$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2455bf61-a2a2-39e5-bf04-82c479a5b223.roa File: 2455bf61-a2a2-39e5-bf04-82c479a5b223.roa (raw, json) Hash identifier: Tr3wOtSHkRw1Xq+OmOZbsfR1SLsNQBcBKuJ7oiI0I7s= Subject key identifier: 8A:64:B8:69:72:BF:97:13:11:62:46:1F:DA:28:5F:CF:BE:FB:79:1E Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584D5024FBA0DA24B48A5668D2A0 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2455bf61-a2a2-39e5-bf04-82c479a5b223.roa Signing time: Sat 28 Mar 2026 01:00:31 +0000 ROA not before: Sat 28 Mar 2026 01:00:31 +0000 ROA not after: Fri 26 Jun 2026 01:00:31 +0000 asID: 20454 IP address blocks: 125.253.64.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:50:24:fb:a0:da:24:b4:8a:56:68:d2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Mar 28 01:00:31 2026 GMT Not After : Jun 26 01:00:31 2026 GMT Subject: CN=cb946cff-ac29-48ce-bf5f-8a74bd11150b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c8:ba:f3:f5:7b:a8:6f:e9:aa:7b:73:0a:5f: d7:e6:0a:89:38:ea:dd:35:1f:58:e2:4f:85:bc:dc: 8b:60:c9:05:d0:33:a7:98:c9:dd:e5:23:d5:d1:fd: 03:17:24:25:62:36:9b:d5:5b:9e:62:5f:eb:b7:aa: 5d:6a:45:e5:0a:90:f4:20:cf:27:9a:8b:2d:fa:7f: 71:f7:0e:45:59:0f:5a:76:f0:08:3a:b7:2b:4a:0f: 38:89:07:26:59:32:ca:68:10:b5:31:15:54:37:13: 8b:88:cb:0f:c5:0a:9e:24:1e:7b:f8:4d:c6:1d:8c: 98:04:ef:68:c1:df:f8:bc:63:cc:01:89:c9:ee:79: c4:cd:41:d9:a7:a6:95:ad:8a:a5:db:ae:9d:7f:be: 7e:9c:93:ec:81:e8:ac:96:7d:5b:60:c5:b4:9e:9c: 21:61:bc:a8:60:74:4a:4a:bd:58:29:46:4b:a0:34: 6c:2b:ce:e1:57:6e:0c:7f:78:79:08:7d:cf:35:08: ab:b1:d4:df:dd:4f:20:82:70:c1:2b:2a:25:17:c4: 64:ae:51:80:6a:2f:44:44:30:e7:83:c1:d7:41:a5: 14:46:ae:91:c7:03:8e:3f:49:98:91:67:0f:38:7b: e9:ab:0e:d2:44:7f:91:3f:dd:19:92:89:7f:66:b1: 9e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:64:B8:69:72:BF:97:13:11:62:46:1F:DA:28:5F:CF:BE:FB:79:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2455bf61-a2a2-39e5-bf04-82c479a5b223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:72:a1:4a:d8:d3:fa:c2:98:0c:b7:ed:05:d4:1e:14:69:49: 73:38:39:01:33:0a:b2:9d:7e:2b:12:4e:6d:35:4e:ad:21:12: 8b:3d:63:47:14:bf:42:2d:5e:22:a5:76:92:10:c7:6b:73:6c: 11:66:a4:c7:0e:d6:43:0c:a4:3b:d1:12:d7:67:7d:dc:ab:41: 3d:60:28:dd:45:27:d5:d7:11:37:01:7a:5d:42:92:0b:cf:7a: f5:0b:0c:66:8c:7e:51:f9:49:29:72:8b:27:61:12:de:08:c5: e3:de:ba:15:3d:8e:8a:bc:a2:86:77:5e:aa:12:0c:69:c6:52: ed:97:a7:3e:07:71:95:49:62:54:db:0d:57:e4:49:13:b5:f9: 4d:0b:25:97:1a:7b:ba:73:34:4f:6d:f6:c2:14:1b:db:35:6d: 1d:6c:72:58:1d:2e:cd:87:a1:4f:cb:6e:04:ea:7d:27:ff:a2: d2:57:1d:ac:4a:70:29:03:1d:32:c9:75:94:03:51:20:39:f3: 7c:5f:80:09:e4:e0:9f:f9:d4:e0:a1:a2:87:dc:66:ea:fb:74: 13:73:3f:71:55:07:30:97:f8:b9:b7:4b:68:de:b6:54:98:62: 85:4d:11:97:c0:ac:30:42:61:4c:20:5d:0c:d0:13:e8:cd:c2: 65:f5:f1:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1QJPug2iS0ilZo0qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI2MDMyODAxMDAzMVoXDTI2MDYyNjAxMDAzMVowLzEtMCsGA1UEAxMk Y2I5NDZjZmYtYWMyOS00OGNlLWJmNWYtOGE3NGJkMTExNTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysi68/V7qG/pqntzCl/X5gqJOOrdNR9Y4k+F vNyLYMkF0DOnmMnd5SPV0f0DFyQlYjab1VueYl/rt6pdakXlCpD0IM8nmost+n9x 9w5FWQ9advAIOrcrSg84iQcmWTLKaBC1MRVUNxOLiMsPxQqeJB57+E3GHYyYBO9o wd/4vGPMAYnJ7nnEzUHZp6aVrYql266df75+nJPsgeisln1bYMW0npwhYbyoYHRK Sr1YKUZLoDRsK87hV24Mf3h5CH3PNQirsdTf3U8ggnDBKyolF8RkrlGAai9ERDDn g8HXQaUURq6RxwOOP0mYkWcPOHvpqw7SRH+RP90Zkol/ZrGeiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpkuGlyv5cTEWJGH9ooX8+++3keMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvMjQ1NWJmNjEtYTJhMi0z OWU1LWJmMDQtODJjNDc5YTViMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCff1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNyoUrY0/rCmAy37QXUHhRpSXM4OQEzCrKdfisSTm01Tq0hEos9Y0cU v0ItXiKldpIQx2tzbBFmpMcO1kMMpDvREtdnfdyrQT1gKN1FJ9XXETcBel1CkgvP evULDGaMflH5SSlyiydhEt4IxePeuhU9joq8ooZ3XqoSDGnGUu2Xpz4HcZVJYlTb DVfkSRO1+U0LJZcae7pzNE9t9sIUG9s1bR1sclgdLs2HoU/LbgTqfSf/otJXHaxK cCkDHTLJdZQDUSA583xfgAnk4J/51OChoofcZur7dBNzP3FVBzCX+Lm3S2jetlSY YoVNEZfArDBCYUwgXQzQE+jNwmX18Vw= -----END CERTIFICATE-----Generated at Fri Apr 17 12:17:39 2026 by rpki-client