$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/20692d06-b0b3-38da-82a3-338113d0bc26.roa File: 20692d06-b0b3-38da-82a3-338113d0bc26.roa (raw, json) Hash identifier: w6dCAj3Xfa2XdYE4iRZNEx12EwFR3EGihWG+q8dDxNM= Subject key identifier: A1:77:5D:AB:B0:E1:6B:41:51:8C:4B:52:B2:A5:11:E9:A2:9F:1B:84 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584D86955D1807AF380E9E7CF100 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/20692d06-b0b3-38da-82a3-338113d0bc26.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 20454 IP address blocks: 125.253.88.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:5d:18:07:af:38:0e:9e:7c:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=82eeaa33-8144-49e9-a731-1e16e4ce5b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e4:b5:9a:b4:65:c0:f1:a8:82:6a:50:c5:b2: 97:bc:bb:82:d8:59:bc:96:11:0f:03:44:75:aa:35: f5:37:a6:e5:e3:ab:92:16:06:7e:4b:26:d1:c9:3b: 40:24:3d:d8:6e:7d:3b:ae:32:9a:79:4b:85:0d:44: 7e:a1:68:54:97:af:f9:f7:e3:6b:83:6c:f0:da:fa: 21:f1:36:60:80:32:56:70:68:dd:0f:9b:df:46:ff: 16:e4:35:21:11:c7:47:7c:d1:fa:fc:3f:4d:4f:8d: a9:30:d1:96:2d:0f:56:23:61:be:1f:63:71:85:9c: 91:d2:af:db:57:22:bb:89:be:91:d6:10:f9:af:20: 6c:06:60:e4:cc:d1:c3:02:f8:ba:12:96:d4:e8:fd: 44:d3:0d:f1:db:af:29:a5:38:71:ab:32:9d:a3:d3: 0c:c6:07:68:bf:98:26:cd:88:86:66:3a:6f:4b:e8: ea:e0:09:9a:85:21:db:56:3c:cc:d8:1c:e8:48:f0: 00:1a:f3:9c:b4:4a:9b:af:e2:78:51:3a:21:f3:c8: 38:ea:f7:da:c6:7b:54:25:d7:92:9e:de:91:b9:33: 80:2e:09:2e:40:ad:f5:12:90:16:a2:6a:67:8f:8a: d9:10:20:ce:04:70:80:8e:2c:62:9d:da:8e:4d:d0: ba:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:77:5D:AB:B0:E1:6B:41:51:8C:4B:52:B2:A5:11:E9:A2:9F:1B:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/20692d06-b0b3-38da-82a3-338113d0bc26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:ca:8f:a2:a2:c7:dd:95:9a:0b:1e:bd:77:f1:c9:7c:bb:c8: a7:fe:94:a0:0d:f8:18:81:cd:1d:33:33:68:bc:cc:af:35:cf: dd:9d:ee:41:f4:bc:b4:82:bf:5c:55:c1:14:ef:2a:34:b4:46: aa:1f:12:9b:81:44:a7:11:c8:fd:5c:2d:ce:86:64:93:a8:a0: 9e:72:63:07:4d:22:c9:d8:08:8e:15:ad:8c:a9:6c:15:e6:dc: 99:06:a3:0f:8e:d5:2d:b2:e3:8f:1d:6c:23:f5:3a:aa:e6:1a: fa:40:40:99:1a:a1:84:1a:df:ff:2e:e9:ea:29:a8:8e:2e:bf: 22:bb:3f:36:2b:01:4f:3a:18:70:ed:7c:e2:73:d7:43:99:63: 20:37:6b:51:eb:96:51:68:90:53:c3:6a:da:df:2b:eb:0e:dd: fd:1d:37:6c:9a:43:6d:62:59:36:e6:f8:98:18:32:b2:83:a0: 82:87:22:99:4d:e4:63:1d:90:3c:0e:0c:f6:c3:b0:e0:b8:1a: 70:12:7b:9f:ee:46:5e:9d:12:85:68:ff:2c:6b:8f:11:56:c5: 7a:f3:e5:f4:f7:f5:16:37:00:32:b2:0a:63:d9:aa:a4:c1:0c: 9b:e0:38:7b:bd:a3:33:68:ac:47:16:6f:7f:88:96:f0:3b:80: b0:03:67:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlV0YB684Dp588QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ODJlZWFhMzMtODE0NC00OWU5LWE3MzEtMWUxNmU0Y2U1YjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuS1mrRlwPGogmpQxbKXvLuC2Fm8lhEPA0R1 qjX1N6bl46uSFgZ+SybRyTtAJD3Ybn07rjKaeUuFDUR+oWhUl6/59+Nrg2zw2voh 8TZggDJWcGjdD5vfRv8W5DUhEcdHfNH6/D9NT42pMNGWLQ9WI2G+H2NxhZyR0q/b VyK7ib6R1hD5ryBsBmDkzNHDAvi6EpbU6P1E0w3x268ppThxqzKdo9MMxgdov5gm zYiGZjpvS+jq4AmahSHbVjzM2BzoSPAAGvOctEqbr+J4UToh88g46vfaxntUJdeS nt6RuTOALgkuQK31EpAWompnj4rZECDOBHCAjixindqOTdC6ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKF3Xauw4WtBUYxLUrKlEeminxuEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvMjA2OTJkMDYtYjBiMy0z OGRhLTgyYTMtMzM4MTEzZDBiYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAff1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvKj6Kix92VmgsevXfxyXy7yKf+lKAN+BiBzR0zM2i8zK81z92d7kH0 vLSCv1xVwRTvKjS0RqofEpuBRKcRyP1cLc6GZJOooJ5yYwdNIsnYCI4VrYypbBXm 3JkGow+O1S2y448dbCP1OqrmGvpAQJkaoYQa3/8u6eopqI4uvyK7PzYrAU86GHDt fOJz10OZYyA3a1HrllFokFPDatrfK+sO3f0dN2yaQ21iWTbm+JgYMrKDoIKHIplN 5GMdkDwODPbDsOC4GnASe5/uRl6dEoVo/yxrjxFWxXrz5fT39RY3ADKyCmPZqqTB DJvgOHu9ozNorEcWb3+IlvA7gLADZ4M= -----END CERTIFICATE-----Generated at Fri Apr 17 12:08:32 2026 by rpki-client