$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa File: 5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa (raw, json) Hash identifier: gkaReN+pLzGzyggsfoeX4xznbrMf7Lj0nViQzmVk35I= Subject key identifier: 66:0C:1D:48:82:E1:C7:18:0D:91:62:BD:A9:84:67:1D:02:21:E4:BA Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584B864CB20A1545C068B9364600 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa Signing time: Wed 15 Oct 2025 01:00:30 +0000 ROA not before: Wed 15 Oct 2025 01:00:30 +0000 ROA not after: Tue 13 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 125.253.80.0/21 maxlen: 21 125.253.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:4c:b2:0a:15:45:c0:68:b9:36:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Oct 15 01:00:30 2025 GMT Not After : Jan 13 02:00:30 2026 GMT Subject: CN=16b991e0-c773-43ad-afcf-857c5445373b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0d:43:3f:db:5a:06:ba:8d:61:e1:4c:ec:b5: 17:f3:13:25:36:21:dc:f9:d7:31:fc:5a:a3:72:28: 91:36:6c:96:d5:4f:a5:08:ff:6c:b1:93:da:2a:0a: 33:6d:59:c7:d6:fa:fd:e2:7b:c0:a2:de:bd:eb:6d: 9f:8d:d0:f0:4b:43:7f:a3:2f:6c:89:f6:9e:a7:d2: ab:9e:29:fd:f6:54:1f:80:34:0f:69:b2:00:5b:6f: ad:b3:01:a1:b8:96:03:49:40:38:07:52:91:c3:4f: 3a:7c:32:15:61:19:06:42:fb:2a:92:98:a3:31:e4: b9:09:2c:fa:ed:4d:cc:c2:17:02:5f:65:26:2a:7c: a9:0f:be:39:7e:46:87:32:06:a2:4e:81:2a:e6:60: a5:3f:07:21:19:3f:4c:4b:4e:f8:fa:2e:a1:a6:60: c1:17:5d:0c:c1:4f:ae:f2:3d:cc:93:ef:0a:e6:9f: 41:fb:e5:2d:20:3f:cb:11:86:cc:02:d2:3d:85:f2: 0c:54:3c:8b:49:57:6c:c2:df:28:6b:f9:73:1e:e6: c8:f7:af:ed:7d:f6:ba:15:ff:e0:cb:1f:82:6d:8d: 12:1f:c7:0d:21:07:dc:ae:90:66:b9:3b:a6:da:3c: 22:3d:97:bf:35:a7:97:e0:34:74:52:53:2c:ba:79: 0c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0C:1D:48:82:E1:C7:18:0D:91:62:BD:A9:84:67:1D:02:21:E4:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.80.0-125.253.91.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:19:93:6e:df:d6:b3:c2:a2:a3:45:50:f0:3b:82:0e:1d:c4: ae:c8:47:e3:51:9c:be:41:87:11:51:5f:32:c4:b1:2b:93:bd: 06:76:c2:bd:73:17:24:c5:7f:95:b8:2f:52:97:c5:cf:44:37: 6f:a7:5c:f9:b5:20:9d:a0:a6:f2:7f:a0:6b:eb:b6:5d:3f:e9: 28:19:28:1a:67:5f:cd:ae:00:db:26:61:d9:0f:42:0a:e2:19: 73:fe:c6:f2:aa:4b:3f:eb:e7:20:53:c4:f8:3a:ba:70:d9:fc: 15:f2:fa:02:65:4f:f7:30:ae:80:42:95:e7:98:20:a9:3c:7a: b6:81:fa:38:3c:97:04:90:1e:7f:fd:8d:d6:17:1f:dc:b8:f5: 58:2d:23:35:38:b2:fd:d6:43:46:10:4c:ee:59:c8:a1:d3:db: 91:65:29:ad:70:b0:10:5c:e8:d7:02:c3:03:bd:83:57:af:cf: d0:40:9f:df:f7:5f:a2:3f:3f:e4:f9:d5:c1:5c:72:8c:90:d7: b5:c5:42:f1:34:4a:69:bd:a9:2b:f5:2d:a8:b7:a7:72:03:8e: c8:a7:2b:2c:16:2a:ce:e4:c5:2e:14:88:29:9c:6e:a1:ba:0b: c0:62:ee:72:1a:27:61:fd:68:b5:3e:60:44:ed:0d:ee:48:f5: ff:14:f2:3e -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuGTLIKFUXAaLk2RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MTAxNTAxMDAzMFoXDTI2MDExMzAyMDAzMFowLzEtMCsGA1UEAxMk MTZiOTkxZTAtYzc3My00M2FkLWFmY2YtODU3YzU0NDUzNzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg1DP9taBrqNYeFM7LUX8xMlNiHc+dcx/Fqj ciiRNmyW1U+lCP9ssZPaKgozbVnH1vr94nvAot69622fjdDwS0N/oy9sifaep9Kr nin99lQfgDQPabIAW2+tswGhuJYDSUA4B1KRw086fDIVYRkGQvsqkpijMeS5CSz6 7U3MwhcCX2UmKnypD745fkaHMgaiToEq5mClPwchGT9MS074+i6hpmDBF10MwU+u 8j3Mk+8K5p9B++UtID/LEYbMAtI9hfIMVDyLSVdswt8oa/lzHubI96/tffa6Ff/g yx+CbY0SH8cNIQfcrpBmuTum2jwiPZe/NaeX4DR0UlMsunkMTwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFGYMHUiC4ccYDZFivamEZx0CIeS6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvNWJiNTJiMDctNGRhNC0z ZjQ0LTkzMGUtNDNhZjc3YzNiOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAR9/VAD BAJ9/VgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEARxmTbt/Ws8Kio0VQ8DuCDh3ErshH41GcvkGHEVFfMsSx K5O9BnbCvXMXJMV/lbgvUpfFz0Q3b6dc+bUgnaCm8n+ga+u2XT/pKBkoGmdfza4A 2yZh2Q9CCuIZc/7G8qpLP+vnIFPE+Dq6cNn8FfL6AmVP9zCugEKV55ggqTx6toH6 ODyXBJAef/2N1hcf3Lj1WC0jNTiy/dZDRhBM7lnIodPbkWUprXCwEFzo1wLDA72D V6/P0ECf3/dfoj8/5PnVwVxyjJDXtcVC8TRKab2pK/UtqLencgOOyKcrLBYqzuTF LhSIKZxuoboLwGLuchonYf1otT5gRO0N7kj1/xTyPg== -----END CERTIFICATE-----Generated at Sun Oct 19 22:25:43 2025 by rpki-client