$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ada9fd0e-2552-3a0e-ba28-a12466d61d01.roa File: ada9fd0e-2552-3a0e-ba28-a12466d61d01.roa (raw, json) Hash identifier: GITPVoQEfMKZA8+t5nE68+r/xsBj2mQoor5JpztBDag= Subject key identifier: 14:31:BA:03:7B:03:C4:DD:09:3F:9D:32:B6:9F:B7:36:60:34:8A:0F Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584AE46129F7A95A71CB6E62D280 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ada9fd0e-2552-3a0e-ba28-a12466d61d01.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 19437 IP address blocks: 125.253.87.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:29:f7:a9:5a:71:cb:6e:62:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=6aff1535-5b23-404d-ad69-451162646f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cb:cf:88:31:ea:63:39:17:65:5e:76:ca:da: 31:8c:fb:9c:38:10:58:6f:ab:4b:34:2e:bd:fe:cb: b3:9a:a2:fb:20:40:be:06:20:e5:87:4e:49:92:b6: 16:ca:b4:2e:b6:42:10:01:27:47:e2:e7:94:75:20: f0:7a:31:cc:1d:a2:78:cd:2a:ad:6d:9e:36:94:c0: aa:04:e9:c9:17:8a:df:72:e3:86:c7:cd:76:0b:ee: e5:5e:e1:59:de:ab:37:e1:5c:01:29:60:22:26:ec: 5e:16:85:a7:fe:e1:fe:f8:37:d8:ad:71:3c:25:c6: 4a:ab:e0:cb:ce:7c:56:68:62:43:90:ee:2a:08:fc: 5d:25:f1:70:1d:74:f1:4c:60:06:4a:aa:53:03:48: 75:a3:71:23:cc:04:6f:49:df:21:30:a8:ad:54:9e: 8f:c1:3d:ec:95:8a:e9:8a:33:ee:f8:b7:76:27:d6: 9d:d6:47:32:fc:bd:70:4c:7b:61:2f:cd:dd:39:cf: 69:8c:75:99:30:b0:bd:17:c2:8d:d4:ef:93:49:7d: b5:0f:40:e8:62:9e:e4:66:f1:45:11:c7:0e:7e:3f: 79:8f:b7:bb:d5:da:af:91:78:20:8d:7b:ea:2d:dc: 3e:f6:13:fa:74:2e:3c:5f:5d:8b:31:3e:7e:ab:d7: b6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:31:BA:03:7B:03:C4:DD:09:3F:9D:32:B6:9F:B7:36:60:34:8A:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ada9fd0e-2552-3a0e-ba28-a12466d61d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:47:20:ce:45:ea:2f:4f:ea:82:7c:f7:88:8e:9f:6c:db:46: 6c:34:d9:e4:28:b5:20:6c:35:bc:5a:75:a1:ea:7a:24:f1:a8: 35:64:ec:49:b7:30:f5:71:46:6a:d8:9c:fb:02:a0:f4:cc:d5: df:2e:1c:4c:7a:f0:cc:54:1e:18:da:e7:7c:40:ce:87:88:cf: f1:a5:be:14:c0:e8:a3:33:f2:11:45:5c:15:05:5f:23:27:e7: 86:73:dd:02:fd:ee:0b:04:f9:22:5f:a5:6a:23:36:1f:3a:5d: 1d:ff:09:24:29:a3:00:70:62:26:92:61:9a:e6:d8:86:15:cb: 15:4f:07:78:36:75:56:6d:1c:cd:fd:37:66:df:3c:39:28:3d: f1:d5:02:d9:25:8b:7d:ae:12:2d:ee:82:4b:9e:22:b6:af:73: 20:d7:15:23:67:92:5a:ca:fb:8e:94:f9:8d:91:ec:76:0e:57: 25:f3:dd:19:33:88:1c:63:5f:de:7a:5c:55:2e:be:da:9b:97: 9f:53:5a:9f:df:b9:86:0c:07:71:82:f7:11:b0:f6:f8:6b:2d: cc:1d:13:85:b9:dd:5d:de:3f:ef:be:22:1e:f7:1f:25:5f:1c: a0:1d:06:6e:93:0e:da:f7:04:10:5c:0b:a5:84:16:91:d3:bd: a5:8d:22:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSn3qVpxy25i0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NmFmZjE1MzUtNWIyMy00MDRkLWFkNjktNDUxMTYyNjQ2ZjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1svPiDHqYzkXZV52ytoxjPucOBBYb6tLNC69 /suzmqL7IEC+BiDlh05JkrYWyrQutkIQASdH4ueUdSDwejHMHaJ4zSqtbZ42lMCq BOnJF4rfcuOGx812C+7lXuFZ3qs34VwBKWAiJuxeFoWn/uH++DfYrXE8JcZKq+DL znxWaGJDkO4qCPxdJfFwHXTxTGAGSqpTA0h1o3EjzARvSd8hMKitVJ6PwT3slYrp ijPu+Ld2J9ad1kcy/L1wTHthL83dOc9pjHWZMLC9F8KN1O+TSX21D0DoYp7kZvFF EccOfj95j7e71dqvkXggjXvqLdw+9hP6dC48X12LMT5+q9e2HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQxugN7A8TdCT+dMraftzZgNIoPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYWRhOWZkMGUtMjU1Mi0z YTBlLWJhMjgtYTEyNDY2ZDYxZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAff1XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRHIM5F6i9P6oJ894iOn2zbRmw02eQotSBsNbxadaHqeiTxqDVk7Em3 MPVxRmrYnPsCoPTM1d8uHEx68MxUHhja53xAzoeIz/GlvhTA6KMz8hFFXBUFXyMn 54Zz3QL97gsE+SJfpWojNh86XR3/CSQpowBwYiaSYZrm2IYVyxVPB3g2dVZtHM39 N2bfPDkoPfHVAtkli32uEi3ugkueIravcyDXFSNnklrK+46U+Y2R7HYOVyXz3Rkz iBxjX956XFUuvtqbl59TWp/fuYYMB3GC9xGw9vhrLcwdE4W53V3eP+++Ih73HyVf HKAdBm6TDtr3BBBcC6WEFpHTvaWNIlY= -----END CERTIFICATE-----Generated at Tue Nov 4 19:41:26 2025 by rpki-client