$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c68aa7f4-7008-3008-9c59-e65de9ce99f2.roa File: c68aa7f4-7008-3008-9c59-e65de9ce99f2.roa (raw, json) Hash identifier: cCv4DYPe25R4gIbKhiMA0w7Fcy95jFea43gC2BtxWmI= Subject key identifier: F2:57:8E:28:42:A5:8A:B2:17:6F:44:65:D5:6F:81:A5:B0:65:8E:87 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584CACF1BF1729CFDF61CDA46300 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c68aa7f4-7008-3008-9c59-e65de9ce99f2.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 19437 IP address blocks: 125.253.67.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:bf:17:29:cf:df:61:cd:a4:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=f11825eb-5457-450d-ac10-64c7b757fdfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:81:5c:29:7e:6e:f6:1a:ce:25:cc:97:94:6d: 7a:12:5e:2e:13:2f:98:21:7f:c9:42:60:f9:77:9c: 45:62:26:27:8e:02:c5:93:bf:80:bc:5b:24:9c:8b: ac:48:05:94:ae:bb:81:db:d4:d8:32:e6:ca:2a:2a: 54:a1:0f:d6:d9:8b:d8:e5:df:eb:42:a6:a9:8c:1c: 9c:94:c4:b5:42:20:77:30:7b:e5:f3:4f:db:53:98: 1e:4b:c9:ed:06:8a:23:b9:88:97:95:fc:98:19:c5: 38:6a:ee:a5:de:ed:68:84:45:95:ee:1a:6a:8b:1d: 1e:8c:0e:ec:30:3f:02:68:d4:0c:4e:5b:cb:9b:ab: bc:f3:48:cc:e7:e2:90:89:cb:2d:0f:4b:6e:77:5d: b5:fd:9f:9e:c8:36:f7:55:94:c7:2a:1f:c3:e3:74: 2a:dd:54:cd:c2:e5:3f:a3:7e:38:14:3d:7b:c4:74: 6b:02:a2:e9:89:42:9d:1c:c2:92:bd:dd:50:9b:e2: 95:a8:b5:17:dc:4f:54:d4:12:9b:a2:0a:ae:29:6e: 4d:91:15:67:42:27:1d:29:b5:fa:c1:77:5e:51:ff: 49:3f:f2:84:44:ca:68:f1:94:71:df:10:f2:b9:db: a3:45:1e:be:05:80:81:f1:13:9a:02:4b:e9:db:69: f0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:57:8E:28:42:A5:8A:B2:17:6F:44:65:D5:6F:81:A5:B0:65:8E:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/c68aa7f4-7008-3008-9c59-e65de9ce99f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:84:d0:f5:5a:05:fd:77:da:12:29:99:73:36:d5:cc:33:00: e2:6a:6e:57:ca:20:c8:9d:24:a9:9a:7d:6c:25:a6:67:40:9d: be:3f:e3:06:bd:d6:38:01:e9:6c:90:3e:5b:d7:47:f1:fa:c1: 41:ad:da:52:e0:bf:4e:1d:22:46:90:eb:09:a0:97:6a:c7:ba: 66:7d:a2:25:f2:16:cc:5c:f4:63:f0:10:41:55:15:a6:f7:d0: f7:f5:c8:e6:65:24:e8:5a:c4:07:4c:f5:52:8e:07:76:94:a8: 82:c0:07:e9:be:32:64:16:e3:cc:14:92:d0:12:df:fa:34:e1: 4b:62:3f:27:c0:0a:b5:32:e4:e8:36:03:c0:1c:94:f6:f5:09: 50:2f:95:e6:b9:65:8a:b3:03:c7:95:d1:3d:f4:a7:29:51:b8: 0f:38:a6:a4:f1:a4:4a:22:37:b3:c7:b1:72:4d:01:59:d3:5a: 14:e2:92:1d:b1:c2:92:c4:95:20:e4:23:a7:f3:dd:ee:b6:be: 49:3f:57:62:30:5e:1b:8c:b0:fd:67:99:8b:63:48:04:6d:54: b9:a1:52:01:db:97:79:6b:ef:d0:38:a3:27:61:0a:6e:4e:e6: c3:00:49:07:d7:11:2b:85:f3:79:6c:88:b4:41:0f:bb:6c:30: e8:a2:67:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8b8XKc/fYc2kYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk ZjExODI1ZWItNTQ1Ny00NTBkLWFjMTAtNjRjN2I3NTdmZGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYFcKX5u9hrOJcyXlG16El4uEy+YIX/JQmD5 d5xFYiYnjgLFk7+AvFsknIusSAWUrruB29TYMubKKipUoQ/W2YvY5d/rQqapjByc lMS1QiB3MHvl80/bU5geS8ntBoojuYiXlfyYGcU4au6l3u1ohEWV7hpqix0ejA7s MD8CaNQMTlvLm6u880jM5+KQicstD0tud121/Z+eyDb3VZTHKh/D43Qq3VTNwuU/ o344FD17xHRrAqLpiUKdHMKSvd1Qm+KVqLUX3E9U1BKbogquKW5NkRVnQicdKbX6 wXdeUf9JP/KERMpo8ZRx3xDyudujRR6+BYCB8ROaAkvp22nwhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJXjihCpYqyF29EZdVvgaWwZY6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYzY4YWE3ZjQtNzAwOC0z MDA4LTljNTktZTY1ZGU5Y2U5OWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAff1DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiE0PVaBf132hIpmXM21cwzAOJqblfKIMidJKmafWwlpmdAnb4/4wa9 1jgB6WyQPlvXR/H6wUGt2lLgv04dIkaQ6wmgl2rHumZ9oiXyFsxc9GPwEEFVFab3 0Pf1yOZlJOhaxAdM9VKOB3aUqILAB+m+MmQW48wUktAS3/o04UtiPyfACrUy5Og2 A8AclPb1CVAvlea5ZYqzA8eV0T30pylRuA84pqTxpEoiN7PHsXJNAVnTWhTikh2x wpLElSDkI6fz3e62vkk/V2IwXhuMsP1nmYtjSARtVLmhUgHbl3lr79A4oydhCm5O 5sMASQfXESuF83lsiLRBD7tsMOiiZw0= -----END CERTIFICATE-----Generated at Mon Mar 2 06:49:50 2026 by rpki-client