$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b6fa661e-a591-3511-adc2-2e891e5ed773.roa File: b6fa661e-a591-3511-adc2-2e891e5ed773.roa (raw, json) Hash identifier: syYmfVvf8spxW5xybNR+QplVak68U45lX6NrBvy5dA4= Subject key identifier: FE:4E:3D:AF:7F:1E:8E:BF:47:52:DF:4F:99:80:29:6F:BE:12:85:A1 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858490F7C02FB8E80986AA27C8780 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b6fa661e-a591-3511-adc2-2e891e5ed773.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 54113 IP address blocks: 131.125.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7c:02:fb:8e:80:98:6a:a2:7c:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=1f453483-4923-477c-94ce-0108c915c418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b4:67:01:d1:f5:84:0d:af:f0:17:7a:41:c1: f8:16:68:a3:b1:3d:23:2c:af:19:79:25:e6:08:a8: 27:2f:e1:30:53:1f:41:42:34:9d:c3:49:ea:61:7c: d5:fb:23:3a:0b:99:e7:c0:80:84:05:63:d9:37:f8: 78:b8:e9:a2:27:4e:11:09:58:b8:a0:bd:5b:71:de: 15:4b:63:b9:79:6f:0c:db:d3:d6:fa:3e:07:a3:87: 2b:22:f7:d6:f4:44:cb:28:f6:83:77:4c:0b:4e:bc: 92:b7:c6:e2:3d:17:d5:8b:58:06:40:5a:aa:b3:bc: f0:62:0a:96:5e:a0:19:74:81:35:9c:36:23:94:9c: 90:51:a8:e9:77:6e:dc:41:2a:0c:a4:4c:a1:11:81: 30:32:83:82:b6:aa:e6:e6:26:57:fe:6d:6c:57:44: 49:67:b9:65:d5:df:a2:78:e3:b7:ce:83:d3:62:b4: 1d:26:5b:1e:39:63:6a:e8:4c:1b:a6:b6:f7:0a:53: 42:45:65:51:bc:93:85:be:39:7a:a1:2d:af:27:b8: 44:40:bf:ec:ba:75:16:04:fb:a1:66:66:b7:4c:a6: 9e:17:4a:49:bc:a6:e2:d2:15:9c:16:55:46:d4:71: f0:55:59:37:bb:32:fb:75:1d:5e:2c:ec:27:f9:63: b0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4E:3D:AF:7F:1E:8E:BF:47:52:DF:4F:99:80:29:6F:BE:12:85:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b6fa661e-a591-3511-adc2-2e891e5ed773.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:46:f8:03:de:6f:4a:73:45:22:c8:30:2a:c0:3e:d6:42:1c: a5:50:84:65:39:ae:03:9e:a0:12:34:a7:2a:b3:d0:ce:64:bf: 27:31:1a:97:2e:c4:58:36:4e:5f:f5:9a:8e:5c:ec:6c:0e:59: b0:cd:61:ec:c0:7a:92:a6:9a:9f:5f:aa:da:1f:57:7d:b9:64: 34:32:3b:4b:16:09:05:ae:86:71:85:6f:48:13:86:d5:80:e7: f8:ee:5c:06:39:48:10:62:58:5b:73:b3:9e:67:a3:cb:f2:c8: e7:17:66:88:ab:57:97:30:d8:61:b6:26:9a:77:1b:b3:90:a8: 9c:3b:22:14:0e:83:1f:e7:be:d9:cd:1e:06:d4:1f:98:d1:3d: af:7e:f7:da:1f:72:8e:72:40:63:0f:e0:0c:aa:54:fc:f8:de: 13:d9:07:a6:8e:4f:0d:fc:ef:62:4c:64:73:65:f9:d0:48:f6: 15:da:7e:48:67:86:1a:4d:25:a7:b8:b2:a1:9c:6f:12:48:26: 95:d6:0d:c4:31:aa:89:35:6c:0f:1c:64:3b:d0:2a:d8:67:e5: 4c:82:f6:d6:e5:7a:fe:99:e1:e1:c3:24:9d:02:42:c3:04:2f: 73:fe:a7:af:2e:4c:f0:7a:52:a9:ef:ae:bc:e3:f3:14:b9:13: db:65:fb:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPfAL7joCYaqJ8h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk MWY0NTM0ODMtNDkyMy00NzdjLTk0Y2UtMDEwOGM5MTVjNDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibRnAdH1hA2v8Bd6QcH4FmijsT0jLK8ZeSXm CKgnL+EwUx9BQjSdw0nqYXzV+yM6C5nnwICEBWPZN/h4uOmiJ04RCVi4oL1bcd4V S2O5eW8M29PW+j4Ho4crIvfW9ETLKPaDd0wLTrySt8biPRfVi1gGQFqqs7zwYgqW XqAZdIE1nDYjlJyQUajpd27cQSoMpEyhEYEwMoOCtqrm5iZX/m1sV0RJZ7ll1d+i eOO3zoPTYrQdJlseOWNq6Ewbprb3ClNCRWVRvJOFvjl6oS2vJ7hEQL/sunUWBPuh Zma3TKaeF0pJvKbi0hWcFlVG1HHwVVk3uzL7dR1eLOwn+WOwcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5OPa9/Ho6/R1LfT5mAKW++EoWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjZmYTY2MWUtYTU5MS0z NTExLWFkYzItMmU4OTFlNWVkNzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg318MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpG+APeb0pzRSLIMCrAPtZCHKVQhGU5rgOeoBI0pyqz0M5kvycxGpcu xFg2Tl/1mo5c7GwOWbDNYezAepKmmp9fqtofV325ZDQyO0sWCQWuhnGFb0gThtWA 5/juXAY5SBBiWFtzs55no8vyyOcXZoirV5cw2GG2Jpp3G7OQqJw7IhQOgx/nvtnN HgbUH5jRPa9+99ofco5yQGMP4AyqVPz43hPZB6aOTw3872JMZHNl+dBI9hXafkhn hhpNJae4sqGcbxJIJpXWDcQxqok1bA8cZDvQKthn5UyC9tblev6Z4eHDJJ0CQsME L3P+p68uTPB6Uqnvrrzj8xS5E9tl+4w= -----END CERTIFICATE-----Generated at Sun Apr 27 17:54:49 2025 by rpki-client