$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa File: ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa (raw, json) Hash identifier: 1D0QIyrHQlRkUa86VrpPV6ZB/adQxPIxGky6fXnDb0U= Subject key identifier: 23:34:3B:02:0C:A6:8B:0C:84:6E:B5:B3:58:F6:99:3C:EE:43:EE:37 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584B91777971F6BB2E11BAADC980 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa Signing time: Sun 19 Oct 2025 01:00:30 +0000 ROA not before: Sun 19 Oct 2025 01:00:30 +0000 ROA not after: Sat 17 Jan 2026 02:00:30 +0000 asID: 19437 IP address blocks: 125.253.68.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:91:77:79:71:f6:bb:2e:11:ba:ad:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Oct 19 01:00:30 2025 GMT Not After : Jan 17 02:00:30 2026 GMT Subject: CN=ba55e288-401c-4715-9d1d-e266852d2612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0c:d6:7b:7a:77:6a:e3:a5:de:92:49:62:6a: 4b:06:a8:cc:f7:26:8a:84:80:b6:de:d3:1a:56:7a: 38:cc:86:73:5e:e1:83:e0:79:6a:95:2e:cd:6e:fe: a0:43:9b:62:fb:79:d9:6e:d1:0a:e8:4d:ad:8b:7a: e0:9d:9b:76:85:c4:43:01:42:47:41:78:06:06:6b: ac:44:9a:f3:4b:cc:c6:b5:ba:55:18:62:66:e1:eb: c0:e7:18:4f:c2:2f:28:2e:ce:81:6e:76:1c:fa:41: a3:a3:f2:00:7d:03:d9:8f:da:8f:c2:97:fa:f1:f0: 5a:ff:94:b7:d3:6b:b1:35:03:0f:6f:3f:b5:f6:25: 79:09:57:44:5e:14:ad:90:7a:06:a3:57:18:78:15: da:d0:f0:26:4a:f4:45:43:34:bb:8d:4e:ee:b5:60: d5:fe:76:f5:23:72:ac:9d:55:e4:d8:87:10:2c:a1: bf:a3:36:a5:d9:b7:d9:0b:55:61:f0:f9:d7:ce:0d: 38:21:ad:99:5f:49:3d:7b:68:bf:51:19:a0:1b:ea: 18:ff:97:14:1b:8b:20:02:66:e5:43:37:3e:5f:da: 12:93:3b:d6:5d:d3:50:04:ed:6f:f3:e2:93:2a:ad: 8f:11:c5:57:33:48:3f:43:7c:7e:45:a5:a4:ec:f6: 3b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:34:3B:02:0C:A6:8B:0C:84:6E:B5:B3:58:F6:99:3C:EE:43:EE:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:fd:d3:e9:3a:0c:ae:65:58:f3:7e:e8:29:4c:11:4e:12:d3: 2e:88:84:7f:4c:80:a1:16:bf:93:15:21:25:c6:f9:16:81:b7: d9:3b:ff:c4:ef:1f:f3:7a:2b:72:59:31:4a:25:cb:e7:df:5c: f6:84:73:6c:7f:dd:aa:94:ee:d4:36:c8:c8:31:fb:08:ce:0c: df:81:d7:8b:5b:0f:16:bb:fe:e8:90:41:6b:32:e0:22:d6:07: d1:56:ce:e2:d3:1f:7a:f2:91:b7:39:65:81:74:cc:34:9a:04: d4:b5:0a:3f:4c:9c:c8:13:6d:4f:ef:f8:36:10:2f:9b:a4:b4: aa:90:38:6e:67:02:9f:01:c0:2d:56:79:60:79:a0:21:d9:e0: 27:9e:01:d6:bf:76:0a:c7:09:d6:2b:b7:a6:3e:da:ae:78:56: 0f:40:45:e0:c9:6b:b3:79:59:b4:5c:46:57:ff:bc:2e:32:ba: 85:82:cf:5a:c2:8f:14:54:4b:b5:97:a3:e6:43:e8:69:ed:3e: 1c:14:cc:11:be:cc:1c:fb:4f:9a:a5:76:29:54:fb:f8:6f:e9: bc:ca:61:c7:67:e4:14:0e:26:f8:6c:ce:29:9a:4f:10:5c:fd: 99:42:87:b2:c0:76:71:3d:b3:4d:af:ea:42:0c:c4:78:ec:2b: ca:64:5d:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuRd3lx9rsuEbqtyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MTAxOTAxMDAzMFoXDTI2MDExNzAyMDAzMFowLzEtMCsGA1UEAxMk YmE1NWUyODgtNDAxYy00NzE1LTlkMWQtZTI2Njg1MmQyNjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAzWe3p3auOl3pJJYmpLBqjM9yaKhIC23tMa Vno4zIZzXuGD4HlqlS7Nbv6gQ5ti+3nZbtEK6E2ti3rgnZt2hcRDAUJHQXgGBmus RJrzS8zGtbpVGGJm4evA5xhPwi8oLs6BbnYc+kGjo/IAfQPZj9qPwpf68fBa/5S3 02uxNQMPbz+19iV5CVdEXhStkHoGo1cYeBXa0PAmSvRFQzS7jU7utWDV/nb1I3Ks nVXk2IcQLKG/ozal2bfZC1Vh8PnXzg04Ia2ZX0k9e2i/URmgG+oY/5cUG4sgAmbl Qzc+X9oSkzvWXdNQBO1v8+KTKq2PEcVXM0g/Q3x+RaWk7PY70QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM0OwIMposMhG61s1j2mTzuQ+43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYWMxYTViYmUtMmI0ZC0z MDlmLWE2ZGUtYjkwOWY2ZWZhOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBff1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHr90+k6DK5lWPN+6ClMEU4S0y6IhH9MgKEWv5MVISXG+RaBt9k7/8Tv H/N6K3JZMUoly+ffXPaEc2x/3aqU7tQ2yMgx+wjODN+B14tbDxa7/uiQQWsy4CLW B9FWzuLTH3rykbc5ZYF0zDSaBNS1Cj9MnMgTbU/v+DYQL5uktKqQOG5nAp8BwC1W eWB5oCHZ4CeeAda/dgrHCdYrt6Y+2q54Vg9AReDJa7N5WbRcRlf/vC4yuoWCz1rC jxRUS7WXo+ZD6GntPhwUzBG+zBz7T5qldilU+/hv6bzKYcdn5BQOJvhszimaTxBc /ZlCh7LAdnE9s02v6kIMxHjsK8pkXRA= -----END CERTIFICATE-----Generated at Sun Oct 19 17:52:25 2025 by rpki-client