$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8cc71e70-5027-36bf-928c-5e9cbf598a0f.roa File: 8cc71e70-5027-36bf-928c-5e9cbf598a0f.roa (raw, json) Hash identifier: KqvEgfYbGxYX+pz8JwB7fSGQWk53aKzIVaXNjc+LdZQ= Subject key identifier: 1F:D2:23:8D:5E:DE:D1:EA:FB:F8:BF:9F:EE:67:30:44:70:67:07:0B Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584ACF71011B744212F78D2BC300 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8cc71e70-5027-36bf-928c-5e9cbf598a0f.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 54113 IP address blocks: 131.125.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:01:1b:74:42:12:f7:8d:2b:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=41882e4a-b90e-44e4-99f0-93665f762e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f6:af:a0:77:f8:76:e6:b6:6b:b9:ab:7a:51: 30:5e:5e:fc:7e:b4:6c:aa:05:46:24:68:95:43:6f: 79:58:e7:ee:b5:aa:89:55:f2:68:d7:73:9d:3d:d8: 61:52:1e:4c:e6:6a:16:28:f9:f9:24:9d:aa:c7:60: 04:11:00:3d:5b:da:69:0d:93:2e:a7:f6:72:51:e9: 41:89:a1:5d:f0:c1:25:9a:43:d6:b8:9b:b0:41:3e: 7a:2c:ed:1b:d2:d4:fb:42:fd:29:67:ea:c8:5e:93: 6d:af:75:55:98:c0:38:cd:02:b9:e5:4f:04:e4:be: 79:2c:71:a8:61:12:42:a5:1d:ed:32:d7:2c:45:d3: ce:c2:ca:01:1c:dd:9a:7d:35:87:74:8c:67:87:2b: 3f:56:2e:41:cf:f4:e2:ff:2f:af:ee:16:ad:44:26: 55:87:e2:b7:bc:5f:93:04:e9:59:ac:36:63:cd:3a: 3f:9b:69:28:74:c4:08:39:f8:8c:0b:68:18:b2:e4: fe:3e:2e:85:62:e1:6a:31:c7:c3:03:b1:71:4a:2e: 7a:09:87:07:44:e6:65:86:9a:63:95:d7:7b:13:f4: d6:7d:a1:48:74:00:86:f1:6d:21:35:89:63:57:f9: 34:41:bf:82:a7:23:26:26:df:f9:e9:66:84:29:3f: 89:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D2:23:8D:5E:DE:D1:EA:FB:F8:BF:9F:EE:67:30:44:70:67:07:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8cc71e70-5027-36bf-928c-5e9cbf598a0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a6:2d:59:75:53:90:16:7c:36:b9:df:5c:e6:f2:04:89:5b: 07:79:70:c2:51:3c:9c:33:b5:8a:dc:a7:81:c0:ae:28:79:2a: 42:44:27:9b:5b:01:95:fa:4f:81:11:46:cb:4d:6f:79:93:07: b7:40:8d:c1:83:6f:66:c8:52:b0:a6:48:e9:f1:cd:2c:f4:aa: d0:7a:d6:46:10:4d:d1:c6:73:33:7a:8f:73:f7:da:aa:3f:eb: 40:81:01:ab:63:cd:d2:af:ed:ec:6f:bf:4f:a5:51:dd:36:ef: 14:4e:82:76:a7:43:d0:ce:1f:04:cc:b8:65:f8:59:e6:40:7c: 36:e0:3e:f4:0e:74:a0:69:39:c7:fb:04:b8:6a:63:e5:c2:a7: 67:c2:40:b1:6f:fc:11:82:80:33:57:46:a0:5f:99:b7:5f:11: e9:16:d2:6c:f8:b2:dc:4f:51:d0:03:16:54:9a:20:19:6e:6f: aa:f7:bf:f6:80:9a:23:f1:a1:0b:c7:d5:90:3f:fc:26:b6:58: 05:c6:bf:cc:7d:c3:be:af:1f:e1:b6:a3:f6:89:a0:be:af:f7: c8:aa:12:78:67:9d:a2:0a:5c:62:6f:d4:86:ab:3d:f3:9c:1c: dd:b6:e2:6c:9d:63:33:5b:ba:e6:48:fc:0d:9f:03:6d:ec:68: a4:ed:a7:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQEbdEIS940rwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk NDE4ODJlNGEtYjkwZS00NGU0LTk5ZjAtOTM2NjVmNzYyZTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/avoHf4dua2a7mrelEwXl78frRsqgVGJGiV Q295WOfutaqJVfJo13OdPdhhUh5M5moWKPn5JJ2qx2AEEQA9W9ppDZMup/ZyUelB iaFd8MElmkPWuJuwQT56LO0b0tT7Qv0pZ+rIXpNtr3VVmMA4zQK55U8E5L55LHGo YRJCpR3tMtcsRdPOwsoBHN2afTWHdIxnhys/Vi5Bz/Ti/y+v7hatRCZVh+K3vF+T BOlZrDZjzTo/m2kodMQIOfiMC2gYsuT+Pi6FYuFqMcfDA7FxSi56CYcHROZlhppj ldd7E/TWfaFIdACG8W0hNYljV/k0Qb+CpyMmJt/56WaEKT+JSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/SI41e3tHq+/i/n+5nMERwZwcLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOGNjNzFlNzAtNTAyNy0z NmJmLTkyOGMtNWU5Y2JmNTk4YTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOmLVl1U5AWfDa531zm8gSJWwd5cMJRPJwztYrcp4HArih5KkJEJ5tb AZX6T4ERRstNb3mTB7dAjcGDb2bIUrCmSOnxzSz0qtB61kYQTdHGczN6j3P32qo/ 60CBAatjzdKv7exvv0+lUd027xROgnanQ9DOHwTMuGX4WeZAfDbgPvQOdKBpOcf7 BLhqY+XCp2fCQLFv/BGCgDNXRqBfmbdfEekW0mz4stxPUdADFlSaIBlub6r3v/aA miPxoQvH1ZA//Ca2WAXGv8x9w76vH+G2o/aJoL6v98iqEnhnnaIKXGJv1IarPfOc HN224mydYzNbuuZI/A2fA23saKTtp9c= -----END CERTIFICATE-----Generated at Sun Aug 24 07:35:55 2025 by rpki-client