$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ada9fd0e-2552-3a0e-ba28-a12466d61d01.roa File: ada9fd0e-2552-3a0e-ba28-a12466d61d01.roa (raw, json) Hash identifier: 6j8iXZkG68AC3b03TNXmwktCJHgWIvmReniKFR6IREo= Subject key identifier: 82:DB:C7:0D:22:1A:11:51:7D:59:2B:CD:90:7B:FB:F4:84:2B:53:94 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F43285849244E759D2B8D634314C10800 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ada9fd0e-2552-3a0e-ba28-a12466d61d01.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 19437 IP address blocks: 125.253.87.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:75:9d:2b:8d:63:43:14:c1:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=35539782-bafd-4dfd-9847-124d9ca4a858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:67:4e:7d:29:c3:b4:43:34:b1:dd:9e:76:b7: e7:82:a1:57:a8:1c:0a:9b:88:b1:2d:5a:15:ca:47: 76:c9:eb:14:37:93:38:bf:e1:41:ce:5c:c8:e4:c7: b7:ec:fc:7f:2d:c7:24:ff:16:1d:64:d1:ba:5e:2c: bd:28:04:47:12:91:41:60:2f:4c:9c:b4:de:ae:7e: f5:62:16:46:d3:a7:08:97:df:d1:b8:08:f4:5e:20: a8:15:98:6e:a5:34:6f:e4:56:40:f4:23:ca:d8:8a: 12:33:3e:4b:d9:db:38:6f:ea:ea:b8:f6:f9:74:76: 39:81:2b:7d:ea:03:8e:fd:77:5b:3d:e8:b3:95:c9: c4:ea:b4:51:a2:55:f5:b0:eb:e0:53:41:9b:f7:d5: d2:fa:f0:ac:bf:a4:ab:74:6e:72:41:ff:71:d9:b1: 35:20:82:65:8f:59:47:b0:02:d7:29:a4:33:78:78: 37:1c:e7:83:c2:66:13:62:3b:2d:4b:0c:91:8e:72: 7d:94:75:a3:ba:31:a6:b9:c7:0d:14:9c:39:1f:ae: e9:bb:dc:57:43:f6:bf:20:0a:2d:d6:eb:63:f1:e8: 67:e0:85:0e:38:6f:57:74:76:cb:c9:ff:7c:89:c5: 83:29:bc:04:84:5d:7f:77:31:f8:eb:c2:38:49:9d: 87:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DB:C7:0D:22:1A:11:51:7D:59:2B:CD:90:7B:FB:F4:84:2B:53:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ada9fd0e-2552-3a0e-ba28-a12466d61d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:69:68:e4:b4:2c:32:57:92:02:6e:5b:d3:40:77:6c:11:f4: 75:fa:99:1c:0d:69:b4:56:ca:f1:6b:c9:99:fb:8d:21:3b:d3: 79:77:45:43:fc:5c:db:27:23:dc:e7:aa:87:b8:24:f4:b3:3a: ae:b9:8a:a8:d6:f6:f4:dc:d5:d7:13:ea:73:bd:27:b4:69:e0: c5:a1:47:63:c8:4a:0b:5d:76:eb:13:84:dc:24:e8:b1:9a:bf: d4:ba:b1:92:b0:53:13:dc:84:23:6c:4b:7a:4c:72:0d:51:71: db:4d:87:b7:77:b1:7c:17:57:30:a0:12:e6:21:d7:ea:20:9e: df:cc:fc:77:66:d4:f5:24:a5:0a:5a:ed:3b:16:33:35:a6:43: 31:68:28:16:0c:2d:6c:f7:ac:e5:30:94:9e:d1:8d:ca:98:2d: 93:1c:ae:de:6a:02:92:0b:05:44:ec:99:fb:65:29:10:30:54: d9:c7:05:66:af:0b:e2:8f:3d:56:48:65:f5:be:8f:db:c7:bc: f4:44:49:58:65:ce:c9:7b:77:c1:a6:bd:d3:ec:18:7a:da:49: f3:7e:ad:aa:80:8a:66:f4:19:b3:c1:43:1e:b5:53:df:59:a1: 74:19:93:64:d8:8b:73:de:f6:c5:ca:e9:e2:bb:8b:98:44:47: 67:b5:d9:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnWdK41jQxTBCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MzU1Mzk3ODItYmFmZC00ZGZkLTk4NDctMTI0ZDljYTRhODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWdOfSnDtEM0sd2edrfngqFXqBwKm4ixLVoV ykd2yesUN5M4v+FBzlzI5Me37Px/Lcck/xYdZNG6Xiy9KARHEpFBYC9MnLTern71 YhZG06cIl9/RuAj0XiCoFZhupTRv5FZA9CPK2IoSMz5L2ds4b+rquPb5dHY5gSt9 6gOO/XdbPeizlcnE6rRRolX1sOvgU0Gb99XS+vCsv6SrdG5yQf9x2bE1IIJlj1lH sALXKaQzeHg3HOeDwmYTYjstSwyRjnJ9lHWjujGmuccNFJw5H67pu9xXQ/a/IAot 1utj8ehn4IUOOG9XdHbLyf98icWDKbwEhF1/dzH468I4SZ2HEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILbxw0iGhFRfVkrzZB7+/SEK1OUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYWRhOWZkMGUtMjU1Mi0z YTBlLWJhMjgtYTEyNDY2ZDYxZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAff1XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRpaOS0LDJXkgJuW9NAd2wR9HX6mRwNabRWyvFryZn7jSE703l3RUP8 XNsnI9znqoe4JPSzOq65iqjW9vTc1dcT6nO9J7Rp4MWhR2PISgtddusThNwk6LGa v9S6sZKwUxPchCNsS3pMcg1RcdtNh7d3sXwXVzCgEuYh1+ognt/M/Hdm1PUkpQpa 7TsWMzWmQzFoKBYMLWz3rOUwlJ7RjcqYLZMcrt5qApILBUTsmftlKRAwVNnHBWav C+KPPVZIZfW+j9vHvPRESVhlzsl7d8GmvdPsGHraSfN+raqAimb0GbPBQx61U99Z oXQZk2TYi3Pe9sXK6eK7i5hER2e12a8= -----END CERTIFICATE-----Generated at Tue Apr 8 14:47:40 2025 by rpki-client