$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa File: fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa (raw, json) Hash identifier: KnXE2MYTgdzLVre6nitbsy15ZaEbfjs3t2aB1XZd6lM= Subject key identifier: F7:1B:F8:82:37:FD:A4:51:01:58:7B:EA:46:91:26:36:13:DF:39:E6 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F43285849EEB50846AE84EC2840915C00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 54113 IP address blocks: 131.125.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b5:08:46:ae:84:ec:28:40:91:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=d94e529f-62c3-48d4-a2e0-60c1d688e48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:58:ab:aa:d7:a9:c7:80:d1:43:37:04:7a:42: e8:c6:95:00:60:0b:5b:2a:02:e4:67:ab:4e:40:68: 11:c6:07:be:9a:60:48:cc:62:58:34:43:18:0d:57: d7:fd:0d:a7:fc:50:87:3a:4a:8c:02:8d:63:ae:8c: 4f:54:52:5d:33:2c:76:15:d1:6e:da:d1:f5:7e:5c: d7:30:24:85:bc:db:84:04:e0:0c:bf:00:31:c6:01: f5:cf:fd:2d:52:ba:cb:58:7d:47:68:f7:9a:56:e9: 25:d0:7e:8b:c9:a7:1e:c6:24:15:4c:af:45:67:c0: 54:c2:70:2c:0f:f0:51:0c:f7:81:82:40:a7:02:21: d0:a0:c7:fe:74:18:6b:81:66:a9:87:6d:72:aa:3f: da:f0:45:c9:b5:b1:d8:cf:ff:c9:77:75:b9:82:d6: a7:07:8b:29:0e:a3:96:e3:81:4d:a5:ab:26:0a:8e: 21:49:be:0f:e2:26:e6:ab:72:da:c0:3e:c4:28:22: e6:02:c1:00:58:d6:47:cc:25:2e:ae:d6:2c:91:da: 4c:a1:e5:ee:cc:7a:60:dd:36:15:76:b2:cc:0e:2e: bd:8d:99:37:b7:51:32:0e:73:4f:da:a8:5a:4b:8a: b6:7e:89:29:2f:a1:22:5d:8d:df:c8:55:37:37:89: a9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1B:F8:82:37:FD:A4:51:01:58:7B:EA:46:91:26:36:13:DF:39:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fdd4750c-d016-3b7e-b6f9-1c702ffbce6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:30:14:67:9a:52:54:da:b9:d0:fa:c6:32:2b:0b:d8:d1:b1: e6:62:b2:7d:f5:8c:0c:95:d0:b1:5b:d9:f4:98:3b:4a:25:93: ac:af:34:b5:71:0a:b8:dd:b2:81:42:8c:43:fb:c8:27:59:27: 89:b2:1f:d2:81:13:5e:44:d1:7b:29:1b:f0:d4:50:66:22:2e: 88:30:35:01:fa:23:ef:51:ea:bc:59:27:de:f7:7d:d9:0c:d3: 09:96:43:6e:19:3e:69:3d:c9:d3:13:df:8d:02:67:5d:f1:2c: c7:2c:d6:fe:c9:4f:02:48:94:86:92:bb:2a:b4:4b:0d:47:91: c5:d0:a7:9f:6b:33:42:1b:a6:f4:65:d9:01:5b:8b:c4:ee:10: f7:68:0a:d9:dc:21:c2:b6:86:05:2d:45:69:26:97:67:97:54: 4d:dd:eb:46:dc:56:86:a6:70:94:ea:9e:6a:a3:39:53:94:fb: d8:40:7d:ba:a5:97:ba:f0:b9:5b:c8:21:dc:72:b3:e9:36:3e: cc:1d:c4:f1:88:cb:5d:90:d9:b2:41:76:b1:25:c8:f7:03:be: 27:28:c4:41:a8:8e:1b:05:26:c8:f0:7a:cc:24:0e:c4:dc:d0: 83:b3:f3:d7:f2:ad:3d:39:90:27:68:46:46:04:3c:b8:a7:03: 3c:57:f4:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQhGroTsKECRXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk ZDk0ZTUyOWYtNjJjMy00OGQ0LWEyZTAtNjBjMWQ2ODhlNDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVirqtepx4DRQzcEekLoxpUAYAtbKgLkZ6tO QGgRxge+mmBIzGJYNEMYDVfX/Q2n/FCHOkqMAo1jroxPVFJdMyx2FdFu2tH1flzX MCSFvNuEBOAMvwAxxgH1z/0tUrrLWH1HaPeaVukl0H6LyacexiQVTK9FZ8BUwnAs D/BRDPeBgkCnAiHQoMf+dBhrgWaph21yqj/a8EXJtbHYz//Jd3W5gtanB4spDqOW 44FNpasmCo4hSb4P4ibmq3LawD7EKCLmAsEAWNZHzCUurtYskdpMoeXuzHpg3TYV drLMDi69jZk3t1EyDnNP2qhaS4q2fokpL6EiXY3fyFU3N4mpGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcb+II3/aRRAVh76kaRJjYT3znmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZmRkNDc1MGMtZDAxNi0z YjdlLWI2ZjktMWM3MDJmZmJjZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg31sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEwFGeaUlTaudD6xjIrC9jRseZisn31jAyV0LFb2fSYO0olk6yvNLVx CrjdsoFCjEP7yCdZJ4myH9KBE15E0XspG/DUUGYiLogwNQH6I+9R6rxZJ973fdkM 0wmWQ24ZPmk9ydMT340CZ13xLMcs1v7JTwJIlIaSuyq0Sw1HkcXQp59rM0IbpvRl 2QFbi8TuEPdoCtncIcK2hgUtRWkml2eXVE3d60bcVoamcJTqnmqjOVOU+9hAfbql l7rwuVvIIdxys+k2PswdxPGIy12Q2bJBdrElyPcDvicoxEGojhsFJsjweswkDsTc 0IOz89fyrT05kCdoRkYEPLinAzxX9LI= -----END CERTIFICATE-----Generated at Mon Jun 16 00:40:49 2025 by rpki-client