$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa File: ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa (raw, json) Hash identifier: duXCLV4VpsaQkAm2LksMpKF6C2405WZrtpVJCHk6Edg= Subject key identifier: DB:5B:47:AF:DD:DB:CC:73:B0:91:AD:C3:C5:68:12:D1:17:AC:C6:5E Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F43285849CFFF8508C838FD98FFE41B00 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa Signing time: Sun 11 May 2025 01:00:47 +0000 ROA not before: Sun 11 May 2025 01:00:47 +0000 ROA not after: Sat 09 Aug 2025 01:00:47 +0000 asID: 19437 IP address blocks: 125.253.68.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:ff:85:08:c8:38:fd:98:ff:e4:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: May 11 01:00:47 2025 GMT Not After : Aug 9 01:00:47 2025 GMT Subject: CN=507c5ed3-5a07-4035-9c78-c07b1e3c147f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1d:73:6d:0d:eb:97:82:09:af:14:0b:62:ce: 7e:68:3a:1e:2c:ba:19:3e:b1:a4:fe:43:d2:d3:21: 29:6e:b3:5e:b2:b9:d8:a0:cd:12:be:55:6c:a4:d9: ab:38:2f:36:34:6f:a4:7a:e9:e5:5f:bc:12:4f:08: 4c:e7:3d:cb:d0:00:b4:c1:56:1d:40:be:a4:ee:e3: c5:f4:85:09:fc:a2:65:7e:eb:fe:0c:dc:75:14:e3: 2d:f9:08:3b:dc:3f:d5:3b:74:e8:a6:5d:92:64:89: 48:35:83:90:c8:98:cc:28:37:c7:1e:21:ff:b0:08: 48:4e:5a:35:07:38:c6:df:15:bf:ed:3f:db:43:f0: 7d:db:e1:42:1d:17:f8:6a:59:73:46:50:89:b3:16: b9:5b:8c:de:99:f6:07:b1:19:d7:3b:20:51:e4:2e: ff:9b:f6:e9:0a:fa:e3:96:7e:cc:8b:9e:95:db:6a: 15:97:12:95:83:a2:dd:20:8d:fd:f4:77:42:a9:0a: ed:62:84:a6:3e:22:ca:5b:22:a0:2b:4d:c7:b4:38: 1c:85:f0:48:58:e2:66:25:b9:79:a0:5a:23:8f:26: fe:10:af:55:b1:e4:de:90:27:fd:e5:1e:72:69:c2: a4:40:8d:e7:d8:16:c8:25:b8:20:62:fa:0e:da:fb: d5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5B:47:AF:DD:DB:CC:73:B0:91:AD:C3:C5:68:12:D1:17:AC:C6:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:76:28:ff:fb:03:58:a8:34:8e:82:2b:1c:f6:e7:6a:c9:d6: a7:2c:16:70:b6:9a:9a:ad:fd:e8:97:27:4c:59:2d:49:c9:43: 7a:c8:e9:6f:d7:99:2a:bf:ad:46:fb:ae:5c:1a:4a:a0:d1:a1: 8d:ab:42:90:2f:b2:5f:7c:6c:b6:e2:ec:c9:5b:66:d7:82:5d: d1:9a:17:66:9e:54:9b:16:08:93:94:f6:61:ed:06:4c:8f:c7: 89:c5:5b:48:d4:f0:ea:7b:64:84:a1:a5:02:40:2d:d1:54:e2: ef:af:1e:97:45:26:d3:36:d6:55:1c:86:ef:52:38:e2:f0:9e: d3:1e:6e:ec:2f:a7:a7:63:87:a9:48:5e:4e:ed:95:f1:22:54: 5b:4a:6a:12:68:ca:35:64:ad:4e:75:57:07:f2:2a:8b:37:94: 57:c4:a7:cd:4c:55:bc:3e:19:e6:94:8c:c5:1f:79:a1:0e:3a: 4f:93:a4:a0:1e:9b:ad:37:ea:73:fc:bd:9e:5f:13:4d:08:86: 7f:df:f4:52:9b:bf:3c:36:b1:7a:42:74:e4:c5:4b:3b:cb:85: ae:54:71:e9:53:93:30:40:fe:ce:f9:71:b2:56:c5:2f:35:ca: f9:1b:e4:2b:41:67:1b:68:83:35:86:fc:6f:7c:f1:d1:5d:43: 84:00:ae:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnP/4UIyDj9mP/kGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk NTA3YzVlZDMtNWEwNy00MDM1LTljNzgtYzA3YjFlM2MxNDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x1zbQ3rl4IJrxQLYs5+aDoeLLoZPrGk/kPS 0yEpbrNesrnYoM0SvlVspNmrOC82NG+keunlX7wSTwhM5z3L0AC0wVYdQL6k7uPF 9IUJ/KJlfuv+DNx1FOMt+Qg73D/VO3Topl2SZIlINYOQyJjMKDfHHiH/sAhITlo1 BzjG3xW/7T/bQ/B92+FCHRf4allzRlCJsxa5W4zemfYHsRnXOyBR5C7/m/bpCvrj ln7Mi56V22oVlxKVg6LdII399HdCqQrtYoSmPiLKWyKgK03HtDgchfBIWOJmJbl5 oFojjyb+EK9VseTekCf95R5yacKkQI3n2BbIJbggYvoO2vvVzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtbR6/d28xzsJGtw8VoEtEXrMZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYWMxYTViYmUtMmI0ZC0z MDlmLWE2ZGUtYjkwOWY2ZWZhOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBff1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABt2KP/7A1ioNI6CKxz252rJ1qcsFnC2mpqt/eiXJ0xZLUnJQ3rI6W/X mSq/rUb7rlwaSqDRoY2rQpAvsl98bLbi7MlbZteCXdGaF2aeVJsWCJOU9mHtBkyP x4nFW0jU8Op7ZIShpQJALdFU4u+vHpdFJtM21lUchu9SOOLwntMebuwvp6djh6lI Xk7tlfEiVFtKahJoyjVkrU51VwfyKos3lFfEp81MVbw+GeaUjMUfeaEOOk+TpKAe m6036nP8vZ5fE00Ihn/f9FKbvzw2sXpCdOTFSzvLha5UcelTkzBA/s75cbJWxS81 yvkb5CtBZxtogzWG/G988dFdQ4QArpQ= -----END CERTIFICATE-----Generated at Sun Jun 29 08:31:08 2025 by rpki-client