$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d0ad8b12-f500-35ad-bbab-c68990fd814c.roa File: d0ad8b12-f500-35ad-bbab-c68990fd814c.roa (raw, json) Hash identifier: 3n+B4w+0pPamJ/neMg/qCNsdM4sSj4OzVKXyuUfMcy8= Subject key identifier: 0D:49:6D:EA:67:A5:70:01:61:17:5C:03:39:20:68:37:F3:F8:60:F2 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F43285848F05305087BADEC8AF2623B00 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d0ad8b12-f500-35ad-bbab-c68990fd814c.roa Signing time: Wed 19 Feb 2025 22:08:10 +0000 ROA not before: Wed 19 Feb 2025 22:08:10 +0000 ROA not after: Tue 20 May 2025 21:08:10 +0000 asID: 20454 IP address blocks: 125.253.70.0/23 maxlen: 32 125.253.72.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:53:05:08:7b:ad:ec:8a:f2:62:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Feb 19 22:08:10 2025 GMT Not After : May 20 21:08:10 2025 GMT Subject: CN=8a604a05-db5a-499c-9051-833f19945fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0f:c8:38:7e:1b:65:ef:aa:46:51:63:50:5c: 74:12:df:1e:20:27:27:ee:d4:82:ab:e8:30:d2:f3: 5b:5f:64:e1:53:01:eb:e8:d7:e5:bd:1e:2c:40:63: a3:3b:60:11:f3:cd:aa:11:2f:68:c2:ea:71:2d:00: 72:04:3c:9b:a0:53:82:53:80:5a:8a:05:92:56:44: 35:8b:e8:ea:2b:eb:f0:72:4a:55:8f:54:27:31:5c: 21:ba:9e:32:d2:5d:ed:fb:db:61:54:ff:3d:bb:76: ed:11:d2:01:6e:fb:46:e3:c2:c5:89:78:34:ea:9d: 5d:09:b5:14:4d:a0:7b:db:02:cd:f5:b7:e4:09:e1: 43:7e:01:1d:98:3c:37:17:66:9a:3b:a8:b2:2c:8b: e2:1d:d4:e7:6b:48:55:31:33:0e:56:95:cf:75:c7: 1e:db:a7:4b:f1:56:b0:7e:55:e5:a0:a3:f6:8b:20: 4a:d0:bb:47:25:92:a2:c5:58:c4:8d:46:2c:36:0f: 1a:5d:8c:35:fe:90:e7:aa:62:dc:d9:ff:f9:5e:25: 73:8d:2b:e1:b2:89:f0:f3:8f:af:25:3f:c1:03:59: 64:c2:51:02:26:bd:fd:fc:4e:33:79:54:a2:65:c8: 9b:2c:f7:15:70:ec:2c:ef:b3:b9:db:51:3a:4b:b4: ce:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:49:6D:EA:67:A5:70:01:61:17:5C:03:39:20:68:37:F3:F8:60:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d0ad8b12-f500-35ad-bbab-c68990fd814c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.70.0-125.253.79.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a3:70:2a:14:c0:10:69:3e:8f:76:11:54:30:04:7b:86:f9: 24:69:de:15:65:a9:63:b8:ca:22:4a:a4:86:38:3a:96:c9:b2: 78:e9:9f:50:d9:09:f1:92:16:30:51:cf:f9:d0:c3:7f:16:cb: d2:57:b8:fd:fb:a4:b9:97:48:e7:af:e1:2f:fb:7d:bb:fd:0b: 16:ab:ad:c9:71:46:e6:a9:70:61:85:e1:b3:3d:46:28:79:85: af:5d:69:9d:b9:e9:1c:44:eb:11:73:fb:9c:a3:81:49:73:d5: 1d:03:2b:ff:26:f3:63:a4:7f:d6:30:81:28:33:d4:7a:8f:d8: 3d:f6:67:1b:1b:84:8b:3d:1c:ec:ab:59:c1:0f:99:0a:ea:9d: fa:f5:7f:10:4e:a6:38:15:e7:2d:47:cf:2f:8a:42:3d:72:0d: 2e:20:2d:8c:21:7a:05:6d:66:3d:e7:df:35:0b:22:14:0e:13: 5e:83:70:a5:63:5c:92:fd:94:22:42:68:02:ce:b7:96:72:b2: 01:e4:34:ec:2e:6d:8a:ee:d9:1d:18:a6:ce:39:e8:89:ce:04: 63:8a:64:ae:c0:09:0b:6b:cd:d4:61:39:a1:62:07:0b:de:42: 31:2e:bd:af:75:f8:f2:b7:58:56:a9:fd:f8:37:4c:05:13:18: f3:1e:5c:b0 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEjwUwUIe63sivJiOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDIxOTIyMDgxMFoXDTI1MDUyMDIxMDgxMFowLzEtMCsGA1UEAxMk OGE2MDRhMDUtZGI1YS00OTljLTkwNTEtODMzZjE5OTQ1ZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A/IOH4bZe+qRlFjUFx0Et8eICcn7tSCq+gw 0vNbX2ThUwHr6NflvR4sQGOjO2AR882qES9owupxLQByBDyboFOCU4BaigWSVkQ1 i+jqK+vwckpVj1QnMVwhup4y0l3t+9thVP89u3btEdIBbvtG48LFiXg06p1dCbUU TaB72wLN9bfkCeFDfgEdmDw3F2aaO6iyLIviHdTna0hVMTMOVpXPdcce26dL8Vaw flXloKP2iyBK0LtHJZKixVjEjUYsNg8aXYw1/pDnqmLc2f/5XiVzjSvhsonw84+v JT/BA1lkwlECJr39/E4zeVSiZcibLPcVcOws77O521E6S7TO3wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFA1JbepnpXABYRdcAzkgaDfz+GDyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvZDBhZDhiMTItZjUwMC0z NWFkLWJiYWItYzY4OTkwZmQ4MTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAF9/UYD BAR9/UAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAgaNwKhTAEGk+j3YRVDAEe4b5JGneFWWpY7jKIkqkhjg6 lsmyeOmfUNkJ8ZIWMFHP+dDDfxbL0le4/fukuZdI56/hL/t9u/0LFqutyXFG5qlw YYXhsz1GKHmFr11pnbnpHETrEXP7nKOBSXPVHQMr/ybzY6R/1jCBKDPUeo/YPfZn GxuEiz0c7KtZwQ+ZCuqd+vV/EE6mOBXnLUfPL4pCPXINLiAtjCF6BW1mPeffNQsi FA4TXoNwpWNckv2UIkJoAs63lnKyAeQ07C5tiu7ZHRimzjnoic4EY4pkrsAJC2vN 1GE5oWIHC95CMS69r3X48rdYVqn9+DdMBRMY8x5csA== -----END CERTIFICATE-----Generated at Sun Apr 27 12:59:06 2025 by rpki-client