$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa File: ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa (raw, json) Hash identifier: 8RZRYBdShO95ny+LgUcBOr9jb7VHcA9Ft7Jai7JedyA= Subject key identifier: F6:E9:6A:9C:AB:30:66:6E:25:F1:F3:59:62:8A:CA:57:17:3A:C0:6B Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584AB0BB7D7EAA51326B7A6EACE0 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa Signing time: Wed 30 Jul 2025 13:00:40 +0000 ROA not before: Wed 30 Jul 2025 13:00:40 +0000 ROA not after: Tue 28 Oct 2025 13:00:40 +0000 asID: 19437 IP address blocks: 125.253.68.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b0:bb:7d:7e:aa:51:32:6b:7a:6e:ac:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Jul 30 13:00:40 2025 GMT Not After : Oct 28 13:00:40 2025 GMT Subject: CN=4e689a9b-3ab4-4a72-ba68-d00a0ef15696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d5:52:89:cd:9b:7a:42:f6:a0:d9:68:2f:f5: 3a:3d:9a:76:b0:46:8a:be:c4:07:a3:1c:bd:57:9f: fd:e4:86:0e:50:ab:29:30:1e:de:b5:8f:72:cf:bd: 33:b6:55:5b:83:f4:e1:d0:29:39:a8:7f:e5:e9:52: e7:98:c9:23:03:7d:a6:11:94:48:35:e7:73:2f:9d: 04:06:0c:f7:77:dc:39:aa:62:ed:05:68:59:d7:ac: 6d:e9:43:2d:65:fd:35:9c:73:a5:bf:ae:17:cd:cd: 3c:5f:48:00:db:1c:d1:24:13:b3:e1:bc:af:e0:d6: 57:45:e9:ff:10:57:2d:71:ec:4d:20:c5:5d:b3:58: 6b:47:92:dc:d9:66:04:a4:1b:2a:74:c2:76:4d:03: 7c:28:a0:fc:8e:0d:5a:d6:b5:44:ce:97:49:3f:df: 53:7f:e5:f3:ef:f4:26:16:53:0f:14:2f:b7:3d:ee: dc:94:fe:99:96:a1:13:9d:1f:36:45:57:ee:43:e5: 8c:92:3f:e9:e1:02:31:e4:a3:73:7c:87:c3:a1:73: 28:08:94:e9:d6:ff:4d:40:5c:44:25:e2:be:68:ca: e9:1f:26:a4:85:5f:8c:7b:b3:de:c4:03:57:68:e5: fd:71:16:b3:f1:a4:53:ca:3d:1d:95:16:a0:2c:b5: a1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E9:6A:9C:AB:30:66:6E:25:F1:F3:59:62:8A:CA:57:17:3A:C0:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d3:46:1b:da:41:33:a3:12:dd:27:a3:35:45:1f:cb:ef:97: c3:46:b6:d8:0c:f3:d1:bd:90:a7:b4:3d:74:78:1b:05:b5:07: 04:46:8e:cc:38:97:97:26:19:5b:ec:8b:fd:a6:c6:5f:6c:4b: 1c:f0:58:f3:7f:fd:ff:4a:d4:39:2d:e2:1c:0f:37:7b:24:be: 29:74:ff:a8:39:ed:3e:3d:8e:ca:b9:94:d4:f6:71:d6:21:7c: b9:15:f3:e1:9f:44:d7:90:c7:c4:3c:db:c1:03:a4:d2:99:78: c2:73:b5:0b:dc:c2:4b:d2:ee:a5:00:31:a0:57:df:b5:bd:f2: 23:8a:06:15:2c:7c:a3:73:3e:70:99:33:c2:b7:53:29:93:32: 57:02:b4:64:f7:67:44:85:4b:9a:f3:bd:4c:c8:38:43:ce:a4: 03:ec:ae:be:63:35:51:06:b3:a7:11:3c:60:01:38:4f:43:2b: 95:1c:88:1f:44:68:b7:26:2a:b0:eb:05:5c:2f:43:71:36:d7: 83:87:7e:9d:f9:11:36:9c:f4:09:8f:d4:aa:d5:d9:06:00:e6: 3f:dd:38:37:6a:2f:9a:68:af:ff:27:23:38:83:ba:8f:76:5e: 39:9c:c8:9e:a7:29:d3:7b:e6:f1:f9:c5:8a:93:94:a5:88:27: db:98:7b:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqwu31+qlEya3purOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDczMDEzMDA0MFoXDTI1MTAyODEzMDA0MFowLzEtMCsGA1UEAxMk NGU2ODlhOWItM2FiNC00YTcyLWJhNjgtZDAwYTBlZjE1Njk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotVSic2bekL2oNloL/U6PZp2sEaKvsQHoxy9 V5/95IYOUKspMB7etY9yz70ztlVbg/Th0Ck5qH/l6VLnmMkjA32mEZRINedzL50E Bgz3d9w5qmLtBWhZ16xt6UMtZf01nHOlv64Xzc08X0gA2xzRJBOz4byv4NZXRen/ EFctcexNIMVds1hrR5Lc2WYEpBsqdMJ2TQN8KKD8jg1a1rVEzpdJP99Tf+Xz7/Qm FlMPFC+3Pe7clP6ZlqETnR82RVfuQ+WMkj/p4QIx5KNzfIfDoXMoCJTp1v9NQFxE JeK+aMrpHyakhV+Me7PexANXaOX9cRaz8aRTyj0dlRagLLWhqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbpapyrMGZuJfHzWWKKylcXOsBrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYWMxYTViYmUtMmI0ZC0z MDlmLWE2ZGUtYjkwOWY2ZWZhOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBff1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPTRhvaQTOjEt0nozVFH8vvl8NGttgM89G9kKe0PXR4GwW1BwRGjsw4 l5cmGVvsi/2mxl9sSxzwWPN//f9K1Dkt4hwPN3skvil0/6g57T49jsq5lNT2cdYh fLkV8+GfRNeQx8Q828EDpNKZeMJztQvcwkvS7qUAMaBX37W98iOKBhUsfKNzPnCZ M8K3UymTMlcCtGT3Z0SFS5rzvUzIOEPOpAPsrr5jNVEGs6cRPGABOE9DK5UciB9E aLcmKrDrBVwvQ3E214OHfp35ETac9AmP1KrV2QYA5j/dODdqL5por/8nIziDuo92 XjmcyJ6nKdN75vH5xYqTlKWIJ9uYe+M= -----END CERTIFICATE-----Generated at Tue Aug 5 23:05:48 2025 by rpki-client