$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cfa1457e-6b66-3dc3-b8d4-52718701d476.roa File: cfa1457e-6b66-3dc3-b8d4-52718701d476.roa (raw, json) Hash identifier: LST2AiLKOkX0Eq4UGgnC9wWiOPlzJK0v0BlVfgNYfto= Subject key identifier: A8:AB:41:77:FA:5A:C3:D4:73:06:0C:1D:B7:8F:2B:9D:58:9F:E0:18 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584ACF7101DAD6EF010F92AE8D00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cfa1457e-6b66-3dc3-b8d4-52718701d476.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 54113 IP address blocks: 131.125.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:01:da:d6:ef:01:0f:92:ae:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=69e3b42c-dd88-4a66-b124-fe277f7cb294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e9:a4:7a:73:4b:4f:33:c5:4d:7e:1f:06:b7: eb:14:99:2d:48:2f:69:94:2f:3a:02:8c:71:2a:a8: 82:ee:a8:45:0e:c4:5b:c0:39:c3:ae:a2:13:db:94: 91:8e:83:b6:c6:64:af:2d:81:2b:04:45:de:85:ee: 19:60:91:fc:d4:47:4a:e6:fa:3f:a8:be:06:7d:8b: 87:b0:ff:39:39:30:e0:02:a3:93:1b:89:23:be:0e: 3f:10:fc:c0:7f:6d:4d:cb:55:97:01:39:5a:38:4e: 6b:61:bb:3f:c4:f6:dc:8d:ba:80:b6:4b:1d:78:67: 29:8b:ba:b4:c1:42:58:5f:c8:85:29:e4:a8:84:68: 2b:12:4b:08:ba:c4:6b:3c:41:23:7f:57:0c:1c:d6: 7a:82:0e:3d:b8:a9:97:57:05:d1:6a:63:a9:91:bb: 0a:6d:45:36:78:0f:a4:13:a0:c0:3c:84:7d:f6:58: 3c:f6:1a:c1:8e:dd:8b:e3:9a:76:49:af:27:f3:9a: e2:aa:89:74:a9:ea:da:86:a5:1f:d5:db:5d:c0:bf: 98:e4:e7:dd:4f:98:a1:97:b8:63:d7:cb:4c:7f:ba: d7:37:77:87:bd:01:07:46:18:c2:f4:c7:c9:ac:9b: 0b:d6:d4:3d:21:e8:ca:50:da:40:e8:e2:cc:b6:07: af:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AB:41:77:FA:5A:C3:D4:73:06:0C:1D:B7:8F:2B:9D:58:9F:E0:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cfa1457e-6b66-3dc3-b8d4-52718701d476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:57:cb:01:1e:0f:7b:9c:4c:42:5e:09:c0:20:62:b9:41:4d: 95:a6:2a:60:be:f8:12:50:77:33:de:36:6b:23:19:4b:1c:4f: 0a:ef:7c:7c:b2:85:51:ba:fc:96:df:f6:7b:bc:3e:af:5d:e1: a6:3c:67:5b:1e:9a:41:61:ec:28:fe:51:4e:8e:a5:0b:6c:db: 77:d0:38:50:84:a9:b2:93:38:de:ea:73:a9:6f:ac:4e:cb:ae: 4a:26:c8:05:3e:44:3c:38:89:0a:e3:8d:75:4b:eb:4c:ce:ef: 2e:a0:40:e6:bc:37:b7:77:38:8a:b8:19:58:70:dd:87:18:a9: 3e:83:a2:3d:cb:c4:5a:de:c3:d2:3b:c7:ca:14:75:83:21:18: c5:1a:c9:af:55:ad:36:7c:f3:79:c0:2d:b2:29:9b:d9:df:01: 95:ab:df:8d:85:90:cf:07:67:48:a5:58:ad:28:27:f0:c1:b7: 63:38:8b:62:92:69:8b:07:bf:68:79:d3:a0:e7:63:b4:f0:cd: 5d:51:03:ef:a5:a6:f9:f4:15:62:f4:30:17:fe:79:bf:d2:f0: 77:fe:95:5b:59:bc:e2:0c:7a:cd:02:07:78:0c:e9:43:d2:72: 4a:af:22:a6:d1:32:14:6a:4d:02:16:a6:f7:aa:e6:07:9e:ae: 42:96:b7:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQHa1u8BD5KujQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk NjllM2I0MmMtZGQ4OC00YTY2LWIxMjQtZmUyNzdmN2NiMjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+mkenNLTzPFTX4fBrfrFJktSC9plC86Aoxx KqiC7qhFDsRbwDnDrqIT25SRjoO2xmSvLYErBEXehe4ZYJH81EdK5vo/qL4GfYuH sP85OTDgAqOTG4kjvg4/EPzAf21Ny1WXATlaOE5rYbs/xPbcjbqAtksdeGcpi7q0 wUJYX8iFKeSohGgrEksIusRrPEEjf1cMHNZ6gg49uKmXVwXRamOpkbsKbUU2eA+k E6DAPIR99lg89hrBjt2L45p2Sa8n85riqol0qerahqUf1dtdwL+Y5OfdT5ihl7hj 18tMf7rXN3eHvQEHRhjC9MfJrJsL1tQ9IejKUNpA6OLMtgev6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKirQXf6WsPUcwYMHbePK51Yn+AYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2ZhMTQ1N2UtNmI2Ni0z ZGMzLWI4ZDQtNTI3MTg3MDFkNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg318MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5XywEeD3ucTEJeCcAgYrlBTZWmKmC++BJQdzPeNmsjGUscTwrvfHyy hVG6/Jbf9nu8Pq9d4aY8Z1semkFh7Cj+UU6OpQts23fQOFCEqbKTON7qc6lvrE7L rkomyAU+RDw4iQrjjXVL60zO7y6gQOa8N7d3OIq4GVhw3YcYqT6Doj3LxFrew9I7 x8oUdYMhGMUaya9VrTZ883nALbIpm9nfAZWr342FkM8HZ0ilWK0oJ/DBt2M4i2KS aYsHv2h506DnY7TwzV1RA++lpvn0FWL0MBf+eb/S8Hf+lVtZvOIMes0CB3gM6UPS ckqvIqbRMhRqTQIWpveq5geerkKWt7k= -----END CERTIFICATE-----Generated at Sat Aug 23 23:19:22 2025 by rpki-client