$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa File: 5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa (raw, json) Hash identifier: Edw7E9DnRAny6pxcLJEv3He+GfxhfVDEklAjjtmDDZs= Subject key identifier: CB:78:B3:70:0E:3A:A5:60:3A:BC:83:DA:D5:41:2F:7C:FD:35:4B:EC Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F43285849C63A278E00F6A932458EB900 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa Signing time: Wed 07 May 2025 13:01:01 +0000 ROA not before: Wed 07 May 2025 13:01:01 +0000 ROA not after: Tue 05 Aug 2025 13:01:01 +0000 asID: 0 IP address blocks: 125.253.80.0/21 maxlen: 21 125.253.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c6:3a:27:8e:00:f6:a9:32:45:8e:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: May 7 13:01:01 2025 GMT Not After : Aug 5 13:01:01 2025 GMT Subject: CN=a30f5aee-69aa-4749-bee3-98f0cd003371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b2:89:e7:44:ab:c5:c5:77:d5:73:5c:79:da: 63:7b:aa:75:0e:83:2f:ed:dc:3b:1c:46:0c:45:39: f5:fa:d4:2d:8e:cc:d3:c2:13:63:a5:17:db:55:40: cf:5a:6e:f7:43:7a:f7:98:44:11:16:c0:b2:56:49: cf:8a:f0:86:8b:9a:2d:76:ea:6c:7c:ee:7e:e4:57: 74:f0:e5:8c:04:75:21:b3:d0:1c:1f:c4:45:70:f1: a2:99:3e:04:d5:f7:fb:5d:43:d0:16:0d:17:7f:de: 51:11:39:c3:0d:26:6c:b5:ac:00:e6:5c:69:5b:ab: ec:3d:30:7d:ce:29:90:9d:6e:a6:9c:bd:e4:c9:a4: de:a8:ee:2a:63:ea:18:0c:76:2d:81:43:34:56:82: 25:73:07:9c:59:0c:a7:1d:b2:14:09:f0:ee:82:e0: 15:77:6d:7d:66:70:33:48:8c:11:b5:9b:2e:5c:61: d0:e3:a5:80:eb:4c:11:d4:f0:26:17:c9:27:00:5f: b6:25:3c:2e:0f:6d:98:99:c0:b2:ec:0b:59:1b:07: b7:7f:63:17:45:24:db:ba:c1:e7:85:50:e0:4d:b1: a9:33:e5:4a:16:04:4b:49:b5:16:34:68:ce:65:ec: f7:ef:a1:33:a1:04:05:1e:89:69:51:83:b5:ef:b3: ae:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:78:B3:70:0E:3A:A5:60:3A:BC:83:DA:D5:41:2F:7C:FD:35:4B:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.80.0-125.253.91.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:40:f0:ca:41:70:20:55:66:c8:95:b5:15:d8:15:30:f0:b7: db:b0:08:08:52:11:aa:4c:e2:5f:eb:0d:19:02:4f:89:00:1f: 1e:3a:a4:3c:87:fc:bf:b2:39:ea:3d:07:fc:7a:76:09:22:90: 3a:17:77:ab:46:2c:17:36:32:c9:06:98:bd:df:82:79:e4:31: a7:ed:3a:8f:9b:d4:7e:a2:1d:3c:a4:93:8a:f4:6d:dc:0e:7b: 54:c6:b1:c2:a2:bf:8a:b8:2e:c9:c4:21:07:00:c4:9a:ab:87: 5e:6c:c1:83:02:24:25:b2:10:76:40:5a:c8:ff:7a:62:b6:94: c1:ee:9d:a6:89:1b:75:d2:78:08:b1:1b:af:c5:74:2f:a3:54: 5c:5d:8e:c4:51:89:9f:a3:3f:b9:89:6f:05:d7:39:23:1f:05: aa:7b:fc:28:46:cd:1e:b9:ed:88:5c:e4:a8:9b:97:6b:1b:e0: 7b:b5:f1:91:25:7e:44:a3:b6:d8:1c:cd:02:31:34:16:54:5f: 0a:67:a3:5f:79:68:78:fb:1e:09:93:7a:40:a2:de:4f:e1:f9: 41:49:95:28:cb:f1:56:dc:f7:55:db:dc:66:6e:6f:32:a1:e7: 38:ba:e6:4b:97:62:b6:80:da:88:d2:76:7d:05:8d:ee:18:4e: cc:df:d5:0e -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEnGOieOAPapMkWOuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDUwNzEzMDEwMVoXDTI1MDgwNTEzMDEwMVowLzEtMCsGA1UEAxMk YTMwZjVhZWUtNjlhYS00NzQ5LWJlZTMtOThmMGNkMDAzMzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrKJ50SrxcV31XNcedpje6p1DoMv7dw7HEYM RTn1+tQtjszTwhNjpRfbVUDPWm73Q3r3mEQRFsCyVknPivCGi5otdupsfO5+5Fd0 8OWMBHUhs9AcH8RFcPGimT4E1ff7XUPQFg0Xf95RETnDDSZstawA5lxpW6vsPTB9 zimQnW6mnL3kyaTeqO4qY+oYDHYtgUM0VoIlcwecWQynHbIUCfDuguAVd219ZnAz SIwRtZsuXGHQ46WA60wR1PAmF8knAF+2JTwuD22YmcCy7AtZGwe3f2MXRSTbusHn hVDgTbGpM+VKFgRLSbUWNGjOZez376EzoQQFHolpUYO177OuOwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFMt4s3AOOqVgOryD2tVBL3z9NUvsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvNWJiNTJiMDctNGRhNC0z ZjQ0LTkzMGUtNDNhZjc3YzNiOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAR9/VAD BAJ9/VgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAPkDwykFwIFVmyJW1FdgVMPC327AICFIRqkziX+sNGQJP iQAfHjqkPIf8v7I56j0H/Hp2CSKQOhd3q0YsFzYyyQaYvd+CeeQxp+06j5vUfqId PKSTivRt3A57VMaxwqK/irguycQhBwDEmquHXmzBgwIkJbIQdkBayP96YraUwe6d pokbddJ4CLEbr8V0L6NUXF2OxFGJn6M/uYlvBdc5Ix8Fqnv8KEbNHrntiFzkqJuX axvge7XxkSV+RKO22BzNAjE0FlRfCmejX3loePseCZN6QKLeT+H5QUmVKMvxVtz3 VdvcZm5vMqHnOLrmS5ditoDaiNJ2fQWN7hhOzN/VDg== -----END CERTIFICATE-----Generated at Sun Jun 15 18:56:43 2025 by rpki-client