$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cfa1457e-6b66-3dc3-b8d4-52718701d476.roa File: cfa1457e-6b66-3dc3-b8d4-52718701d476.roa (raw, json) Hash identifier: fMpqM9ILVENOCYyjZeeRUGNszt6cgmI8pgizioxMJt0= Subject key identifier: EF:43:49:D4:22:FA:6D:58:6F:25:FD:D5:A4:2F:DF:03:2A:A1:8E:0A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849EEB5058BE6007230A013F8A0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cfa1457e-6b66-3dc3-b8d4-52718701d476.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 54113 IP address blocks: 131.125.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b5:05:8b:e6:00:72:30:a0:13:f8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=ffa506c8-70e6-44cb-9d0b-a0466f2c74ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1b:09:16:d9:b3:af:75:af:99:91:13:16:a0: a5:9f:b0:53:c3:d7:9c:a8:66:fa:17:a7:31:04:40: c8:07:a2:6e:e1:3a:10:4a:be:fa:ab:8a:32:74:8c: 62:73:f3:5b:30:55:8b:22:43:62:58:66:a1:81:b6: 7c:f6:75:6d:03:06:45:b4:1b:84:3a:75:0b:ca:14: 4b:93:08:90:16:58:30:a5:3f:fe:92:9c:c1:cc:0d: 08:61:f2:57:90:b8:f5:83:d6:23:cf:e5:31:ca:d2: aa:df:c7:19:dd:7b:a0:34:d5:d8:c6:26:3f:51:1e: 11:d4:ec:f4:45:31:7a:11:ee:f6:2a:11:83:80:c2: 10:64:e9:db:82:00:e3:64:7c:7d:4b:c2:da:d5:61: b9:46:09:b8:0f:bd:6a:a5:a4:0c:c7:e8:67:f2:dc: 04:57:37:5b:9d:c4:b6:06:a7:13:73:93:4b:b6:d0: a1:61:7e:57:3f:96:60:f3:fb:0f:36:e7:15:00:90: e8:ef:c0:0e:c0:94:0c:09:0c:7f:90:1e:c6:5b:4a: 25:84:ea:b9:d7:07:e2:fa:85:dc:51:1b:b2:8a:b0: d6:99:1e:4a:52:57:5a:b7:00:39:a0:f0:28:70:6a: 42:e4:f9:1d:ae:b5:c7:ca:3d:0f:05:f0:4b:34:29: 98:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:43:49:D4:22:FA:6D:58:6F:25:FD:D5:A4:2F:DF:03:2A:A1:8E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cfa1457e-6b66-3dc3-b8d4-52718701d476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:3c:58:23:b5:ab:b1:31:9f:59:31:9c:aa:1a:8a:31:46:af: 70:af:9d:fa:e1:7b:3f:be:1e:65:12:f8:86:76:02:66:0b:45: cd:06:24:46:31:43:66:f1:d1:08:b2:41:5f:a2:66:ef:6f:02: 74:f6:4c:c5:39:74:4b:0e:ac:0c:c9:78:a5:29:d5:4e:c8:7b: a6:8c:c2:06:a0:69:26:b2:4c:a0:74:e3:13:bb:aa:52:6c:62: 8b:00:68:02:ec:dc:3f:06:fd:91:b3:84:ed:98:6a:be:3d:6d: 6f:1f:d9:c9:41:75:f2:49:21:43:b2:73:fb:17:49:bb:b1:dd: d8:fd:b4:2e:dd:30:75:3f:d8:e7:45:0d:1f:c8:99:87:73:fd: 8a:e8:85:39:82:59:1b:1f:ea:53:52:46:12:2f:6a:4f:d1:e1: f9:44:34:b0:9e:6f:c1:a2:e0:7f:9d:20:2b:db:fe:2b:28:b7: 6d:34:a4:45:d0:b7:a7:1e:56:bf:24:e9:f2:69:87:bf:c7:77: 53:af:a0:e4:c8:0f:46:11:0c:c3:0f:ef:5f:a5:ca:ab:61:1a: ec:67:e8:2e:24:0b:88:4e:11:7a:bc:6d:36:11:be:b0:c9:26: 36:62:c6:c6:1d:9f:f5:b2:ae:62:80:f1:57:2f:05:08:22:2e: 4f:6b:84:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQWL5gByMKAT+KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk ZmZhNTA2YzgtNzBlNi00NGNiLTlkMGItYTA0NjZmMmM3NGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthsJFtmzr3WvmZETFqCln7BTw9ecqGb6F6cx BEDIB6Ju4ToQSr76q4oydIxic/NbMFWLIkNiWGahgbZ89nVtAwZFtBuEOnULyhRL kwiQFlgwpT/+kpzBzA0IYfJXkLj1g9Yjz+UxytKq38cZ3XugNNXYxiY/UR4R1Oz0 RTF6Ee72KhGDgMIQZOnbggDjZHx9S8La1WG5Rgm4D71qpaQMx+hn8twEVzdbncS2 BqcTc5NLttChYX5XP5Zg8/sPNucVAJDo78AOwJQMCQx/kB7GW0olhOq51wfi+oXc URuyirDWmR5KUldatwA5oPAocGpC5PkdrrXHyj0PBfBLNCmY/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9DSdQi+m1YbyX91aQv3wMqoY4KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2ZhMTQ1N2UtNmI2Ni0z ZGMzLWI4ZDQtNTI3MTg3MDFkNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg318MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIA8WCO1q7Exn1kxnKoaijFGr3Cvnfrhez++HmUS+IZ2AmYLRc0GJEYx Q2bx0QiyQV+iZu9vAnT2TMU5dEsOrAzJeKUp1U7Ie6aMwgagaSayTKB04xO7qlJs YosAaALs3D8G/ZGzhO2Yar49bW8f2clBdfJJIUOyc/sXSbux3dj9tC7dMHU/2OdF DR/ImYdz/YrohTmCWRsf6lNSRhIvak/R4flENLCeb8Gi4H+dICvb/isot200pEXQ t6ceVr8k6fJph7/Hd1OvoOTID0YRDMMP71+lyqthGuxn6C4kC4hOEXq8bTYRvrDJ JjZixsYdn/WyrmKA8VcvBQgiLk9rhG4= -----END CERTIFICATE-----Generated at Mon Jun 16 02:29:43 2025 by rpki-client