$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/458d08ae-db95-35c8-a848-dba5242c611e.roa File: 458d08ae-db95-35c8-a848-dba5242c611e.roa (raw, json) Hash identifier: mvUQ51JFYRTMmEQ3HFkaeEMI70VNJ+PJql/qOhp8euA= Subject key identifier: EE:CE:0C:C1:67:C8:A4:A9:2D:2B:8B:4C:22:77:23:7C:A3:87:9B:F8 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584ACF71016E64D265725B2A09C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/458d08ae-db95-35c8-a848-dba5242c611e.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 54113 IP address blocks: 131.125.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:01:6e:64:d2:65:72:5b:2a:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=52994aef-5d3a-4117-9d2c-e32fb1620943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:2a:31:97:59:81:2c:30:5a:9e:25:bf:40: 97:f5:25:8e:c4:b9:c4:6c:79:4e:84:28:26:50:e8: 0f:74:d7:43:82:25:44:7d:d1:49:2c:43:60:61:02: 57:39:e1:fe:8e:6d:59:91:a0:eb:0d:0b:9c:53:8b: 95:e7:e5:fa:b1:5b:41:3a:47:a1:ea:94:13:9c:4f: db:5c:5d:06:31:b6:9a:a9:4f:14:62:f2:a0:ca:93: ee:32:98:56:92:71:fa:57:22:d8:39:df:a3:48:8a: 6b:31:2d:9d:4f:1d:fb:a6:48:b1:71:a8:bc:9a:f7: cb:a6:46:bc:e5:36:0a:a9:14:99:19:a4:f1:6f:4c: 2a:8b:3f:48:43:82:c2:78:52:85:34:8f:6c:cb:04: 31:69:26:30:b2:29:6b:83:29:26:b3:8d:99:aa:73: ee:82:5f:cd:24:8a:e9:2b:82:26:8a:22:98:1a:b8: ca:b1:2b:52:d0:a0:2b:2e:99:a5:e6:1a:c2:15:78: 43:c4:75:4c:53:ca:e2:c8:f6:fc:30:f8:92:c6:1a: cb:7d:23:13:e2:06:f8:53:1d:69:01:11:0a:94:4c: fd:a7:01:6f:02:7a:fc:05:53:78:57:97:38:05:e2: 66:ff:38:d0:79:f5:31:0e:22:84:af:a3:a0:ea:bd: c5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CE:0C:C1:67:C8:A4:A9:2D:2B:8B:4C:22:77:23:7C:A3:87:9B:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/458d08ae-db95-35c8-a848-dba5242c611e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:7e:cd:ad:88:b6:87:04:45:36:b5:df:6d:b2:c9:08:f1:20: bc:75:70:fb:9a:ba:97:d8:54:58:47:55:95:96:d9:81:dc:22: 96:4f:fe:03:f8:83:01:fe:5e:39:6c:9d:6d:d2:48:69:37:bc: 95:3e:cf:e2:d6:09:9e:fc:a0:c3:f6:6e:8a:a7:05:0c:4b:7e: 72:1e:c6:60:b5:e2:69:6a:8a:ae:94:17:c0:a8:d8:52:be:08: c9:bc:47:4f:32:62:ec:af:65:6f:42:ce:28:bb:4e:d5:9f:5d: 3d:81:7e:1f:26:9f:dd:5b:07:b8:b1:7b:3a:39:f8:ec:17:b7: 10:70:55:4f:bd:f2:da:b7:d9:b9:88:b8:da:e9:3c:d0:ff:c3: 9e:8a:60:dc:5e:2d:b3:2a:ea:61:bd:b9:29:f4:84:9e:fc:3f: e9:dd:3a:d7:76:69:1c:a4:d8:a7:dc:7d:d8:6c:91:5e:ec:6b: 39:be:8c:a5:bd:ac:27:00:96:37:2e:b6:a5:01:82:30:bb:ba: 26:fc:cb:7e:e1:10:fb:cc:52:30:1e:ef:eb:33:f9:4e:74:f1: 69:9f:62:ba:a6:ee:b0:6c:15:66:4d:ab:5a:ae:cb:81:4b:d5: 9f:3c:91:d2:c1:c6:e6:6a:d5:ed:26:5c:19:81:5d:84:c6:8b: 58:69:75:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQFuZNJlclsqCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk NTI5OTRhZWYtNWQzYS00MTE3LTlkMmMtZTMyZmIxNjIwOTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqgqMZdZgSwwWp4lv0CX9SWOxLnEbHlOhCgm UOgPdNdDgiVEfdFJLENgYQJXOeH+jm1ZkaDrDQucU4uV5+X6sVtBOkeh6pQTnE/b XF0GMbaaqU8UYvKgypPuMphWknH6VyLYOd+jSIprMS2dTx37pkixcai8mvfLpka8 5TYKqRSZGaTxb0wqiz9IQ4LCeFKFNI9sywQxaSYwsilrgykms42ZqnPugl/NJIrp K4ImiiKYGrjKsStS0KArLpml5hrCFXhDxHVMU8riyPb8MPiSxhrLfSMT4gb4Ux1p AREKlEz9pwFvAnr8BVN4V5c4BeJm/zjQefUxDiKEr6Og6r3F7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7ODMFnyKSpLSuLTCJ3I3yjh5v4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDU4ZDA4YWUtZGI5NS0z NWM4LWE4NDgtZGJhNTI0MmM2MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV+za2ItocERTa1322yyQjxILx1cPuaupfYVFhHVZWW2YHcIpZP/gP4 gwH+XjlsnW3SSGk3vJU+z+LWCZ78oMP2boqnBQxLfnIexmC14mlqiq6UF8Co2FK+ CMm8R08yYuyvZW9Czii7TtWfXT2Bfh8mn91bB7ixezo5+OwXtxBwVU+98tq32bmI uNrpPND/w56KYNxeLbMq6mG9uSn0hJ78P+ndOtd2aRyk2KfcfdhskV7sazm+jKW9 rCcAljcutqUBgjC7uib8y37hEPvMUjAe7+sz+U508WmfYrqm7rBsFWZNq1quy4FL 1Z88kdLBxuZq1e0mXBmBXYTGi1hpdb4= -----END CERTIFICATE-----Generated at Sun Aug 24 03:47:06 2025 by rpki-client