$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa File: 9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa (raw, json) Hash identifier: d74+wuCJ1Bj5eYxjZGaS9XpO5OwcR3fdW862eaX3nDk= Subject key identifier: 5B:8B:AF:A1:40:A4:FB:CD:C4:6C:7F:EA:78:2A:41:BD:00:F7:CA:34 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584ACF7105335D1993B2F07B4980 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 54113 IP address blocks: 131.125.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:05:33:5d:19:93:b2:f0:7b:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=1c1e0208-fb20-451d-b28e-79f2773ff63f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5c:b5:a1:be:1a:64:16:55:cc:f5:25:ad:d2: 9a:27:43:b5:46:19:70:36:d4:3d:1b:ec:26:f3:20: 97:1a:2b:87:19:5c:82:67:7d:1f:20:93:51:cf:24: e5:ab:2d:4e:54:05:0d:5f:d1:c0:81:c8:01:af:01: 96:66:ef:b6:3c:ef:36:7b:d1:7c:61:4b:e4:fc:f2: 02:6d:43:29:ef:71:c6:ba:1c:93:ad:fc:38:e0:51: 13:05:7e:8b:c1:5b:74:75:95:bb:bf:b5:23:3c:0c: 98:00:78:dd:a8:04:cc:13:8d:6c:d1:2c:05:a3:d6: 8b:9a:b5:ef:34:90:d1:17:01:f2:6b:14:12:a3:25: 00:70:cb:0f:6c:91:b3:91:cf:da:6e:26:9b:90:d3: 69:70:fc:ad:41:4f:2b:11:08:83:8a:f1:ec:9e:4e: da:e5:23:8d:a0:85:4f:c1:ba:80:e2:cb:01:20:69: 54:d7:a5:1f:6b:4a:0c:b7:ef:e4:37:73:84:20:aa: 27:c3:03:48:17:df:df:b6:a2:b1:75:a7:fb:a2:48: 2f:85:df:8a:b3:a7:33:31:0f:1c:2e:20:90:b9:a5: cb:56:ea:75:a0:0d:25:04:6e:d1:01:1b:eb:e1:f4: f7:38:cd:68:a9:23:6a:37:c2:f4:36:10:cf:f0:b2: 69:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8B:AF:A1:40:A4:FB:CD:C4:6C:7F:EA:78:2A:41:BD:00:F7:CA:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9f7bae6b-0b5f-3169-bcbe-fcfedf7a8e7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5e:47:58:d2:d7:a9:e0:ad:f2:13:8a:79:5e:7e:a6:8c:3f: 64:cb:3a:4d:28:fb:1c:94:98:60:6a:63:38:18:3c:f3:65:bb: c3:be:3c:16:76:eb:bc:dc:98:30:28:03:27:b2:3a:05:7f:e5: b6:8f:2b:fd:28:42:52:8c:c0:d7:55:4a:25:38:02:83:43:1d: 80:b3:b0:3a:f5:7c:88:a0:a6:42:08:be:e7:c4:7a:4e:7a:43: c6:6e:ec:47:da:8e:84:3d:1c:d4:a6:8b:99:23:96:5b:68:4c: dd:76:4d:30:94:1e:73:a6:79:fa:ba:68:3f:3b:eb:44:59:f6: c5:0c:32:27:f4:1e:42:8f:80:74:6b:b0:9d:d1:6c:f7:06:d7: bd:62:22:be:82:89:c5:5f:b7:86:87:8b:9a:08:ff:21:87:55: 30:5e:5c:56:01:1e:03:50:55:8e:12:17:89:0f:5e:69:bd:3d: f3:98:55:97:6c:7a:be:2e:eb:a8:1b:66:b5:73:96:ee:04:7f: 30:ea:bd:cc:75:14:5d:ce:66:84:01:81:97:96:00:0d:0d:c0: 56:eb:20:fd:75:53:af:46:59:ac:56:0e:a6:36:7e:08:3b:4f: 87:0f:0b:f1:68:1a:64:be:5a:ce:ec:0b:da:28:42:4a:ae:47: cb:e7:80:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQUzXRmTsvB7SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk MWMxZTAyMDgtZmIyMC00NTFkLWIyOGUtNzlmMjc3M2ZmNjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVy1ob4aZBZVzPUlrdKaJ0O1RhlwNtQ9G+wm 8yCXGiuHGVyCZ30fIJNRzyTlqy1OVAUNX9HAgcgBrwGWZu+2PO82e9F8YUvk/PIC bUMp73HGuhyTrfw44FETBX6LwVt0dZW7v7UjPAyYAHjdqATME41s0SwFo9aLmrXv NJDRFwHyaxQSoyUAcMsPbJGzkc/abiabkNNpcPytQU8rEQiDivHsnk7a5SONoIVP wbqA4ssBIGlU16Ufa0oMt+/kN3OEIKonwwNIF9/ftqKxdaf7okgvhd+Ks6czMQ8c LiCQuaXLVup1oA0lBG7RARvr4fT3OM1oqSNqN8L0NhDP8LJptQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuLr6FApPvNxGx/6ngqQb0A98o0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOWY3YmFlNmItMGI1Zi0z MTY5LWJjYmUtZmNmZWRmN2E4ZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg314MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpeR1jS16ngrfITinlefqaMP2TLOk0o+xyUmGBqYzgYPPNlu8O+PBZ2 67zcmDAoAyeyOgV/5baPK/0oQlKMwNdVSiU4AoNDHYCzsDr1fIigpkIIvufEek56 Q8Zu7EfajoQ9HNSmi5kjlltoTN12TTCUHnOmefq6aD8760RZ9sUMMif0HkKPgHRr sJ3RbPcG171iIr6CicVft4aHi5oI/yGHVTBeXFYBHgNQVY4SF4kPXmm9PfOYVZds er4u66gbZrVzlu4EfzDqvcx1FF3OZoQBgZeWAA0NwFbrIP11U69GWaxWDqY2fgg7 T4cPC/FoGmS+Ws7sC9ooQkquR8vngDs= -----END CERTIFICATE-----Generated at Sat Aug 23 23:17:17 2025 by rpki-client