$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d0a9369b-8352-3ace-bb34-43ef1f2cbd10.roa File: d0a9369b-8352-3ace-bb34-43ef1f2cbd10.roa (raw, json) Hash identifier: 2gU7RdLRpoReb9HWaAgWKWUSeHuKLGfvFr3acVJ0P0U= Subject key identifier: 50:7E:56:78:CF:A6:0D:76:B2:55:1D:11:E1:90:2C:45:68:48:57:FE Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584ACF71042F1C00E41430193158 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d0a9369b-8352-3ace-bb34-43ef1f2cbd10.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 54113 IP address blocks: 131.125.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:04:2f:1c:00:e4:14:30:19:31:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=1c064d5c-6491-45c1-81d6-8dfa8a12512f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:42:1d:70:9a:24:a6:d8:9a:3c:06:d5:db:8c: 92:a4:27:fa:e6:64:c6:18:66:d4:dd:a8:bd:45:6f: 2c:e6:0e:48:62:2a:4c:99:d7:5a:6d:78:70:01:f6: c9:40:59:e8:94:af:29:32:01:63:45:57:7e:24:cf: 92:fc:98:58:a8:67:47:20:6b:3c:26:4e:75:3e:6c: 3e:72:72:87:d6:a9:fa:cb:26:14:da:39:31:9a:c8: 96:fc:e8:83:67:58:b3:83:c3:bf:7f:bf:6d:3d:8f: 42:8f:43:d5:dd:fe:a9:3f:eb:58:30:02:4b:cb:08: 97:d1:4c:64:3c:ad:44:f3:15:78:31:13:89:df:97: a4:ce:e8:2d:f8:d8:9e:de:d0:f1:99:5c:68:70:d6: 41:55:47:a4:7b:2f:72:7f:e6:0f:3e:a3:25:79:e8: 87:eb:0d:1e:6c:11:31:9c:7e:26:cf:37:39:97:f9: f4:dd:69:60:8c:0c:cd:19:1e:5e:72:39:7b:7a:c4: a5:21:0b:6e:64:f3:b1:c7:d5:74:83:04:a8:5a:1a: ac:46:06:56:17:e8:a8:11:3e:e7:09:5e:9e:28:a2: ed:a3:ae:03:fa:34:ef:66:05:8b:72:f2:83:97:7d: b7:17:b7:2f:d6:9f:2b:57:bf:65:8a:e6:95:78:a5: 33:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7E:56:78:CF:A6:0D:76:B2:55:1D:11:E1:90:2C:45:68:48:57:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d0a9369b-8352-3ace-bb34-43ef1f2cbd10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:96:cc:2e:cd:52:d9:48:5b:9b:5e:5d:a7:fa:12:5b:f0:f8: c1:4c:5c:80:f8:e0:97:df:f8:58:43:5d:30:08:85:6c:9a:99: 57:d0:e2:40:88:d5:56:ae:63:7f:78:8c:6b:ae:51:66:c6:88: f4:d7:a5:b5:3f:a5:b8:8c:e7:88:71:6e:fb:4a:97:e1:fc:73: 49:23:7c:78:ed:40:64:c1:c9:2d:3c:6b:b2:33:86:f4:f6:0c: 4f:4b:18:b5:d8:ea:11:40:f2:e1:76:72:5e:06:03:72:ef:3b: 78:09:b8:87:97:79:35:96:50:75:d9:7e:af:84:59:f9:77:65: ae:e5:ac:f0:b7:25:f5:7a:c3:de:e8:45:72:fe:fd:13:97:23: 74:07:d5:b0:ee:b2:d2:4e:0b:ba:6d:2e:72:2f:dc:33:51:c6: d6:49:f6:31:72:b5:7a:be:61:20:97:65:28:6c:fc:0a:61:3e: c7:20:5e:df:bd:b5:5e:63:89:af:d1:95:b9:0c:25:02:2c:1a: 10:ef:32:70:79:47:32:42:11:6b:bf:bd:28:df:97:0d:4f:43: 33:c3:c5:42:a8:3a:9e:c2:45:e4:c6:0a:72:17:6f:8d:c1:93: 02:28:40:2b:1f:de:25:09:9b:77:e6:b4:0b:62:1d:53:03:60: 84:6c:84:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQQvHADkFDAZMVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk MWMwNjRkNWMtNjQ5MS00NWMxLTgxZDYtOGRmYThhMTI1MTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EIdcJokptiaPAbV24ySpCf65mTGGGbU3ai9 RW8s5g5IYipMmddabXhwAfbJQFnolK8pMgFjRVd+JM+S/JhYqGdHIGs8Jk51Pmw+ cnKH1qn6yyYU2jkxmsiW/OiDZ1izg8O/f79tPY9Cj0PV3f6pP+tYMAJLywiX0Uxk PK1E8xV4MROJ35ekzugt+Nie3tDxmVxocNZBVUekey9yf+YPPqMleeiH6w0ebBEx nH4mzzc5l/n03WlgjAzNGR5ecjl7esSlIQtuZPOxx9V0gwSoWhqsRgZWF+ioET7n CV6eKKLto64D+jTvZgWLcvKDl323F7cv1p8rV79liuaVeKUzJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB+VnjPpg12slUdEeGQLEVoSFf+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDBhOTM2OWItODM1Mi0z YWNlLWJiMzQtNDNlZjFmMmNiZDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg31gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuWzC7NUtlIW5teXaf6Elvw+MFMXID44Jff+FhDXTAIhWyamVfQ4kCI 1VauY394jGuuUWbGiPTXpbU/pbiM54hxbvtKl+H8c0kjfHjtQGTByS08a7IzhvT2 DE9LGLXY6hFA8uF2cl4GA3LvO3gJuIeXeTWWUHXZfq+EWfl3Za7lrPC3JfV6w97o RXL+/ROXI3QH1bDustJOC7ptLnIv3DNRxtZJ9jFytXq+YSCXZShs/AphPscgXt+9 tV5jia/RlbkMJQIsGhDvMnB5RzJCEWu/vSjflw1PQzPDxUKoOp7CReTGCnIXb43B kwIoQCsf3iUJm3fmtAtiHVMDYIRshMg= -----END CERTIFICATE-----Generated at Sat Aug 23 23:19:14 2025 by rpki-client