$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2455bf61-a2a2-39e5-bf04-82c479a5b223.roa File: 2455bf61-a2a2-39e5-bf04-82c479a5b223.roa (raw, json) Hash identifier: 7Mo7w5dXaUTjW6CXRmj1n9gFPQBr5iWrqkhxXjYAMYQ= Subject key identifier: B6:3F:19:F5:C0:79:68:22:5E:F9:80:72:41:7D:2B:7E:5D:91:28:CF Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F43285848F0522E76FADD0D62B3737EC0 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2455bf61-a2a2-39e5-bf04-82c479a5b223.roa Signing time: Wed 19 Feb 2025 22:06:29 +0000 ROA not before: Wed 19 Feb 2025 22:06:29 +0000 ROA not after: Tue 20 May 2025 21:06:29 +0000 asID: 20454 IP address blocks: 125.253.64.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:52:2e:76:fa:dd:0d:62:b3:73:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Feb 19 22:06:29 2025 GMT Not After : May 20 21:06:29 2025 GMT Subject: CN=27b81efd-203c-446f-b1ba-0b343558ec63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:af:4c:a2:b7:1b:53:6f:f2:e0:71:7e:16:8b: 43:84:b8:73:87:a1:b3:ad:40:91:77:50:e5:ca:fc: 16:93:8b:a4:95:03:13:00:ff:ac:a9:d3:76:3a:ac: f1:b0:13:4f:a0:0b:da:3a:51:74:73:0d:1c:dc:c2: c8:67:fc:67:ec:0a:26:82:e1:80:69:47:8d:9d:3a: 74:72:fc:e6:24:39:f6:6f:7d:77:08:fd:8c:47:ea: 8d:da:fb:7d:7d:f0:96:10:31:82:9c:8d:79:50:f8: d7:fb:b3:ee:21:58:67:be:db:86:4d:6e:e3:ad:04: 0c:1a:6f:67:bf:f6:17:8e:95:b1:5f:a0:0f:6f:a0: 95:2e:5d:33:62:87:75:86:5c:b6:a8:54:24:c2:7f: 94:6f:37:55:90:82:58:49:d9:88:4b:ae:29:24:88: 23:0d:40:db:20:7e:21:ae:e2:dd:77:e8:14:b7:0e: 66:1b:f3:18:92:3e:7a:cf:b0:b2:20:5d:33:83:b6: 94:37:09:45:82:ef:54:dc:2d:ac:0b:9b:87:1a:8f: 17:16:de:e8:ee:76:e1:69:7f:f2:0a:9c:8f:6c:65: 33:ef:41:35:ed:55:22:f1:07:aa:f0:d0:93:f1:41: b1:07:0e:28:d7:08:56:3b:08:44:ac:53:9a:3b:06: cd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3F:19:F5:C0:79:68:22:5E:F9:80:72:41:7D:2B:7E:5D:91:28:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2455bf61-a2a2-39e5-bf04-82c479a5b223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:15:cd:0e:11:d5:5b:e9:22:81:8a:4d:15:0c:19:4f:78:5d: d8:e9:9d:e3:4c:47:1a:79:f7:49:45:6a:1c:bc:60:8f:81:e9: f9:96:67:cf:28:6e:dc:8a:77:8c:53:4f:da:6d:9e:e3:4b:4e: 19:99:7d:20:c6:31:6a:4e:05:47:95:56:97:3c:75:50:11:f6: ea:0c:e6:d2:0f:e3:28:ac:6d:3b:c4:58:47:c9:a6:38:b7:0a: be:14:46:1e:8f:89:98:6e:fc:a8:b3:4c:a5:8d:4e:9d:67:46: 7e:83:4b:68:b7:bc:5d:b9:d3:d8:b1:8b:94:e8:3f:9a:f3:bf: 3f:e8:78:2c:1c:b7:04:2d:1f:51:af:44:18:48:d3:5f:c4:5c: 84:89:6c:7e:04:c8:4e:8d:bf:fd:26:30:2d:97:ef:b8:5b:6a: af:c5:a5:39:81:a3:db:86:89:42:29:14:5a:60:fa:f0:de:e8: 35:5a:eb:25:3a:26:e8:04:e2:8a:33:ed:ae:2e:6f:d3:f7:9f: dd:b5:a8:21:63:d7:ae:e1:5f:06:98:68:7e:22:83:fa:b6:bb: 48:81:71:1e:98:45:cb:7a:0b:84:97:e1:36:85:4b:d5:dc:55: cd:c3:ae:03:3b:f8:9b:21:7a:ce:71:a8:9f:58:c7:51:06:6f: e4:13:11:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjwUi52+t0NYrNzfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDIxOTIyMDYyOVoXDTI1MDUyMDIxMDYyOVowLzEtMCsGA1UEAxMk MjdiODFlZmQtMjAzYy00NDZmLWIxYmEtMGIzNDM1NThlYzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4K9MorcbU2/y4HF+FotDhLhzh6GzrUCRd1Dl yvwWk4uklQMTAP+sqdN2OqzxsBNPoAvaOlF0cw0c3MLIZ/xn7AomguGAaUeNnTp0 cvzmJDn2b313CP2MR+qN2vt9ffCWEDGCnI15UPjX+7PuIVhnvtuGTW7jrQQMGm9n v/YXjpWxX6APb6CVLl0zYod1hly2qFQkwn+UbzdVkIJYSdmIS64pJIgjDUDbIH4h ruLdd+gUtw5mG/MYkj56z7CyIF0zg7aUNwlFgu9U3C2sC5uHGo8XFt7o7nbhaX/y CpyPbGUz70E17VUi8Qeq8NCT8UGxBw4o1whWOwhErFOaOwbNOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLY/GfXAeWgiXvmAckF9K35dkSjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvMjQ1NWJmNjEtYTJhMi0z OWU1LWJmMDQtODJjNDc5YTViMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCff1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUVzQ4R1VvpIoGKTRUMGU94XdjpneNMRxp590lFahy8YI+B6fmWZ88o btyKd4xTT9ptnuNLThmZfSDGMWpOBUeVVpc8dVAR9uoM5tIP4yisbTvEWEfJpji3 Cr4URh6PiZhu/KizTKWNTp1nRn6DS2i3vF2509ixi5ToP5rzvz/oeCwctwQtH1Gv RBhI01/EXISJbH4EyE6Nv/0mMC2X77hbaq/FpTmBo9uGiUIpFFpg+vDe6DVa6yU6 JugE4ooz7a4ub9P3n921qCFj167hXwaYaH4ig/q2u0iBcR6YRct6C4SX4TaFS9Xc Vc3DrgM7+Jshes5xqJ9Yx1EGb+QTEWg= -----END CERTIFICATE-----Generated at Wed May 7 19:26:50 2025 by rpki-client