$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c68aa7f4-7008-3008-9c59-e65de9ce99f2.roa File: c68aa7f4-7008-3008-9c59-e65de9ce99f2.roa (raw, json) Hash identifier: 4OvmKoF5HoCAOG4rruPXR4voSlck8VW5U0WydZOAwAI= Subject key identifier: A2:92:79:4F:5C:87:A1:16:C2:25:7D:69:29:0A:A3:30:7A:00:0D:54 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584A0A9FD3D5F38A66A67C1F75C0 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c68aa7f4-7008-3008-9c59-e65de9ce99f2.roa Signing time: Sun 01 Jun 2025 01:00:49 +0000 ROA not before: Sun 01 Jun 2025 01:00:49 +0000 ROA not after: Sat 30 Aug 2025 01:00:49 +0000 asID: 19437 IP address blocks: 125.253.67.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0a:9f:d3:d5:f3:8a:66:a6:7c:1f:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Jun 1 01:00:49 2025 GMT Not After : Aug 30 01:00:49 2025 GMT Subject: CN=427c6e9c-1af4-498b-a570-0a0063c886d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:44:2c:e5:b8:3a:02:fd:20:96:bf:73:40:eb: 63:76:1d:4d:83:42:af:69:50:b8:40:27:9c:c0:45: 0f:fe:c3:d7:ab:33:a4:2b:cb:b3:c0:98:e2:bd:f8: d5:10:db:55:af:5c:4e:a2:eb:f5:62:a1:ef:e3:24: cb:fd:2c:e3:89:62:f2:cd:fb:8a:c8:58:8e:7f:bd: 52:2e:fb:2b:66:b3:62:79:cb:55:ce:ff:c6:a2:63: 05:86:46:19:2d:69:24:18:c9:7a:9a:22:17:74:ac: f1:9d:e2:75:4c:b5:8c:e3:82:f6:61:c2:d3:dc:0f: 37:37:be:29:c8:0d:21:9b:04:30:3c:48:a5:1c:b5: 77:e4:e2:72:4d:9a:4d:94:fe:1a:71:78:50:c5:79: 6f:81:d3:31:62:98:47:37:c0:60:25:fa:17:66:b6: 58:a6:37:25:f1:de:f5:44:37:b5:26:e0:89:22:1c: f9:b6:34:41:df:51:ca:e9:14:1c:b9:db:e8:a9:14: a2:7d:d1:a9:3e:fa:92:ae:6f:bf:c7:0e:d2:1a:95: e2:d6:2c:03:8b:11:e5:79:01:2f:d9:f8:94:cf:c1: ff:f7:17:ea:ac:96:6b:e0:03:f0:74:cd:8d:da:08: 9d:d7:7b:2c:2b:1d:40:f1:38:c2:50:95:5e:e0:a0: da:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:92:79:4F:5C:87:A1:16:C2:25:7D:69:29:0A:A3:30:7A:00:0D:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c68aa7f4-7008-3008-9c59-e65de9ce99f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:62:fd:65:de:ae:9f:4c:40:65:f6:93:52:21:84:08:bf:8a: a4:6e:8e:64:a3:a7:9f:c6:1d:63:5b:db:65:94:18:af:12:c0: 18:f6:72:91:66:ec:6b:8a:cf:14:86:3b:89:d0:7a:bc:cf:5c: 8c:fd:9b:67:49:b8:68:6c:28:c6:cb:64:19:f4:92:bf:80:d6: f3:58:3f:97:70:db:55:a7:83:c5:60:19:c6:f4:f5:b8:97:dd: f1:af:ca:53:97:d8:b5:24:f5:9b:2b:f0:25:26:ee:4a:4d:8a: cc:9d:1d:78:10:24:c2:17:26:20:0f:0f:90:56:d7:a0:0e:29: 7a:e5:06:7a:9d:ca:f7:46:77:76:03:aa:f3:bd:21:40:82:38: da:30:a4:ba:ba:d6:35:62:08:b3:c1:86:48:a6:c6:df:86:19: b8:c1:f1:7a:62:20:b1:19:c7:74:18:54:6d:39:5e:7a:d8:3c: 23:c2:78:d0:8a:d8:d1:33:f9:0c:5b:db:c6:f9:90:48:e8:cc: c7:4b:26:11:88:2f:f1:57:1e:c4:9c:a5:95:83:dc:c3:35:2e: 9e:8c:fa:ab:29:af:92:5c:e6:4e:4f:13:c1:4a:b4:ed:02:ca: af:c4:56:ac:4b:c5:f7:04:9f:7f:ab:0e:29:81:29:49:fb:7f: bd:de:ea:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoKn9PV84pmpnwfdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDYwMTAxMDA0OVoXDTI1MDgzMDAxMDA0OVowLzEtMCsGA1UEAxMk NDI3YzZlOWMtMWFmNC00OThiLWE1NzAtMGEwMDYzYzg4NmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUQs5bg6Av0glr9zQOtjdh1Ng0KvaVC4QCec wEUP/sPXqzOkK8uzwJjivfjVENtVr1xOouv1YqHv4yTL/SzjiWLyzfuKyFiOf71S LvsrZrNiectVzv/GomMFhkYZLWkkGMl6miIXdKzxneJ1TLWM44L2YcLT3A83N74p yA0hmwQwPEilHLV35OJyTZpNlP4acXhQxXlvgdMxYphHN8BgJfoXZrZYpjcl8d71 RDe1JuCJIhz5tjRB31HK6RQcudvoqRSifdGpPvqSrm+/xw7SGpXi1iwDixHleQEv 2fiUz8H/9xfqrJZr4APwdM2N2gid13ssKx1A8TjCUJVe4KDa4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKSeU9ch6EWwiV9aSkKozB6AA1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYzY4YWE3ZjQtNzAwOC0z MDA4LTljNTktZTY1ZGU5Y2U5OWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAff1DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBi/WXerp9MQGX2k1IhhAi/iqRujmSjp5/GHWNb22WUGK8SwBj2cpFm 7GuKzxSGO4nQerzPXIz9m2dJuGhsKMbLZBn0kr+A1vNYP5dw21Wng8VgGcb09biX 3fGvylOX2LUk9Zsr8CUm7kpNisydHXgQJMIXJiAPD5BW16AOKXrlBnqdyvdGd3YD qvO9IUCCONowpLq61jViCLPBhkimxt+GGbjB8XpiILEZx3QYVG05XnrYPCPCeNCK 2NEz+Qxb28b5kEjozMdLJhGIL/FXHsScpZWD3MM1Lp6M+qspr5Jc5k5PE8FKtO0C yq/EVqxLxfcEn3+rDimBKUn7f73e6qs= -----END CERTIFICATE-----Generated at Sun Jun 15 12:06:14 2025 by rpki-client