$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/da2f45ae-85e1-393c-a63b-9abdc2736515.roa File: da2f45ae-85e1-393c-a63b-9abdc2736515.roa (raw, json) Hash identifier: eAGmFuUahsUeatZacjYer1iEk5V8EJZrSQ7DoibI+sw= Subject key identifier: AC:53:D9:9A:F5:5E:57:7D:88:CF:49:D4:E7:D9:EF:AD:C2:A6:44:6D Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F43285849D85F99C5B435F539A40B3CC8 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/da2f45ae-85e1-393c-a63b-9abdc2736515.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 19437 IP address blocks: 125.253.89.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:99:c5:b4:35:f5:39:a4:0b:3c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=3dd8da80-4cd3-40b3-99c9-2f47900f24f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9a:41:85:e6:c5:8b:9a:6d:b9:8b:4b:d5:de: 22:6f:a9:d7:a7:e2:33:a7:f7:75:a9:ff:ab:99:0b: 20:36:9e:de:6b:05:54:f9:d9:ea:a5:8a:c0:16:08: 86:5c:f3:08:a7:90:26:5a:be:43:0c:02:28:f3:65: 28:d8:8b:d9:fd:07:14:99:85:89:fe:9a:74:5e:db: 59:a3:a5:14:90:a3:7e:7e:18:5e:f3:43:ef:47:bd: 75:01:1f:87:c0:77:82:82:ec:bf:60:0d:c9:25:aa: 78:08:c9:07:ea:a8:18:4f:7d:9f:89:7e:89:53:bb: 76:cb:4e:9f:42:39:60:57:04:3e:46:45:e1:00:f5: 67:a3:fb:db:7e:e7:16:83:4c:8b:dc:71:b1:6b:ce: 20:f4:b4:6a:b0:af:e2:d0:97:b8:11:a5:1d:26:c6: ce:c2:9c:20:2d:f2:4e:9d:33:94:2b:5a:be:17:e1: b7:ba:78:2d:69:d5:c0:9d:73:77:df:4e:3f:cd:83: 1c:4a:4d:78:90:89:b4:48:01:e9:26:ae:85:75:40: 1e:62:c9:22:1b:bc:a6:38:68:17:45:40:a0:b1:04: d9:a3:c4:94:3e:09:a5:b6:f9:74:77:8f:86:84:df: aa:cf:e9:2a:12:0f:c3:3f:88:fc:b1:29:da:c0:1c: c2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:53:D9:9A:F5:5E:57:7D:88:CF:49:D4:E7:D9:EF:AD:C2:A6:44:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/da2f45ae-85e1-393c-a63b-9abdc2736515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:8f:db:4d:49:33:fd:3b:5a:51:0e:e3:14:54:1b:a3:d4:02: 94:c5:95:55:d2:76:67:60:e4:ef:86:02:e9:0f:67:69:f2:92: dd:ec:bb:57:22:47:ca:d5:f1:5e:c6:06:8b:52:3f:f3:86:8c: 05:e1:52:43:90:e2:cd:03:96:58:14:e5:82:c4:57:58:c0:44: 9b:bb:98:c0:05:9f:92:ef:d6:37:5e:58:e2:40:c6:c4:d1:f8: 86:c4:c5:05:0e:6f:ac:c0:2b:4a:bf:a3:cd:4d:34:38:48:c5: cd:13:b9:41:81:4f:00:86:85:cc:01:c6:77:29:ff:87:85:6d: a4:1b:0f:39:20:22:42:09:1d:41:1d:d5:a7:f5:dd:8e:9b:eb: 98:1a:0f:0c:d1:4b:01:e7:87:77:52:7a:f6:10:d2:44:63:c8: 73:77:9e:97:7f:7d:f1:13:c1:3c:1d:8b:18:16:3c:45:47:e5: b3:f2:25:9e:8f:73:53:d9:bc:db:12:c9:0b:13:fe:2b:f2:ec: 3e:83:2e:37:4d:58:48:2a:c5:5f:03:75:e2:3e:b4:1a:6a:72: ea:19:bb:56:8d:26:aa:eb:1c:e1:2f:bb:a2:1d:39:b2:a9:0c: fe:a4:a3:49:d6:0a:4a:f7:74:fc:cf:36:2f:f9:47:56:30:db: 7c:86:6b:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5nFtDX1OaQLPMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk M2RkOGRhODAtNGNkMy00MGIzLTk5YzktMmY0NzkwMGYyNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZpBhebFi5ptuYtL1d4ib6nXp+Izp/d1qf+r mQsgNp7eawVU+dnqpYrAFgiGXPMIp5AmWr5DDAIo82Uo2IvZ/QcUmYWJ/pp0XttZ o6UUkKN+fhhe80PvR711AR+HwHeCguy/YA3JJap4CMkH6qgYT32fiX6JU7t2y06f QjlgVwQ+RkXhAPVno/vbfucWg0yL3HGxa84g9LRqsK/i0Je4EaUdJsbOwpwgLfJO nTOUK1q+F+G3ungtadXAnXN3304/zYMcSk14kIm0SAHpJq6FdUAeYskiG7ymOGgX RUCgsQTZo8SUPgmltvl0d4+GhN+qz+kqEg/DP4j8sSnawBzCwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxT2Zr1Xld9iM9J1OfZ763CpkRtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvZGEyZjQ1YWUtODVlMS0z OTNjLWE2M2ItOWFiZGMyNzM2NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAff1ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKP201JM/07WlEO4xRUG6PUApTFlVXSdmdg5O+GAukPZ2nykt3su1ci R8rV8V7GBotSP/OGjAXhUkOQ4s0DllgU5YLEV1jARJu7mMAFn5Lv1jdeWOJAxsTR +IbExQUOb6zAK0q/o81NNDhIxc0TuUGBTwCGhcwBxncp/4eFbaQbDzkgIkIJHUEd 1af13Y6b65gaDwzRSwHnh3dSevYQ0kRjyHN3npd/ffETwTwdixgWPEVH5bPyJZ6P c1PZvNsSyQsT/ivy7D6DLjdNWEgqxV8DdeI+tBpqcuoZu1aNJqrrHOEvu6IdObKp DP6ko0nWCkr3dPzPNi/5R1Yw23yGa/s= -----END CERTIFICATE-----Generated at Sun Jun 15 12:04:55 2025 by rpki-client