$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/340cd8f4-08a6-38c3-8f36-276f75a9fdd5.roa File: 340cd8f4-08a6-38c3-8f36-276f75a9fdd5.roa (raw, json) Hash identifier: 7W2edck1DNVjeNFKzHGJJdkOcH6G9e/dlZ7XQ1D+81g= Subject key identifier: 48:64:53:DF:40:D4:1E:B3:61:E6:9A:5B:19:88:D2:2E:3F:6B:A6:87 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584ACF71013D1691D34C90326E00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/340cd8f4-08a6-38c3-8f36-276f75a9fdd5.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 54113 IP address blocks: 131.125.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:01:3d:16:91:d3:4c:90:32:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=7c368a52-8dc1-45a1-a4ac-419d186c7d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:78:f6:04:51:07:a8:0c:77:36:a0:6e:69:e9: 3e:7a:7c:30:c7:ea:df:c0:25:08:2c:55:14:ab:dd: 1e:d4:b0:36:a0:56:1f:71:dc:77:eb:89:64:4b:cb: e8:0a:93:68:96:a1:e3:2c:be:d8:37:21:79:b4:4e: dd:a7:98:4f:3e:b0:0b:ec:d5:e2:db:c1:bd:21:e2: ca:3b:b9:bf:23:c3:9e:ca:43:61:fa:d8:5f:2d:46: ca:34:46:94:d2:29:d1:67:62:63:ff:61:f5:be:52: 15:2b:17:93:d7:34:2b:e5:cd:35:45:3f:8a:c5:00: aa:8e:8a:b2:1d:d7:98:4f:b6:24:73:c8:ef:ef:1e: 8e:92:83:14:b5:71:cd:5a:b4:fc:b5:89:b3:ab:fe: a7:29:7e:46:db:40:75:f7:df:9c:1e:7b:0b:1d:fa: 50:ea:45:d8:c2:9b:16:32:ff:83:7e:4d:54:11:0c: 1a:5c:8f:72:05:f3:a7:bf:b8:59:66:5a:1a:be:27: 34:8c:63:82:6f:17:3c:68:2d:b5:b0:9b:13:c3:35: 9b:1b:4b:33:90:91:fb:64:cf:22:da:a6:77:f8:0e: 36:f4:06:0f:c2:b2:ae:29:4a:79:b6:2f:84:9a:d4: a5:6b:ea:9a:90:5d:fa:bf:c2:d9:f5:6d:b5:9b:ad: d0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:64:53:DF:40:D4:1E:B3:61:E6:9A:5B:19:88:D2:2E:3F:6B:A6:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/340cd8f4-08a6-38c3-8f36-276f75a9fdd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:84:80:c3:e6:9d:f4:be:ad:28:3f:92:9f:8a:4d:aa:5b:c7: f3:29:3b:b5:a1:6e:b0:5f:4f:61:46:04:8d:93:f5:3f:0e:cd: 57:ab:2b:14:20:39:52:c6:d9:3b:09:98:16:36:cc:cb:b6:0d: 5a:4f:79:d4:aa:9a:e5:6b:e0:44:34:81:af:cd:56:b9:fb:4a: 20:97:56:ae:39:68:cf:41:bb:c8:cf:a4:b4:61:25:01:55:70: b4:36:d9:ac:75:f8:5a:90:d6:2a:53:71:50:8e:bb:b8:a0:a7: 6e:50:8f:07:d7:1b:be:24:dd:3f:08:ed:2f:bb:81:b7:9d:90: 8c:17:5c:ef:9a:e1:c5:0b:2e:59:a6:3d:0c:a8:a9:48:cf:d3: a0:9b:03:da:3a:5b:ad:e4:6a:2f:54:44:4e:c7:6e:d0:79:5d: 54:fb:ce:eb:3d:fd:e3:27:35:55:09:92:13:68:05:cc:72:b5: 27:2c:e3:97:89:e0:3c:23:4b:63:a2:88:98:f5:53:1c:dc:41: 4b:b9:50:f4:45:5b:b7:12:e5:32:75:78:7c:29:f3:48:5b:99: ac:01:f6:17:c2:9c:51:0a:b2:b7:ef:75:dc:93:73:d5:8e:47: 95:4d:cf:4f:10:27:f6:4c:41:4e:66:89:06:89:94:db:50:58: 47:64:ce:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQE9FpHTTJAybgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk N2MzNjhhNTItOGRjMS00NWExLWE0YWMtNDE5ZDE4NmM3ZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHj2BFEHqAx3NqBuaek+enwwx+rfwCUILFUU q90e1LA2oFYfcdx364lkS8voCpNolqHjLL7YNyF5tE7dp5hPPrAL7NXi28G9IeLK O7m/I8OeykNh+thfLUbKNEaU0inRZ2Jj/2H1vlIVKxeT1zQr5c01RT+KxQCqjoqy HdeYT7Ykc8jv7x6OkoMUtXHNWrT8tYmzq/6nKX5G20B199+cHnsLHfpQ6kXYwpsW Mv+Dfk1UEQwaXI9yBfOnv7hZZloavic0jGOCbxc8aC21sJsTwzWbG0szkJH7ZM8i 2qZ3+A429AYPwrKuKUp5ti+EmtSla+qakF36v8LZ9W21m63QRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhkU99A1B6zYeaaWxmI0i4/a6aHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzQwY2Q4ZjQtMDhhNi0z OGMzLThmMzYtMjc2Zjc1YTlmZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqEgMPmnfS+rSg/kp+KTapbx/MpO7WhbrBfT2FGBI2T9T8OzVerKxQg OVLG2TsJmBY2zMu2DVpPedSqmuVr4EQ0ga/NVrn7SiCXVq45aM9Bu8jPpLRhJQFV cLQ22ax1+FqQ1ipTcVCOu7igp25QjwfXG74k3T8I7S+7gbedkIwXXO+a4cULLlmm PQyoqUjP06CbA9o6W63kai9URE7HbtB5XVT7zus9/eMnNVUJkhNoBcxytScs45eJ 4DwjS2OiiJj1UxzcQUu5UPRFW7cS5TJ1eHwp80hbmawB9hfCnFEKsrfvddyTc9WO R5VNz08QJ/ZMQU5miQaJlNtQWEdkztk= -----END CERTIFICATE-----Generated at Sat Aug 23 23:19:21 2025 by rpki-client