5:a9:22:a8:f0:73:c7:3f:35:e7:f3:8d:4a:74:1e: 98:06:0d:3f:82:fd:51:26:28:d1:d4:26:52:f8:28:03:d9:0f: 22:ea:b0:f8:47:8b:72:a7:80:92:a5:02:e8:db:72:7b:56:82: 70:2a:93:a6:74:32:41:5a:9b:8b:c0:39:3a:32:96:36:fe:c0: 76:5a:88:9e:ac:c8:b2:e3:66:7c:9f:9e:79:76:f9:32:43:7a: e5:b8:24:3e:bc:8b:5b:57:e9:c0:3b:fd:2e:d9:0e:27:0f:de: 09:c0:c6:ff:09:6d:88:c4:f5:4f:3a:0a:23:08:e0:7d:59:5f: 9d:10:a0:1c:0b:5f:0b:2d:f0:c2:0b:aa:44:52:f7:a0:ee:70: cc:0a:1d:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQIazfkl5JsmyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk OWM1ZmQ2MjMtNzljOC00MmMyLWEwMjQtOWNlYmQyMjAwOWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXF39eHmwHJDKDSQz30MpdpXiMi95FWHD7zi 6bt0OkN+Z9v1twMcEspoXPnsJORRYYu2N2eyr3B3N/n5G1lBC8DGdOagYrWMMgXo Bi8fltyMxRumLew7OpK7ovr7twEcfjIYVVELfFtCM9kQ+78Hs4b+YVj3JpSlaGqu 2VdO7HIufNr/PaPBk950C1mM5EmiEyg1sMZIYeMi2vhQ9dPkbfMzYT7yHIOX//QM VR5lw8SWbnhyLU2DUoriFgJRzRFU88P8Ut7AzRa8yMdM+4BNBlBI/hX23fgkOiFM YvWLEkpAlPMEr2M5OCyVHfciE899cJE0lhbqsbWvWTLC64esLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfBHXzCkj7H99dPOI3fQHronHJbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmQwM2ExOTMtMTBjMy0z NWY1LWE1NzAtYTA1YzQ2MTZiNTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg31+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDydwCdAc8gXTRU/o0fpKDhaRe5doK9tnQ/9AJuMvMjJnT7/BOTVF+h EupmMw6wZAsfTa9bJhXPRVBlhVrYir6A3TAFbgi5rTVV476v43et+0dDDsm+dZGL QnLH3BpMCNg+OJ8Htq2rE7kGsXTX86WpIqjwc8c/NefzjUp0HpgGDT+C/VEmKNHU JlL4KAPZDyLqsPhHi3KngJKlAujbcntWgnAqk6Z0MkFam4vAOToyljb+wHZaiJ6s yLLjZnyfnnl2+TJDeuW4JD68i1tX6cA7/S7ZDicP3gnAxv8JbYjE9U86CiMI4H1Z X50QoBwLXwst8MILqkRS96DucMwKHQc= -----END CERTIFICATE-----Generated at Sun Aug 24 03:50:42 2025 by rpki-client