$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e92d04d9-2f5c-37c2-aa38-785df985a75e.roa File: e92d04d9-2f5c-37c2-aa38-785df985a75e.roa (raw, json) Hash identifier: lziojbYdvpZyYnp/9XRxkqT7nOKj1AVVqL5zSW3F0IQ= Subject key identifier: 49:09:DB:7B:5C:43:17:3E:A6:9E:CA:9B:50:72:81:C2:A7:27:B1:00 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584ACF7102E247AA195D41897E40 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e92d04d9-2f5c-37c2-aa38-785df985a75e.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 54113 IP address blocks: 131.125.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:02:e2:47:aa:19:5d:41:89:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=cd4343fa-cc8d-4272-9145-5c3132dd2b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:43:80:ef:c6:50:f1:88:14:a5:1c:35:26:d6: f9:82:91:8f:a3:fd:65:9f:f6:a2:6d:4d:b4:8c:ff: 17:7e:43:dd:a7:4e:d9:09:08:79:6c:be:6e:50:bb: 74:ea:9f:09:01:3a:45:8b:c9:6c:d0:11:aa:58:2f: 42:3a:27:c9:c7:8d:ef:31:1f:e9:fe:f9:6d:43:a5: ce:97:45:20:df:0c:49:cd:53:a7:f2:8e:fa:b1:9d: 95:3f:63:d2:1b:bc:04:79:e0:f4:ed:0a:8a:a3:b5: a7:6f:df:80:31:1b:d7:4e:cc:b8:14:9d:ad:63:6c: a6:fe:5e:b5:4a:1c:21:79:df:60:0d:58:bc:d1:ac: 2f:10:54:bc:7b:e4:63:5b:07:b9:c6:61:ec:e4:c6: f9:ff:36:95:83:d3:24:75:d0:fb:f7:30:1b:52:e8: 60:bf:c4:dc:13:52:82:e2:97:d3:24:6d:6a:78:cf: fc:61:4d:d0:d2:53:22:66:00:0b:73:63:5c:7c:35: 54:02:9c:16:6f:0a:e6:e2:13:41:b7:ee:51:0b:11: 0d:cb:c2:93:74:8a:43:2e:db:aa:12:c3:f8:7d:54: 80:9d:75:fa:eb:02:84:10:89:9c:70:01:1a:ca:98: a6:a6:77:90:a1:25:fe:9f:e3:40:ff:37:1b:da:3e: d4:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:09:DB:7B:5C:43:17:3E:A6:9E:CA:9B:50:72:81:C2:A7:27:B1:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e92d04d9-2f5c-37c2-aa38-785df985a75e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b1:c9:03:ea:d2:20:33:ae:b6:42:57:6b:8d:1a:20:ad:28: 34:f7:cd:51:92:f6:ab:59:0d:1c:05:3a:18:e6:97:16:f8:6d: 3d:e0:d3:4a:f3:22:ee:bb:10:71:ea:ac:85:22:1b:20:4e:f6: 60:d9:8c:fa:17:8d:69:3c:35:e2:78:32:84:71:2b:e0:b8:0d: 11:8e:f2:88:e5:56:e2:fb:53:f0:87:dc:a1:59:a0:a5:72:c7: c9:90:c1:04:6f:5a:b9:f3:6c:ab:8e:66:1f:f6:5f:a9:39:80: 0b:dd:cb:33:3c:cd:11:4b:a9:54:36:38:ed:da:0e:5f:0f:da: f7:eb:3d:62:5c:f4:7e:b8:7a:7f:63:70:f9:83:96:b7:3c:a8: 4d:cb:70:e4:1e:a8:e7:17:ac:c1:cb:2d:83:24:cc:00:51:a3: 9d:3e:31:32:13:ba:9d:68:03:fc:a6:83:58:02:25:1b:71:9a: cc:d5:c8:0d:79:06:da:35:44:fc:ab:6d:04:91:a1:e9:23:10: d9:e3:c5:61:24:7c:cd:a6:57:e4:9e:34:25:cf:27:6e:05:5a: 3e:22:44:0d:f7:2a:db:1d:73:b2:ad:75:f9:17:da:89:b4:46: a5:e4:4f:a5:83:d3:6f:75:76:aa:72:b3:69:e7:d5:e5:4e:48: 1e:2e:18:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcQLiR6oZXUGJfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk Y2Q0MzQzZmEtY2M4ZC00MjcyLTkxNDUtNWMzMTMyZGQyYjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUOA78ZQ8YgUpRw1Jtb5gpGPo/1ln/aibU20 jP8XfkPdp07ZCQh5bL5uULt06p8JATpFi8ls0BGqWC9COifJx43vMR/p/vltQ6XO l0Ug3wxJzVOn8o76sZ2VP2PSG7wEeeD07QqKo7Wnb9+AMRvXTsy4FJ2tY2ym/l61 Shwhed9gDVi80awvEFS8e+RjWwe5xmHs5Mb5/zaVg9MkddD79zAbUuhgv8TcE1KC 4pfTJG1qeM/8YU3Q0lMiZgALc2NcfDVUApwWbwrm4hNBt+5RCxENy8KTdIpDLtuq EsP4fVSAnXX66wKEEImccAEaypimpneQoSX+n+NA/zcb2j7UFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkJ23tcQxc+pp7Km1BygcKnJ7EAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZTkyZDA0ZDktMmY1Yy0z N2MyLWFhMzgtNzg1ZGY5ODVhNzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCxyQPq0iAzrrZCV2uNGiCtKDT3zVGS9qtZDRwFOhjmlxb4bT3g00rz Iu67EHHqrIUiGyBO9mDZjPoXjWk8NeJ4MoRxK+C4DRGO8ojlVuL7U/CH3KFZoKVy x8mQwQRvWrnzbKuOZh/2X6k5gAvdyzM8zRFLqVQ2OO3aDl8P2vfrPWJc9H64en9j cPmDlrc8qE3LcOQeqOcXrMHLLYMkzABRo50+MTITup1oA/ymg1gCJRtxmszVyA15 Bto1RPyrbQSRoekjENnjxWEkfM2mV+SeNCXPJ24FWj4iRA33Ktsdc7KtdfkX2om0 RqXkT6WD0291dqpys2nn1eVOSB4uGC0= -----END CERTIFICATE-----Generated at Sun Aug 24 03:51:08 2025 by rpki-client