$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/da2f45ae-85e1-393c-a63b-9abdc2736515.roa File: da2f45ae-85e1-393c-a63b-9abdc2736515.roa (raw, json) Hash identifier: k7X4wxIppYlu+8Fu8acV92gjXY6h0Ym3gbzOdBiJk48= Subject key identifier: BD:C7:FC:A9:E4:B0:86:1A:23:57:9A:02:AB:B2:61:7C:29:F8:F8:1F Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F43285848F926A88596FCC7C15DE5E680 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/da2f45ae-85e1-393c-a63b-9abdc2736515.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 19437 IP address blocks: 125.253.89.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a8:85:96:fc:c7:c1:5d:e5:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=239c012c-5535-4f7e-962e-86ce8a715743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8f:c2:e6:a7:71:dd:2f:80:79:63:60:07:d3: 05:bd:c2:31:ac:ed:c6:b0:59:88:38:e5:2b:15:e5: d0:ac:21:ba:6c:2b:18:37:a4:f1:fe:c7:ce:57:b1: 4d:6c:fc:75:54:8b:a1:df:b2:5c:d0:64:12:00:6f: c1:96:2d:c2:72:74:49:94:d2:dc:e0:f7:0c:82:c4: a6:79:c1:22:a2:26:99:98:20:b6:8a:b2:6d:dc:99: 90:6f:98:03:c9:fc:c2:62:7d:65:ec:a7:78:71:f5: 4b:0f:e7:85:a7:39:a4:18:48:f6:3f:bf:37:99:ed: 30:2b:37:b7:69:21:df:a3:f6:53:1e:73:06:45:d8: d9:6e:2c:29:9f:50:58:58:40:4f:25:02:75:44:fb: 0a:5b:05:cd:b3:1b:23:51:79:dc:3f:46:ad:1b:8b: cf:ce:c2:c9:bf:c4:c0:ac:ef:95:f4:a9:bb:09:18: d5:c7:d4:89:0c:fd:5f:b3:4d:ae:16:f0:69:9d:05: 3b:3b:cc:e7:a7:f4:40:3d:78:33:7d:27:ea:0b:19: fb:d1:1b:15:7b:73:9c:86:eb:5e:48:7c:c6:73:23: 2b:80:c0:6c:f7:ae:1c:1e:5c:8c:b8:1b:1d:7c:51: a3:3d:cb:91:14:d1:d4:19:a6:aa:c2:72:f4:c3:a6: 82:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C7:FC:A9:E4:B0:86:1A:23:57:9A:02:AB:B2:61:7C:29:F8:F8:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/da2f45ae-85e1-393c-a63b-9abdc2736515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:47:fc:dc:96:86:84:8f:08:aa:9e:cd:1d:4b:d3:6e:87:73: 1a:7f:e7:37:ff:02:67:76:5d:7d:2c:c0:0d:74:f9:91:10:5f: 01:2c:9d:15:af:f1:f5:fe:12:bb:33:7b:c1:d1:20:2c:2a:be: a9:aa:fa:bf:fb:df:9e:1b:ec:d1:fb:11:46:18:0e:44:73:6e: 3a:52:99:e4:87:ef:47:b4:0c:bf:e2:79:cd:08:2c:3f:88:2f: 9c:99:87:14:22:50:fa:0b:4d:a5:da:7a:1b:cb:99:40:b2:3d: 5d:e0:fb:6e:42:0b:be:63:30:8e:d5:31:e6:9f:98:46:54:a2: a0:1d:95:68:ab:49:8e:04:73:f1:37:01:3b:df:a1:20:04:64: 91:14:87:6d:09:18:ee:12:75:c5:1f:09:5c:8a:92:59:33:b7: 55:74:59:2c:6c:ae:7f:d5:1d:05:5a:da:70:b3:3a:9f:19:85: b0:a8:75:10:47:a1:64:68:65:93:a8:81:02:45:d9:68:67:d3: 54:df:85:c5:be:49:06:7d:10:3b:fe:da:6a:b9:4e:6c:b4:1b: ec:03:64:63:87:97:70:7b:77:0f:32:f6:cb:70:44:4e:36:55: 18:fb:45:95:4b:d6:a7:d1:b6:4c:d6:5a:e0:14:e5:de:7d:1a: 09:e5:5b:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqiFlvzHwV3l5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk MjM5YzAxMmMtNTUzNS00ZjdlLTk2MmUtODZjZThhNzE1NzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4/C5qdx3S+AeWNgB9MFvcIxrO3GsFmIOOUr FeXQrCG6bCsYN6Tx/sfOV7FNbPx1VIuh37Jc0GQSAG/Bli3CcnRJlNLc4PcMgsSm ecEioiaZmCC2irJt3JmQb5gDyfzCYn1l7Kd4cfVLD+eFpzmkGEj2P783me0wKze3 aSHfo/ZTHnMGRdjZbiwpn1BYWEBPJQJ1RPsKWwXNsxsjUXncP0atG4vPzsLJv8TA rO+V9Km7CRjVx9SJDP1fs02uFvBpnQU7O8znp/RAPXgzfSfqCxn70RsVe3Ochute SHzGcyMrgMBs964cHlyMuBsdfFGjPcuRFNHUGaaqwnL0w6aC7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3H/KnksIYaI1eaAquyYXwp+PgfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvZGEyZjQ1YWUtODVlMS0z OTNjLWE2M2ItOWFiZGMyNzM2NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAff1ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExH/NyWhoSPCKqezR1L026Hcxp/5zf/Amd2XX0swA10+ZEQXwEsnRWv 8fX+Ersze8HRICwqvqmq+r/7354b7NH7EUYYDkRzbjpSmeSH70e0DL/iec0ILD+I L5yZhxQiUPoLTaXaehvLmUCyPV3g+25CC75jMI7VMeafmEZUoqAdlWirSY4Ec/E3 ATvfoSAEZJEUh20JGO4SdcUfCVyKklkzt1V0WSxsrn/VHQVa2nCzOp8ZhbCodRBH oWRoZZOogQJF2Whn01TfhcW+SQZ9EDv+2mq5Tmy0G+wDZGOHl3B7dw8y9stwRE42 VRj7RZVL1qfRtkzWWuAU5d59GgnlW+M= -----END CERTIFICATE-----Generated at Tue Apr 8 12:24:24 2025 by rpki-client