$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d0ad8b12-f500-35ad-bbab-c68990fd814c.roa File: d0ad8b12-f500-35ad-bbab-c68990fd814c.roa (raw, json) Hash identifier: UZmoO5hdpHjuFAmj6e+VQlX3BjIRROx62kIWTBua2Ng= Subject key identifier: EF:0A:AA:42:32:39:6E:0B:06:1D:EA:B2:26:C6:4C:02:D9:04:98:6D Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F43285849CFFF851DE6D183CFF70AD828 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d0ad8b12-f500-35ad-bbab-c68990fd814c.roa Signing time: Sun 11 May 2025 01:00:47 +0000 ROA not before: Sun 11 May 2025 01:00:47 +0000 ROA not after: Sat 09 Aug 2025 01:00:47 +0000 asID: 20454 IP address blocks: 125.253.70.0/23 maxlen: 32 125.253.72.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:ff:85:1d:e6:d1:83:cf:f7:0a:d8:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: May 11 01:00:47 2025 GMT Not After : Aug 9 01:00:47 2025 GMT Subject: CN=d5a58276-c393-4065-9d5f-fd2935b1cd6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:01:d9:b2:30:fc:1d:c4:c4:9b:30:21:70:0c: 76:20:72:4e:1d:82:a4:12:69:10:56:ce:21:de:54: ee:9f:a9:ff:d4:ec:d6:e7:7c:af:47:74:59:67:92: 39:c5:ca:d0:5a:7e:b5:58:92:7f:f1:4c:69:0f:fa: 82:b9:eb:f0:40:b8:b2:fc:db:76:a2:c5:bf:78:c4: b7:21:e9:72:4f:e7:0f:7c:ea:6e:18:dd:f9:5f:9b: eb:8a:2e:1c:00:a6:01:aa:ff:16:c8:4d:16:ea:4b: 54:17:fa:40:f6:91:a0:d7:dc:56:bc:17:16:82:8f: 36:37:a1:34:9a:15:fb:96:c8:1e:d9:a8:4b:7b:49: 91:87:28:1f:cb:26:74:8b:79:46:a5:1c:3b:35:28: 74:95:ab:3f:f4:be:fb:c8:f5:b3:b3:fd:cf:00:e8: 3c:18:e7:59:d2:ff:f5:74:e8:09:25:51:7c:5a:6c: 2b:fc:48:45:5a:d9:c3:49:af:da:98:13:69:34:82: 88:fb:84:36:b5:08:26:6f:85:40:59:7a:69:a6:94: 49:75:c7:e7:65:14:b4:44:9a:bf:f1:17:ff:90:70: a6:b8:09:86:72:22:b5:31:54:8f:28:b6:4d:ce:01: 64:b5:d0:0c:fe:5d:55:38:c4:c8:93:1c:20:66:97: 50:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0A:AA:42:32:39:6E:0B:06:1D:EA:B2:26:C6:4C:02:D9:04:98:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d0ad8b12-f500-35ad-bbab-c68990fd814c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.70.0-125.253.79.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:20:90:d7:b1:d0:c5:62:c8:7b:5d:86:b9:80:af:b0:67:b8: f5:e0:4d:ea:f1:4a:d2:c2:eb:3e:a2:6f:94:b8:63:7d:ac:df: af:34:3d:e7:27:89:9f:5f:79:a2:28:0d:49:1e:b1:b6:a6:20: d7:07:7e:5f:a1:4f:d2:ed:34:fc:98:8b:21:db:f9:07:c0:cd: d4:4b:fd:69:b3:bd:74:87:bc:fb:98:8b:57:65:70:8c:ab:fc: ab:a7:00:9b:c3:47:65:b5:8b:76:60:16:60:06:01:2d:90:0f: 06:ef:42:3c:b1:75:0e:9f:eb:fa:39:44:e5:4c:1e:2b:26:48: 8c:6b:0e:7a:65:b3:aa:b4:d4:04:ef:55:1b:b4:d6:d1:e2:40: 62:91:f3:ff:bb:40:15:07:71:65:4c:c2:1f:4a:91:1f:25:a0: bc:29:e0:61:1b:ca:60:78:52:21:eb:f9:d7:f8:24:58:8d:b3: 51:fe:bd:f8:8f:b6:87:15:37:6b:5b:61:66:0f:c2:99:91:f1: 25:2e:e2:e9:0a:74:eb:eb:e3:c2:b8:04:60:be:97:68:3f:c7: 5a:ce:16:b9:99:fe:c2:b5:75:d5:bd:51:f0:24:b7:8a:49:75: 2b:98:a9:64:74:81:2d:5c:6d:6a:78:a4:f4:1a:7b:32:e6:23: 72:f6:ad:23 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEnP/4Ud5tGDz/cK2CgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDVhNTgyNzYtYzM5My00MDY1LTlkNWYtZmQyOTM1YjFjZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+wHZsjD8HcTEmzAhcAx2IHJOHYKkEmkQVs4h 3lTun6n/1OzW53yvR3RZZ5I5xcrQWn61WJJ/8UxpD/qCuevwQLiy/Nt2osW/eMS3 IelyT+cPfOpuGN35X5vrii4cAKYBqv8WyE0W6ktUF/pA9pGg19xWvBcWgo82N6E0 mhX7lsge2ahLe0mRhygfyyZ0i3lGpRw7NSh0las/9L77yPWzs/3PAOg8GOdZ0v/1 dOgJJVF8Wmwr/EhFWtnDSa/amBNpNIKI+4Q2tQgmb4VAWXppppRJdcfnZRS0RJq/ 8Rf/kHCmuAmGciK1MVSPKLZNzgFktdAM/l1VOMTIkxwgZpdQpQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFO8KqkIyOW4LBh3qsibGTALZBJhtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvZDBhZDhiMTItZjUwMC0z NWFkLWJiYWItYzY4OTkwZmQ4MTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAF9/UYD BAR9/UAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAgCCQ17HQxWLIe12GuYCvsGe49eBN6vFK0sLrPqJvlLhj fazfrzQ95yeJn195oigNSR6xtqYg1wd+X6FP0u00/JiLIdv5B8DN1Ev9abO9dIe8 +5iLV2VwjKv8q6cAm8NHZbWLdmAWYAYBLZAPBu9CPLF1Dp/r+jlE5UweKyZIjGsO emWzqrTUBO9VG7TW0eJAYpHz/7tAFQdxZUzCH0qRHyWgvCngYRvKYHhSIev51/gk WI2zUf69+I+2hxU3a1thZg/CmZHxJS7i6Qp06+vjwrgEYL6XaD/HWs4WuZn+wrV1 1b1R8CS3ikl1K5ipZHSBLVxtanik9Bp7MuYjcvatIw== -----END CERTIFICATE-----Generated at Sun Jun 15 17:30:17 2025 by rpki-client