$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dff3557c-8510-362d-8886-ae8601c1c582.roa File: dff3557c-8510-362d-8886-ae8601c1c582.roa (raw, json) Hash identifier: IfNrruKRhNajQOkuhFTAwQzt6ls/RPCDxGyWy2aIMEE= Subject key identifier: 32:43:9E:BB:AA:3C:54:AB:43:5E:9C:8E:30:EF:79:82:A0:5C:F4:75 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584ACF71038EA8EFE25EAC678700 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dff3557c-8510-362d-8886-ae8601c1c582.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 54113 IP address blocks: 131.125.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:03:8e:a8:ef:e2:5e:ac:67:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=670d95ff-881a-4a59-865a-df9d80783514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2e:9a:af:db:51:37:ce:d1:67:0e:da:e8:ae: da:60:49:10:9d:e9:bc:86:f0:b8:fe:60:f1:2e:de: 80:09:7d:ac:15:ac:3a:89:84:be:ab:fa:f2:59:55: c8:07:65:39:33:2d:8e:71:8d:c4:7a:a2:a2:28:df: 9d:d2:65:0d:17:74:b8:31:f6:aa:79:90:00:79:8c: 49:e0:7a:a9:05:b0:58:8b:f8:20:4b:7e:3e:79:e5: f4:c6:d9:2b:41:2a:dd:ca:d7:47:b7:9e:bb:35:d1: 59:9f:7b:e9:6c:3c:af:79:7e:a7:aa:d1:39:16:17: 46:a6:5c:a2:ff:42:b9:d8:9d:53:5a:ed:a4:61:d8: 62:76:da:f0:2f:84:e8:3e:3d:5f:65:34:bc:f4:57: 90:7d:c8:52:86:d2:7d:71:14:b8:1c:5c:17:f1:8b: 59:39:14:71:5a:a4:41:71:1e:03:9c:c1:c5:ff:24: 3b:d1:f9:9e:34:09:80:ed:ee:b8:c5:d4:c3:90:5e: c0:a4:94:00:9f:b9:b7:f0:9e:8a:23:ca:65:21:1a: fa:19:c5:13:a2:ad:3e:d0:48:8f:ab:ab:97:00:f9: 6b:4b:83:4c:3c:93:c2:b6:01:4b:67:e2:08:96:7c: c7:48:a0:9a:70:c2:eb:d2:3d:5f:cc:55:90:c3:91: 10:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:43:9E:BB:AA:3C:54:AB:43:5E:9C:8E:30:EF:79:82:A0:5C:F4:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dff3557c-8510-362d-8886-ae8601c1c582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:7e:cc:28:79:78:19:9e:a4:34:3a:2c:11:87:90:73:ff:5a: 39:ed:9c:0c:ea:2a:e4:64:49:f8:ce:d1:86:e5:62:70:36:dd: b8:53:9e:ac:1f:e7:bf:01:9e:73:46:41:cc:be:60:5d:21:ef: 24:be:f3:7d:a9:f7:3e:11:bb:90:4c:a7:82:7a:21:c7:4d:5a: cb:af:75:ca:f9:e1:16:f7:4c:8a:53:01:6a:44:f2:4c:a9:b9: 99:15:00:1f:88:16:5e:f2:2b:ce:c0:13:f1:eb:df:6a:f0:c4: 8f:e2:36:8f:2a:2f:fa:5c:b8:24:d6:0b:48:fc:34:50:52:17: 86:e1:93:77:45:3d:99:11:3d:b7:d6:30:9f:75:07:87:49:f6: a6:93:30:7e:84:55:78:21:45:2c:19:ec:a8:6a:5b:03:34:c4: 9c:4e:a6:14:2c:24:7d:5a:d6:d8:36:ad:a1:40:98:91:2a:6d: 1b:23:a3:b9:f2:b1:6a:0e:c5:17:81:f3:1f:56:c8:10:27:ee: e4:0c:e5:e8:00:31:2f:91:91:00:60:4f:7d:48:e6:54:ba:9a: ad:5b:9e:d7:dd:ec:90:c6:c9:f1:ca:40:4e:80:52:d3:04:ac: 35:ed:55:36:d2:de:b8:ab:e1:56:5d:15:23:6f:e7:1a:c5:30: d1:dc:70:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQOOqO/iXqxnhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk NjcwZDk1ZmYtODgxYS00YTU5LTg2NWEtZGY5ZDgwNzgzNTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy6ar9tRN87RZw7a6K7aYEkQnem8hvC4/mDx Lt6ACX2sFaw6iYS+q/ryWVXIB2U5My2OcY3EeqKiKN+d0mUNF3S4MfaqeZAAeYxJ 4HqpBbBYi/ggS34+eeX0xtkrQSrdytdHt567NdFZn3vpbDyveX6nqtE5FhdGplyi /0K52J1TWu2kYdhidtrwL4ToPj1fZTS89FeQfchShtJ9cRS4HFwX8YtZORRxWqRB cR4DnMHF/yQ70fmeNAmA7e64xdTDkF7ApJQAn7m38J6KI8plIRr6GcUToq0+0EiP q6uXAPlrS4NMPJPCtgFLZ+IIlnzHSKCacMLr0j1fzFWQw5EQ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJDnruqPFSrQ16cjjDveYKgXPR1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZGZmMzU1N2MtODUxMC0z NjJkLTg4ODYtYWU4NjAxYzFjNTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN+zCh5eBmepDQ6LBGHkHP/WjntnAzqKuRkSfjO0YblYnA23bhTnqwf 578BnnNGQcy+YF0h7yS+832p9z4Ru5BMp4J6IcdNWsuvdcr54Rb3TIpTAWpE8kyp uZkVAB+IFl7yK87AE/Hr32rwxI/iNo8qL/pcuCTWC0j8NFBSF4bhk3dFPZkRPbfW MJ91B4dJ9qaTMH6EVXghRSwZ7KhqWwM0xJxOphQsJH1a1tg2raFAmJEqbRsjo7ny sWoOxReB8x9WyBAn7uQM5egAMS+RkQBgT31I5lS6mq1bntfd7JDGyfHKQE6AUtME rDXtVTbS3rir4VZdFSNv5xrFMNHccA0= -----END CERTIFICATE-----Generated at Sun Aug 24 05:37:32 2025 by rpki-client