$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dd65191f-2400-3b1f-84e0-bfcd5b67598a.roa File: dd65191f-2400-3b1f-84e0-bfcd5b67598a.roa (raw, json) Hash identifier: fMiB2z2julsXoO9HQoHeDMNzG82qc1GnYqQRQFU5egI= Subject key identifier: E1:0B:2F:59:07:17:40:5C:EB:E9:81:18:A0:B3:37:AA:40:A8:A8:9C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584ACF71018E5C315005D886A628 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dd65191f-2400-3b1f-84e0-bfcd5b67598a.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 54113 IP address blocks: 131.125.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:01:8e:5c:31:50:05:d8:86:a6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=3545414d-8200-456b-8e05-057cb4f6f913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f7:58:43:c2:ea:a0:1c:86:87:ad:23:1c:74: a6:31:65:2f:e7:1e:1b:b4:b3:45:82:14:45:de:bd: 9e:f4:41:b7:ca:73:8d:e2:36:c6:4b:19:ad:74:36: ae:59:92:f1:59:15:3b:b8:35:2a:cb:8e:a0:fe:5a: 19:91:18:3d:7e:4d:d1:7a:36:bf:8f:22:f8:fd:17: 1d:c4:aa:44:e2:f6:c0:9e:3c:22:4c:70:bb:a3:06: de:2f:d8:a8:54:96:56:a6:0e:a5:ab:37:96:1a:f8: 18:5b:78:35:9d:19:5e:6a:15:0a:78:3f:af:e6:02: 90:d9:d3:cc:f1:38:1b:b2:51:b1:c9:ae:96:67:a4: 27:cf:b3:69:57:d3:9c:2a:92:de:0f:98:b1:11:cd: 97:4c:46:bd:4a:1e:08:1f:d3:4e:21:9f:c4:95:9c: 0f:38:16:35:cc:96:b7:14:4b:d3:a7:99:60:40:10: ff:ba:74:4f:e2:12:51:83:f0:f5:71:dc:d1:25:66: 59:7a:b7:e6:01:b8:08:67:b1:3d:49:1d:c3:3e:13: c5:83:e0:92:57:e4:ae:07:36:c2:f6:d2:03:43:a2: 3e:01:47:62:00:3e:8b:06:a0:15:ae:f6:71:8e:02: 58:b6:40:c0:64:49:1a:e8:ee:81:e1:7b:d9:b1:50: 00:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0B:2F:59:07:17:40:5C:EB:E9:81:18:A0:B3:37:AA:40:A8:A8:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dd65191f-2400-3b1f-84e0-bfcd5b67598a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:2b:82:c7:08:5d:2b:4e:9c:01:0b:eb:20:99:10:27:8e:43: fd:9f:3e:32:46:56:87:1e:82:41:6c:3d:53:b5:af:bc:8f:08: cb:81:40:af:ab:66:a6:06:58:70:75:34:03:ba:a1:d0:72:be: 56:95:a6:35:1d:0e:74:02:fb:61:da:18:b1:c4:e0:d7:07:c6: a6:d6:c7:3c:8e:15:4b:3f:78:80:73:35:42:82:ef:6d:b6:bc: 29:95:b1:b6:39:1e:04:76:3a:b3:cf:97:db:32:93:44:fb:dd: 78:8a:82:c5:a1:0f:c6:e9:0d:73:e4:62:f7:c0:29:9f:be:bb: da:90:49:8b:c5:35:4e:28:c6:ea:79:c6:db:7d:c8:59:d4:dd: 33:e8:98:99:f2:28:d7:36:0b:a0:1b:df:bb:f0:d5:eb:e2:47: 4d:12:43:b4:f0:d9:3f:8a:d9:cf:99:0a:43:14:9f:b4:b8:4e: eb:da:d0:d9:ca:6c:dd:ff:f8:67:03:e4:9a:be:7e:bb:a0:b5: 50:36:7a:7a:fa:29:2b:11:c4:59:56:a1:ef:51:c0:ee:69:b2: 9d:f3:86:d3:08:c1:22:15:52:14:bd:46:35:b1:e8:3e:2b:73: 4b:23:73:53:19:66:28:69:b7:f3:0a:36:6b:24:86:53:7d:cb: a4:44:fb:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQGOXDFQBdiGpigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk MzU0NTQxNGQtODIwMC00NTZiLThlMDUtMDU3Y2I0ZjZmOTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfdYQ8LqoByGh60jHHSmMWUv5x4btLNFghRF 3r2e9EG3ynON4jbGSxmtdDauWZLxWRU7uDUqy46g/loZkRg9fk3Reja/jyL4/Rcd xKpE4vbAnjwiTHC7owbeL9ioVJZWpg6lqzeWGvgYW3g1nRleahUKeD+v5gKQ2dPM 8TgbslGxya6WZ6Qnz7NpV9OcKpLeD5ixEc2XTEa9Sh4IH9NOIZ/ElZwPOBY1zJa3 FEvTp5lgQBD/unRP4hJRg/D1cdzRJWZZerfmAbgIZ7E9SR3DPhPFg+CSV+SuBzbC 9tIDQ6I+AUdiAD6LBqAVrvZxjgJYtkDAZEka6O6B4XvZsVAAiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOELL1kHF0Bc6+mBGKCzN6pAqKicMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZGQ2NTE5MWYtMjQwMC0z YjFmLTg0ZTAtYmZjZDViNjc1OThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8rgscIXStOnAEL6yCZECeOQ/2fPjJGVocegkFsPVO1r7yPCMuBQK+r ZqYGWHB1NAO6odByvlaVpjUdDnQC+2HaGLHE4NcHxqbWxzyOFUs/eIBzNUKC7222 vCmVsbY5HgR2OrPPl9syk0T73XiKgsWhD8bpDXPkYvfAKZ++u9qQSYvFNU4oxup5 xtt9yFnU3TPomJnyKNc2C6Ab37vw1eviR00SQ7Tw2T+K2c+ZCkMUn7S4Tuva0NnK bN3/+GcD5Jq+frugtVA2enr6KSsRxFlWoe9RwO5psp3zhtMIwSIVUhS9RjWx6D4r c0sjc1MZZihpt/MKNmskhlN9y6RE+/8= -----END CERTIFICATE-----Generated at Sun Aug 24 01:33:17 2025 by rpki-client