$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2455bf61-a2a2-39e5-bf04-82c479a5b223.roa File: 2455bf61-a2a2-39e5-bf04-82c479a5b223.roa (raw, json) Hash identifier: aaCBp3Cm51ox8sVqKUoQrwIM/uPFQ6+T14ENOhTFJ68= Subject key identifier: 14:A1:BA:F7:74:D5:47:40:D3:B6:D2:38:05:C6:FC:7F:EF:C2:32:3C Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F43285849CFFF84FAAAAE3AD457D84618 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2455bf61-a2a2-39e5-bf04-82c479a5b223.roa Signing time: Sun 11 May 2025 01:00:47 +0000 ROA not before: Sun 11 May 2025 01:00:47 +0000 ROA not after: Sat 09 Aug 2025 01:00:47 +0000 asID: 20454 IP address blocks: 125.253.64.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:ff:84:fa:aa:ae:3a:d4:57:d8:46:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: May 11 01:00:47 2025 GMT Not After : Aug 9 01:00:47 2025 GMT Subject: CN=bf41be80-7095-48fd-b232-76016e316db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b0:1c:ba:ac:30:ce:3d:3f:41:23:62:71:f5: 86:0d:7b:03:80:06:9d:9e:01:68:1f:35:56:97:49: c2:f5:3a:88:25:0c:4e:8e:64:ac:03:3f:13:7c:ab: f5:51:d4:dd:6f:ca:1d:e8:77:85:13:8e:f7:a5:7b: ee:e8:e3:61:02:d7:58:88:4f:2e:07:53:19:4f:a5: 08:b2:c9:a9:46:86:42:a1:ae:b2:81:64:b5:75:ee: 36:45:d5:15:f8:cd:fd:df:9c:d6:30:d6:d9:0a:2c: 9f:54:91:6b:ab:ba:73:9b:dd:7c:5d:e8:88:e4:8d: 43:30:89:8f:23:6d:e9:56:58:10:4d:55:a4:df:ad: 19:32:e1:69:61:cc:34:f0:6b:72:d9:5c:72:d0:6e: de:74:09:f9:02:51:32:6c:81:99:a2:ff:71:e1:78: b2:e8:85:89:43:be:9a:bd:10:0d:a6:05:08:ee:7b: ca:0b:2e:a2:35:f5:9d:4d:e1:34:52:87:ce:bc:33: b2:74:3c:d7:9f:ea:25:71:b1:8c:80:ab:d4:0c:43: 47:64:b5:f3:24:ed:69:8e:df:af:8d:6c:f4:61:1f: 29:c7:79:d5:ad:36:e3:f7:51:48:95:55:37:c8:3d: f6:7a:7e:70:02:78:31:fb:17:d8:d2:3a:4d:08:16: 19:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A1:BA:F7:74:D5:47:40:D3:B6:D2:38:05:C6:FC:7F:EF:C2:32:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2455bf61-a2a2-39e5-bf04-82c479a5b223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ed:f7:31:ca:7f:2d:b3:74:8c:3c:5a:9d:5b:1c:22:9e:ed: 73:5e:2d:68:48:0a:ba:98:4c:35:40:d6:83:41:f6:43:43:c2: ed:ae:cd:e0:df:09:b6:b0:4d:de:12:60:31:9e:1a:0e:8c:0c: c4:85:9b:2e:c6:f8:b7:34:c1:0c:53:71:eb:9d:93:e4:52:6d: 65:e8:84:96:05:fb:90:72:42:58:48:71:b2:c8:d0:f9:96:a3: 3e:9f:06:71:65:17:18:7d:f5:a1:d3:aa:d8:66:f7:0f:24:34: 13:af:a3:60:71:6b:34:6c:0b:8a:83:a7:32:66:16:b9:e0:48: de:d9:9d:81:e8:38:d1:63:d8:7d:6a:04:73:1e:b7:ec:70:df: 49:5d:e4:62:f2:e4:75:2a:41:6c:19:13:d8:e5:37:ad:b3:40: 63:9a:2e:59:65:3f:32:c4:5c:0f:e4:02:e8:40:d4:76:2d:ee: 04:31:0e:15:95:64:76:8d:24:17:a7:41:42:70:9f:ba:de:90: c6:d8:b2:62:a1:39:5b:07:cc:e1:82:56:6b:75:bb:1c:2e:e6: ad:c9:0a:7b:15:ad:52:c0:21:ab:9c:94:fc:d9:84:47:c1:c6: ce:0b:86:d1:dc:1e:85:c6:63:d4:cc:c3:64:8c:6e:32:cc:2d: 00:52:f1:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnP/4T6qq461FfYRhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk YmY0MWJlODAtNzA5NS00OGZkLWIyMzItNzYwMTZlMzE2ZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7Acuqwwzj0/QSNicfWGDXsDgAadngFoHzVW l0nC9TqIJQxOjmSsAz8TfKv1UdTdb8od6HeFE473pXvu6ONhAtdYiE8uB1MZT6UI ssmpRoZCoa6ygWS1de42RdUV+M3935zWMNbZCiyfVJFrq7pzm918XeiI5I1DMImP I23pVlgQTVWk360ZMuFpYcw08Gty2Vxy0G7edAn5AlEybIGZov9x4Xiy6IWJQ76a vRANpgUI7nvKCy6iNfWdTeE0UofOvDOydDzXn+olcbGMgKvUDENHZLXzJO1pjt+v jWz0YR8px3nVrTbj91FIlVU3yD32en5wAngx+xfY0jpNCBYZwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBShuvd01UdA07bSOAXG/H/vwjI8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvMjQ1NWJmNjEtYTJhMi0z OWU1LWJmMDQtODJjNDc5YTViMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCff1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDt9zHKfy2zdIw8Wp1bHCKe7XNeLWhICrqYTDVA1oNB9kNDwu2uzeDf CbawTd4SYDGeGg6MDMSFmy7G+Lc0wQxTceudk+RSbWXohJYF+5ByQlhIcbLI0PmW oz6fBnFlFxh99aHTqthm9w8kNBOvo2BxazRsC4qDpzJmFrngSN7ZnYHoONFj2H1q BHMet+xw30ld5GLy5HUqQWwZE9jlN62zQGOaLlllPzLEXA/kAuhA1HYt7gQxDhWV ZHaNJBenQUJwn7rekMbYsmKhOVsHzOGCVmt1uxwu5q3JCnsVrVLAIauclPzZhEfB xs4LhtHcHoXGY9TMw2SMbjLMLQBS8aA= -----END CERTIFICATE-----Generated at Sun Jun 15 23:06:31 2025 by rpki-client