$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c68aa7f4-7008-3008-9c59-e65de9ce99f2.roa File: c68aa7f4-7008-3008-9c59-e65de9ce99f2.roa (raw, json) Hash identifier: CB+VwydPV4G2oDxLMAw9xYSeBqmAK/GM1zem1cXBqHM= Subject key identifier: 89:A6:61:CC:80:87:C6:6B:FB:30:73:11:26:98:EE:24:B2:7F:C8:A0 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584AEB5BCFB1EEA4253C40C80300 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c68aa7f4-7008-3008-9c59-e65de9ce99f2.roa Signing time: Wed 20 Aug 2025 13:00:41 +0000 ROA not before: Wed 20 Aug 2025 13:00:41 +0000 ROA not after: Tue 18 Nov 2025 14:00:41 +0000 asID: 19437 IP address blocks: 125.253.67.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:5b:cf:b1:ee:a4:25:3c:40:c8:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Aug 20 13:00:41 2025 GMT Not After : Nov 18 14:00:41 2025 GMT Subject: CN=befa4ceb-a969-4112-a42e-5ff14ec6c405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1f:5b:0f:c9:43:ab:a0:31:64:52:9b:72:9f: 6f:56:36:ba:97:7d:14:d6:cf:bc:50:7d:d5:45:89: fa:42:2b:dd:82:32:86:20:bd:21:9e:82:90:06:e1: d2:d5:b0:19:11:be:50:9d:4f:c6:da:02:b7:1c:45: 50:bb:ef:fa:55:5c:f9:17:70:9e:65:c2:f6:06:21: ae:03:a3:ed:99:c2:d4:df:3b:51:26:5b:3c:48:d6: 89:9c:4c:f8:21:22:1e:32:c9:25:7a:81:71:75:5f: e6:48:ea:2f:80:0a:7c:ac:67:1b:9b:96:19:d1:19: 91:af:38:b7:e4:ee:f2:d4:8d:1f:97:07:73:bf:27: f5:db:70:e1:6d:0a:13:b9:fb:81:64:24:e3:4d:f4: eb:4b:ce:b4:cb:77:89:bb:ed:57:d4:48:78:c6:45: 0d:0f:99:d2:03:20:45:38:80:e9:df:92:56:a7:88: a9:c7:c9:2f:6e:ec:2a:b1:a1:17:dc:e9:0c:5c:d9: 4b:1d:6d:20:ba:76:16:bf:b9:5f:ac:6d:35:60:34: 92:b1:38:0d:1c:51:9b:e6:11:b8:31:1c:7e:5e:2a: 76:fe:2f:48:ab:87:52:a4:6d:4c:b2:32:ca:9b:6a: 47:21:4a:fe:8c:05:b2:a3:53:b0:f7:fc:7b:cf:39: 57:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A6:61:CC:80:87:C6:6B:FB:30:73:11:26:98:EE:24:B2:7F:C8:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c68aa7f4-7008-3008-9c59-e65de9ce99f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ad:21:fe:67:80:0b:a8:00:b8:60:3f:ac:87:83:5e:ca:3c: fc:7b:88:3a:ef:19:f2:49:16:79:2f:04:7a:86:6b:a4:4b:50: e3:4e:ff:66:b9:70:c9:49:c1:20:b7:28:bd:90:81:3f:fc:d1: 92:1a:a0:c5:04:2e:4b:36:39:e9:3d:bb:77:72:24:b2:da:b2: 1b:8b:8e:7c:e4:4e:1e:52:1a:20:d2:b0:3e:67:c7:86:ce:7f: 4d:c5:a0:ef:d4:ef:a1:a8:ac:7b:9a:48:1a:92:57:63:c9:4e: 84:c4:6e:4c:0a:8b:12:27:dc:9a:36:1f:0e:89:b9:63:5c:72: 97:67:53:ab:ff:b8:5f:5f:b1:3e:36:1d:71:5e:51:3b:fa:29: 96:2f:5b:ee:3f:ef:12:b8:61:53:e5:f2:69:7e:d8:9d:10:01: 6a:f8:d6:a5:fa:37:c1:60:14:2b:a9:d9:5e:b3:9b:25:e0:8d: 5d:e7:78:8b:d5:34:90:9c:4e:c0:b9:b4:b1:02:92:7f:44:46: d2:62:75:f3:e8:14:f0:3f:38:39:07:cf:e6:8c:80:1e:d3:91: c3:5a:88:87:20:8e:d1:de:62:7d:18:b1:8a:7d:74:4e:34:21: 95:d0:b7:76:fb:5d:3c:92:6e:f2:01:f7:70:7b:ea:73:14:03: 7e:2c:04:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrW8+x7qQlPEDIAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDgyMDEzMDA0MVoXDTI1MTExODE0MDA0MVowLzEtMCsGA1UEAxMk YmVmYTRjZWItYTk2OS00MTEyLWE0MmUtNWZmMTRlYzZjNDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR9bD8lDq6AxZFKbcp9vVja6l30U1s+8UH3V RYn6QivdgjKGIL0hnoKQBuHS1bAZEb5QnU/G2gK3HEVQu+/6VVz5F3CeZcL2BiGu A6PtmcLU3ztRJls8SNaJnEz4ISIeMskleoFxdV/mSOovgAp8rGcbm5YZ0RmRrzi3 5O7y1I0flwdzvyf123DhbQoTufuBZCTjTfTrS860y3eJu+1X1Eh4xkUND5nSAyBF OIDp35JWp4ipx8kvbuwqsaEX3OkMXNlLHW0gunYWv7lfrG01YDSSsTgNHFGb5hG4 MRx+Xip2/i9Iq4dSpG1MsjLKm2pHIUr+jAWyo1Ow9/x7zzlX8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImmYcyAh8Zr+zBzESaY7iSyf8igMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYzY4YWE3ZjQtNzAwOC0z MDA4LTljNTktZTY1ZGU5Y2U5OWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAff1DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOtIf5ngAuoALhgP6yHg17KPPx7iDrvGfJJFnkvBHqGa6RLUONO/2a5 cMlJwSC3KL2QgT/80ZIaoMUELks2Oek9u3dyJLLashuLjnzkTh5SGiDSsD5nx4bO f03FoO/U76GorHuaSBqSV2PJToTEbkwKixIn3Jo2Hw6JuWNccpdnU6v/uF9fsT42 HXFeUTv6KZYvW+4/7xK4YVPl8ml+2J0QAWr41qX6N8FgFCup2V6zmyXgjV3neIvV NJCcTsC5tLECkn9ERtJidfPoFPA/ODkHz+aMgB7TkcNaiIcgjtHeYn0YsYp9dE40 IZXQt3b7XTySbvIB93B76nMUA34sBOw= -----END CERTIFICATE-----Generated at Sat Aug 23 22:57:53 2025 by rpki-client