$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa File: 5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa (raw, json) Hash identifier: xI0DUbFRXcFv7E46wbOLdvKH4Psc66Nz2SYQN5/HDRE= Subject key identifier: 23:3F:CB:75:0B:14:8D:66:E6:B2:0A:12:56:19:32:A3:3E:2E:78:F4 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584AA590F5EBE6F996E9B538EC80 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa Signing time: Sat 26 Jul 2025 13:01:04 +0000 ROA not before: Sat 26 Jul 2025 13:01:04 +0000 ROA not after: Fri 24 Oct 2025 13:01:04 +0000 asID: 0 IP address blocks: 125.253.80.0/21 maxlen: 21 125.253.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a5:90:f5:eb:e6:f9:96:e9:b5:38:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Jul 26 13:01:04 2025 GMT Not After : Oct 24 13:01:04 2025 GMT Subject: CN=308a460d-fc40-43dd-b9b7-6927a6225f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:93:66:ae:e4:51:32:39:1f:60:8e:f7:f1:17: 93:20:f0:cb:46:dc:62:27:fa:06:70:dd:8d:7c:3f: e7:19:97:07:df:8d:03:37:81:61:72:9b:48:34:c0: ad:a8:ed:0c:9a:09:22:03:5d:32:b9:40:9c:43:db: 16:c7:4f:52:da:ee:b5:ff:0f:cc:a4:c4:07:72:b5: e2:a2:5a:19:0b:83:d2:3c:80:54:7a:f9:05:21:23: 6d:d4:2d:15:fd:1d:95:ea:9f:6f:85:39:d6:11:af: 5e:d4:96:94:5e:79:5b:45:93:b6:7a:c6:3a:18:f8: 81:3d:28:2a:44:e7:45:26:4a:b5:45:65:b4:cb:bf: 7f:a4:2c:04:97:4b:12:97:57:05:11:d3:37:d9:cf: cc:70:44:aa:0a:21:b1:9c:40:c6:a9:49:a3:a7:75: 37:35:56:82:11:69:41:7c:f5:e2:d6:a0:ab:f3:f2: 21:d9:f6:ba:13:32:f3:1d:14:e5:3c:d4:74:04:98: a2:0c:ed:1a:90:08:68:af:7a:10:bd:9d:f5:96:04: 61:bd:33:37:ce:93:f0:90:65:8f:78:ca:63:f2:0a: e1:ea:1d:2f:aa:4d:fd:73:fc:3d:3e:7d:d5:d8:6b: 93:9a:3d:8d:74:80:a3:da:35:1c:95:f6:f3:6c:2a: e1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3F:CB:75:0B:14:8D:66:E6:B2:0A:12:56:19:32:A3:3E:2E:78:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/5bb52b07-4da4-3f44-930e-43af77c3b9b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.80.0-125.253.91.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ff:4f:85:23:4e:38:be:58:a4:0d:5b:ab:a0:c6:8d:17:8c: 5e:46:95:ff:e4:a9:13:f7:17:be:1d:6a:0e:19:4a:a8:ef:7d: 3a:14:e4:bb:06:1b:e1:17:62:64:33:78:36:2c:29:06:23:5e: e8:03:86:7d:ad:92:d3:ef:f8:e2:14:62:94:e4:db:54:e3:79: 59:74:87:0c:fc:85:2b:00:3c:a6:29:a3:bd:c2:9c:31:69:42: 92:b9:f7:33:10:01:e1:55:2f:61:db:d8:02:6b:b8:c0:00:4f: bc:a4:fd:10:06:bb:b9:e9:2f:db:bb:f6:7e:c3:e1:9f:cd:77: bf:a9:70:f5:43:ad:30:1c:e6:86:b8:01:46:a5:92:6d:e3:30: 9b:17:60:44:c5:6a:0d:2d:bc:2e:ea:a6:c3:38:7e:b9:6a:1d: 53:d6:53:83:ba:7f:d2:b8:1f:03:8d:e5:7e:45:42:d5:92:b4: 13:7b:69:6a:20:1a:87:af:45:f1:e4:56:49:9c:51:2e:8a:2e: ef:8d:45:06:bb:b6:0c:05:09:f0:bc:9a:de:84:09:10:da:14: 20:63:a8:69:39:f1:bc:ae:bb:ee:bd:d5:89:11:fd:78:99:12: db:1e:dc:a2:4b:85:3f:16:08:0b:0d:53:17:19:ed:ea:b5:32: 4b:9b:31:90 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEqlkPXr5vmW6bU47IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDcyNjEzMDEwNFoXDTI1MTAyNDEzMDEwNFowLzEtMCsGA1UEAxMk MzA4YTQ2MGQtZmM0MC00M2RkLWI5YjctNjkyN2E2MjI1ZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5NmruRRMjkfYI738ReTIPDLRtxiJ/oGcN2N fD/nGZcH340DN4FhcptINMCtqO0MmgkiA10yuUCcQ9sWx09S2u61/w/MpMQHcrXi oloZC4PSPIBUevkFISNt1C0V/R2V6p9vhTnWEa9e1JaUXnlbRZO2esY6GPiBPSgq ROdFJkq1RWW0y79/pCwEl0sSl1cFEdM32c/McESqCiGxnEDGqUmjp3U3NVaCEWlB fPXi1qCr8/Ih2fa6EzLzHRTlPNR0BJiiDO0akAhor3oQvZ31lgRhvTM3zpPwkGWP eMpj8grh6h0vqk39c/w9Pn3V2GuTmj2NdICj2jUclfbzbCrhwQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCM/y3ULFI1m5rIKElYZMqM+Lnj0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvNWJiNTJiMDctNGRhNC0z ZjQ0LTkzMGUtNDNhZjc3YzNiOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAR9/VAD BAJ9/VgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAHv9PhSNOOL5YpA1bq6DGjReMXkaV/+SpE/cXvh1qDhlK qO99OhTkuwYb4RdiZDN4NiwpBiNe6AOGfa2S0+/44hRilOTbVON5WXSHDPyFKwA8 pimjvcKcMWlCkrn3MxAB4VUvYdvYAmu4wABPvKT9EAa7uekv27v2fsPhn813v6lw 9UOtMBzmhrgBRqWSbeMwmxdgRMVqDS28Luqmwzh+uWodU9ZTg7p/0rgfA43lfkVC 1ZK0E3tpaiAah69F8eRWSZxRLoou741FBru2DAUJ8Lya3oQJENoUIGOoaTnxvK67 7r3ViRH9eJkS2x7cokuFPxYICw1TFxnt6rUyS5sxkA== -----END CERTIFICATE-----Generated at Mon Aug 4 15:26:29 2025 by rpki-client