$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/20692d06-b0b3-38da-82a3-338113d0bc26.roa File: 20692d06-b0b3-38da-82a3-338113d0bc26.roa (raw, json) Hash identifier: Cy8KtXnIRafEOwjWZNi9WdWtXenY40n62UgpiQRVncQ= Subject key identifier: 32:A9:5E:2D:F5:CD:DE:D0:F9:66:32:0F:74:FC:F2:84:02:92:79:F1 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584AE461286000AE2295734F3180 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/20692d06-b0b3-38da-82a3-338113d0bc26.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 20454 IP address blocks: 125.253.88.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:28:60:00:ae:22:95:73:4f:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=4dd6d3e5-1a23-484f-bdbc-1fe35f47b88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:41:9b:08:c5:4d:b5:ad:51:92:ad:36:62:c4: e3:bb:ac:ce:04:43:41:ed:26:47:e5:04:cc:20:ba: ae:41:94:90:5f:5c:70:0a:31:2e:12:95:52:af:9b: 81:d8:2a:d0:6e:63:02:ff:fb:be:74:c1:c3:26:a0: 2d:2e:11:26:04:75:01:ce:44:06:3f:75:c7:2f:fd: 51:5e:04:9c:f0:83:8b:93:34:7b:18:c8:f4:a7:81: 75:aa:85:6d:71:fe:f4:ba:2c:f2:aa:50:e2:7b:e9: 80:98:c7:0c:95:12:7d:35:60:db:24:b2:8d:5d:fa: a2:4e:0a:6e:ba:e8:4a:db:b3:6a:11:b5:5c:7a:f0: 5e:32:56:64:92:2b:d8:54:9c:aa:23:5c:66:c6:c3: 84:07:7f:98:be:14:14:b8:1b:b9:3a:11:35:81:ca: d9:c2:f5:be:b7:ca:9a:86:08:a6:eb:ec:95:8b:87: 7b:03:21:c0:44:ea:44:0a:b5:bd:dd:dd:8a:d4:94: e5:65:32:89:1c:a8:5e:b8:c7:a5:16:1e:04:d2:e5: b0:0d:e8:9d:ab:e0:f9:57:fa:0f:71:28:92:d1:e7: 5d:97:9c:e4:ff:d2:61:3e:8f:71:a0:81:d8:40:b1: 1d:c3:31:07:50:bb:7b:37:2c:c3:53:80:96:00:d6: 8f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A9:5E:2D:F5:CD:DE:D0:F9:66:32:0F:74:FC:F2:84:02:92:79:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/20692d06-b0b3-38da-82a3-338113d0bc26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:65:63:41:2a:e5:c3:de:44:07:01:f5:2f:c8:9e:c8:0d:62: 55:96:2c:9c:31:27:39:14:07:27:f5:33:23:23:b2:b2:3d:81: 61:8a:4b:5d:6c:d7:7b:7c:b6:a0:9c:8e:77:ac:d0:8f:78:be: 10:94:80:6e:e1:79:9e:82:db:cc:ba:27:57:16:72:bd:37:16: 7a:0a:a6:3e:9a:a1:2e:8d:c0:cf:89:f1:49:f2:9e:4d:68:97: df:a5:17:03:a1:8f:d4:29:57:41:1f:1c:25:83:fc:57:c6:bd: 87:07:8c:4c:9f:06:2e:fe:99:bc:8f:f0:1d:72:9c:5a:36:b7: 78:99:c1:a2:6a:e7:0c:27:08:56:49:d0:35:5d:13:db:de:51: d3:82:bb:67:c6:4a:d9:35:c5:54:52:20:51:69:ab:37:48:a2: f4:9a:47:fb:0d:93:c2:7d:f5:16:4d:89:6d:38:bc:83:0f:64: 0c:d8:3a:df:f3:a8:07:e0:e8:ef:7c:b0:ac:56:0a:d7:9b:44: 74:9d:5d:16:5f:6a:c6:5a:ea:a2:4b:99:1e:9f:f4:32:ed:56: 48:8b:e6:ec:8f:39:0d:dc:d9:ce:ce:af:15:14:be:47:f1:5d: f6:7a:d0:17:b0:9a:23:bb:8b:22:b6:c2:62:8b:70:85:95:49: 1c:82:d6:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYShgAK4ilXNPMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NGRkNmQzZTUtMWEyMy00ODRmLWJkYmMtMWZlMzVmNDdiODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10GbCMVNta1Rkq02YsTju6zOBENB7SZH5QTM ILquQZSQX1xwCjEuEpVSr5uB2CrQbmMC//u+dMHDJqAtLhEmBHUBzkQGP3XHL/1R XgSc8IOLkzR7GMj0p4F1qoVtcf70uizyqlDie+mAmMcMlRJ9NWDbJLKNXfqiTgpu uuhK27NqEbVcevBeMlZkkivYVJyqI1xmxsOEB3+YvhQUuBu5OhE1gcrZwvW+t8qa hgim6+yVi4d7AyHAROpECrW93d2K1JTlZTKJHKheuMelFh4E0uWwDeidq+D5V/oP cSiS0eddl5zk/9JhPo9xoIHYQLEdwzEHULt7NyzDU4CWANaPTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKpXi31zd7Q+WYyD3T88oQCknnxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvMjA2OTJkMDYtYjBiMy0z OGRhLTgyYTMtMzM4MTEzZDBiYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAff1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtlY0Eq5cPeRAcB9S/InsgNYlWWLJwxJzkUByf1MyMjsrI9gWGKS11s 13t8tqCcjnes0I94vhCUgG7heZ6C28y6J1cWcr03FnoKpj6aoS6NwM+J8Unynk1o l9+lFwOhj9QpV0EfHCWD/FfGvYcHjEyfBi7+mbyP8B1ynFo2t3iZwaJq5wwnCFZJ 0DVdE9veUdOCu2fGStk1xVRSIFFpqzdIovSaR/sNk8J99RZNiW04vIMPZAzYOt/z qAfg6O98sKxWCtebRHSdXRZfasZa6qJLmR6f9DLtVkiL5uyPOQ3c2c7OrxUUvkfx XfZ60BewmiO7iyK2wmKLcIWVSRyC1vo= -----END CERTIFICATE-----Generated at Sat Aug 23 20:15:39 2025 by rpki-client