$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa File: 5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa (raw, json) Hash identifier: es/dDHnsE0r4pZFlfGEYQcrNE/gvKrTVb4/jsW9J03o= Subject key identifier: CD:7E:C4:81:B5:03:43:08:64:F6:F6:4D:52:72:23:39:E3:B7:5D:78 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F43285848E7012208D4F9F75BD6331FC0 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa Signing time: Sun 16 Feb 2025 14:00:52 +0000 ROA not before: Sun 16 Feb 2025 14:00:52 +0000 ROA not after: Sat 17 May 2025 13:00:52 +0000 asID: 0 IP address blocks: 125.253.80.0/21 maxlen: 21 125.253.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e7:01:22:08:d4:f9:f7:5b:d6:33:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Feb 16 14:00:52 2025 GMT Not After : May 17 13:00:52 2025 GMT Subject: CN=c6f910f3-bafc-4f60-bd5f-6c13f6b68849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:77:81:7a:49:94:6c:72:a2:22:a9:4c:60:53: 53:e7:eb:6e:b1:4b:88:71:41:a1:64:5b:ac:9b:f8: 50:e2:ba:94:51:7a:fd:b4:2f:08:a4:0a:49:07:f5: 2a:42:09:78:3e:3d:d7:94:3d:84:83:32:6a:dd:0a: 43:84:b9:21:39:b6:bb:67:e5:4d:b0:f1:a5:7b:54: c3:81:fc:53:68:8b:6a:e9:d7:62:7e:ec:b0:ef:5a: f6:cc:e4:e7:c1:d7:b2:11:5e:be:22:3e:41:98:fa: a8:8b:67:9f:b8:76:c9:41:e0:82:4d:77:bd:a3:0d: ab:58:07:6a:b2:fc:17:17:eb:4d:c4:98:fe:87:d8: 60:04:c3:59:e3:a7:d3:13:24:04:15:d4:33:6a:c7: 41:4f:a4:d4:f5:fb:81:4d:aa:86:25:bb:40:6d:ac: c9:d2:f2:36:f7:91:22:d4:83:79:8f:b6:f2:1f:ce: ab:3f:6a:b3:44:59:f0:17:64:62:16:d7:1e:58:77: 7d:82:2a:f0:84:4e:66:fc:26:a8:57:cc:19:33:3b: a9:53:67:47:ad:c5:94:c6:e3:f5:95:26:43:55:ae: 0b:db:0e:ea:85:8c:ee:65:63:fe:9c:54:fe:94:32: d6:11:55:bb:16:3f:87:28:5a:3e:32:cb:7e:93:42: 54:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7E:C4:81:B5:03:43:08:64:F6:F6:4D:52:72:23:39:E3:B7:5D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.80.0-125.253.91.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:fe:ad:91:5d:06:4a:ab:ce:2a:fa:ea:b6:2c:43:f7:f3:95: 4b:a4:13:a6:6d:ae:ad:a5:58:dc:11:f3:9c:3a:bb:60:c2:85: 41:66:30:f8:d7:d4:15:4b:75:78:f4:5e:a5:07:42:f3:ed:f8: ec:40:29:1a:19:bb:2e:72:ff:2f:92:fd:77:27:4e:75:71:7e: e4:61:37:07:a3:f5:f2:c2:17:03:74:0d:8b:9a:34:bf:38:85: d9:d8:d4:4d:f4:61:54:bc:70:92:57:28:2a:53:7e:5e:1e:fa: 36:57:d2:0f:5f:e3:6c:6b:85:4c:a9:0f:fb:75:73:75:17:1b: 88:75:94:e5:64:77:44:af:e5:d0:79:e1:bb:7f:7a:37:27:9e: f6:69:bf:f7:22:45:5e:b8:c5:f1:be:07:ad:56:a0:5c:e6:cb: fb:cb:5c:46:1e:19:bc:34:32:06:b6:57:ac:99:44:39:ba:9d: b4:c1:8b:52:ab:0c:12:6a:6e:95:d5:83:90:38:4c:54:bc:ef: 80:a4:f8:34:a9:bb:62:30:db:fe:3b:a5:6f:31:8c:91:fb:9f: 3f:d8:66:4f:b2:32:04:9c:d2:d3:a8:6f:27:05:3d:01:89:28: 75:91:33:17:ff:4c:2a:54:74:c8:f5:92:53:99:cc:a6:98:12: fb:e2:52:9a -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEjnASII1Pn3W9YzH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDIxNjE0MDA1MloXDTI1MDUxNzEzMDA1MlowLzEtMCsGA1UEAxMk YzZmOTEwZjMtYmFmYy00ZjYwLWJkNWYtNmMxM2Y2YjY4ODQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXeBekmUbHKiIqlMYFNT5+tusUuIcUGhZFus m/hQ4rqUUXr9tC8IpApJB/UqQgl4Pj3XlD2EgzJq3QpDhLkhOba7Z+VNsPGle1TD gfxTaItq6ddifuyw71r2zOTnwdeyEV6+Ij5BmPqoi2efuHbJQeCCTXe9ow2rWAdq svwXF+tNxJj+h9hgBMNZ46fTEyQEFdQzasdBT6TU9fuBTaqGJbtAbazJ0vI295Ei 1IN5j7byH86rP2qzRFnwF2RiFtceWHd9girwhE5m/CaoV8wZMzupU2dHrcWUxuP1 lSZDVa4L2w7qhYzuZWP+nFT+lDLWEVW7Fj+HKFo+Mst+k0JUFQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFM1+xIG1A0MIZPb2TVJyIznjt114MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvNWJiNTJiMDctNGRhNC0z ZjQ0LTkzMGUtNDNhZjc3YzNiOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAR9/VAD BAJ9/VgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAjP6tkV0GSqvOKvrqtixD9/OVS6QTpm2uraVY3BHznDq7 YMKFQWYw+NfUFUt1ePRepQdC8+347EApGhm7LnL/L5L9dydOdXF+5GE3B6P18sIX A3QNi5o0vziF2djUTfRhVLxwklcoKlN+Xh76NlfSD1/jbGuFTKkP+3VzdRcbiHWU 5WR3RK/l0Hnhu396Nyee9mm/9yJFXrjF8b4HrVagXObL+8tcRh4ZvDQyBrZXrJlE ObqdtMGLUqsMEmpuldWDkDhMVLzvgKT4NKm7YjDb/julbzGMkfufP9hmT7IyBJzS 06hvJwU9AYkodZEzF/9MKlR0yPWSU5nMppgS++JSmg== -----END CERTIFICATE-----Generated at Tue Apr 8 12:24:30 2025 by rpki-client