$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dd65191f-2400-3b1f-84e0-bfcd5b67598a.roa File: dd65191f-2400-3b1f-84e0-bfcd5b67598a.roa (raw, json) Hash identifier: jQthsAdwljrhFmio8Y+njm5wgrS0nFxgbpnl5zaZSxQ= Subject key identifier: 6D:EC:4C:84:34:69:68:02:21:1A:6A:DB:B9:21:1E:C3:DC:AC:C0:8D Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849EEB5053EEC834E92211C9050 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dd65191f-2400-3b1f-84e0-bfcd5b67598a.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 54113 IP address blocks: 131.125.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b5:05:3e:ec:83:4e:92:21:1c:90:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=11ae842d-a469-4e04-9bd7-a963e010c086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:0b:a3:73:c2:d9:74:7f:d1:d1:8a:11:28: 17:9b:77:4d:8a:70:87:47:f5:50:f4:8e:51:08:74: e7:aa:c2:98:33:c5:6a:f9:54:67:a8:8c:fe:aa:f2: 73:1f:88:51:50:e7:01:cb:c8:de:65:de:c4:1b:01: c7:8e:50:fa:6a:2b:1c:25:73:cb:f1:e3:a2:e0:43: e2:72:9c:86:45:74:fa:c3:96:f0:67:c4:a1:56:b8: 22:48:aa:5a:e6:03:ee:c2:53:c8:11:fb:f2:57:a8: f7:57:d4:4c:a3:fc:8c:6a:87:ae:d8:57:f1:99:05: 63:2b:e5:d8:1e:64:eb:81:b3:b3:a0:1d:a7:42:85: ab:e1:49:b7:17:c6:d1:cd:e1:fa:f4:7b:25:8b:e0: 4f:f3:a1:de:14:19:a4:62:ba:5b:54:81:9d:56:d0: 31:3a:9b:2b:5b:c4:f9:d1:78:6c:e8:1d:eb:58:37: c6:3f:03:cb:9d:24:0b:c8:58:9a:98:d4:eb:0f:0a: 6f:3a:df:f2:c8:db:7f:41:a8:8a:9e:55:f1:a5:a8: 18:7b:c5:57:51:85:b9:58:37:fa:75:c8:89:91:88: b6:1b:02:29:4b:f7:fc:10:eb:df:dc:fb:7b:54:59: 47:a2:45:73:31:15:95:00:07:28:cb:fe:e4:4d:68: cb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EC:4C:84:34:69:68:02:21:1A:6A:DB:B9:21:1E:C3:DC:AC:C0:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/dd65191f-2400-3b1f-84e0-bfcd5b67598a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ef:ba:dd:45:ad:87:80:c4:1f:28:38:95:e3:d6:25:e0:d0: 82:d2:ae:60:7c:a6:d8:39:2e:78:f3:f2:e0:f8:43:cb:04:01: 5c:4e:ec:a4:55:b3:af:66:98:13:37:4a:81:96:f9:d2:81:c9: 60:d2:b4:f8:3b:ef:40:b0:a3:ee:82:28:42:7d:0a:01:fc:db: 26:a9:9c:5e:67:dd:88:1c:f8:b8:93:50:de:d9:0e:a3:8f:e4: f2:e1:10:53:dc:f4:f7:d2:8a:c3:ca:04:86:3d:ab:2e:f3:70: 74:af:01:d3:2e:09:a7:2f:ff:ee:27:d2:69:87:4a:ac:bd:0c: 1b:cd:c7:d6:1f:5d:3d:2a:9a:b2:bd:b0:07:df:f6:3d:5c:70: 0e:b1:68:53:1b:67:43:a2:69:75:26:0a:3f:02:d6:5a:c3:e8: db:ac:7b:4d:e1:2e:60:d7:12:6c:a6:c9:4b:e9:38:44:f2:d1: 54:ec:63:80:5f:6b:f9:6d:0a:c0:16:f0:fa:85:d6:37:35:ce: 72:b5:b1:82:59:3d:ba:2d:2d:c7:8e:67:b0:86:e5:38:59:a4: 72:a5:37:54:fa:fb:c0:e9:fc:3e:be:d8:c9:69:e7:04:64:38: b9:42:2c:bc:de:4d:39:22:57:11:6c:f1:de:42:f6:82:2e:fb: 51:34:d5:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQU+7INOkiEckFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk MTFhZTg0MmQtYTQ2OS00ZTA0LTliZDctYTk2M2UwMTBjMDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdQLo3PC2XR/0dGKESgXm3dNinCHR/VQ9I5R CHTnqsKYM8Vq+VRnqIz+qvJzH4hRUOcBy8jeZd7EGwHHjlD6aiscJXPL8eOi4EPi cpyGRXT6w5bwZ8ShVrgiSKpa5gPuwlPIEfvyV6j3V9RMo/yMaoeu2FfxmQVjK+XY HmTrgbOzoB2nQoWr4Um3F8bRzeH69Hsli+BP86HeFBmkYrpbVIGdVtAxOpsrW8T5 0Xhs6B3rWDfGPwPLnSQLyFiamNTrDwpvOt/yyNt/QaiKnlXxpagYe8VXUYW5WDf6 dciJkYi2GwIpS/f8EOvf3Pt7VFlHokVzMRWVAAcoy/7kTWjLIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3sTIQ0aWgCIRpq27khHsPcrMCNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZGQ2NTE5MWYtMjQwMC0z YjFmLTg0ZTAtYmZjZDViNjc1OThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbvut1FrYeAxB8oOJXj1iXg0ILSrmB8ptg5Lnjz8uD4Q8sEAVxO7KRV s69mmBM3SoGW+dKByWDStPg770Cwo+6CKEJ9CgH82yapnF5n3Ygc+LiTUN7ZDqOP 5PLhEFPc9PfSisPKBIY9qy7zcHSvAdMuCacv/+4n0mmHSqy9DBvNx9YfXT0qmrK9 sAff9j1ccA6xaFMbZ0OiaXUmCj8C1lrD6Nuse03hLmDXEmymyUvpOETy0VTsY4Bf a/ltCsAW8PqF1jc1znK1sYJZPbotLceOZ7CG5ThZpHKlN1T6+8Dp/D6+2Mlp5wRk OLlCLLzeTTkiVxFs8d5C9oIu+1E01d0= -----END CERTIFICATE-----Generated at Mon Jun 16 05:29:28 2025 by rpki-client