$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ce96f6f7-4210-3b5a-aa54-5d33a95d45b6.roa File: ce96f6f7-4210-3b5a-aa54-5d33a95d45b6.roa (raw, json) Hash identifier: xE9HkeKBLmJh9AUbOjwLpM3AqYP0FwaSR6NsCAb9EJw= Subject key identifier: 1F:92:9E:4B:FB:BE:E6:E0:76:DC:F8:F3:E2:28:B0:A4:F6:2D:09:65 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584AED7355BF6BD1480BCD177830 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ce96f6f7-4210-3b5a-aa54-5d33a95d45b6.roa Signing time: Thu 21 Aug 2025 06:59:44 +0000 ROA not before: Thu 21 Aug 2025 06:59:44 +0000 ROA not after: Wed 19 Nov 2025 07:59:44 +0000 asID: 20454 IP address blocks: 125.253.85.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ed:73:55:bf:6b:d1:48:0b:cd:17:78:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Aug 21 06:59:44 2025 GMT Not After : Nov 19 07:59:44 2025 GMT Subject: CN=2c84de8b-9ace-4b57-9f5f-52d33b8920f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:25:85:01:fb:05:28:53:9d:35:af:dc:61: fc:72:b0:2f:c3:62:2a:a6:f3:2f:b4:c7:04:d7:86: 62:f3:a7:ff:0c:63:5b:f0:4e:2f:20:d7:f5:ba:c0: 1b:c5:75:cd:8d:5b:84:51:0a:4d:1c:6f:fd:c3:6d: 38:b6:22:5a:3a:1f:9e:d7:67:73:5e:57:4f:01:4f: d4:5d:3a:3f:93:80:38:3c:e2:aa:b2:90:4c:0b:ab: 7f:e2:44:72:ca:c4:06:ff:de:67:33:19:68:4e:11: c5:d3:3f:61:cf:08:26:b2:48:80:79:2e:99:97:7a: b8:2e:ca:b7:06:63:f4:0e:ad:82:ca:8e:fb:49:60: cd:45:b8:57:eb:96:d4:c7:70:ce:00:01:5e:98:45: ac:ea:63:26:64:1d:d1:16:eb:c5:56:b5:b0:a0:df: 13:3d:75:e4:32:4b:36:f7:dd:77:d5:03:55:0a:8d: 8c:be:86:95:80:78:59:b8:8b:3a:25:04:3d:33:5a: 94:9f:5a:fe:36:a3:2f:60:d3:3d:70:9e:37:4b:81: 2b:37:b4:33:33:a3:73:6e:f2:d5:6b:26:0c:af:2b: f9:6a:e7:69:8f:78:6f:14:98:90:99:3f:3b:0f:3f: 92:0f:3f:66:27:52:81:97:cd:6d:56:59:3b:8f:f3: 24:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:92:9E:4B:FB:BE:E6:E0:76:DC:F8:F3:E2:28:B0:A4:F6:2D:09:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ce96f6f7-4210-3b5a-aa54-5d33a95d45b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:ca:51:8b:3f:f2:47:78:4c:0e:a0:c7:7d:ee:34:f2:99:6f: 57:1a:50:ea:85:fa:0a:23:83:27:a9:cc:cc:ec:87:af:16:ad: 95:a1:50:e2:24:a5:c2:95:92:95:61:1d:e8:1b:0f:2f:c2:37: be:d8:36:c3:87:a3:27:ed:be:94:13:e6:25:e5:03:cd:f5:17: c6:87:3c:db:26:e1:94:53:81:4b:0f:db:19:ef:63:e5:f4:35: 80:53:da:7c:fa:96:41:bf:db:78:7c:c8:73:05:15:dd:57:4b: f8:43:d3:c6:e5:ae:99:64:ce:51:aa:ef:3e:0e:10:4a:09:1c: ce:15:71:92:e6:1c:2d:5b:f9:e2:10:b6:49:e8:5e:ad:93:69: 0b:75:59:dd:c3:e3:0f:5d:1c:e0:14:f3:8c:c7:83:cd:80:9d: b5:6f:4e:ab:9b:08:d8:14:df:24:f4:64:b3:dc:fa:7e:bb:06: 73:d3:34:6d:35:eb:99:97:88:6a:36:b4:d2:3d:d0:e4:0c:1c: b5:c1:34:ca:f6:2d:01:5f:80:d6:d4:6f:6b:8e:15:f7:c2:c1: e4:9c:a2:0f:bf:0d:93:33:02:89:0d:be:4b:15:20:59:fb:68: 8d:c3:9d:6b:f6:2b:37:2f:09:67:7f:24:d7:04:17:d7:cb:01: 09:61:1a:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErtc1W/a9FIC80XeDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDgyMTA2NTk0NFoXDTI1MTExOTA3NTk0NFowLzEtMCsGA1UEAxMk MmM4NGRlOGItOWFjZS00YjU3LTlmNWYtNTJkMzNiODkyMGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteIlhQH7BShTnTWv3GH8crAvw2IqpvMvtMcE 14Zi86f/DGNb8E4vINf1usAbxXXNjVuEUQpNHG/9w204tiJaOh+e12dzXldPAU/U XTo/k4A4POKqspBMC6t/4kRyysQG/95nMxloThHF0z9hzwgmskiAeS6Zl3q4Lsq3 BmP0Dq2Cyo77SWDNRbhX65bUx3DOAAFemEWs6mMmZB3RFuvFVrWwoN8TPXXkMks2 99131QNVCo2MvoaVgHhZuIs6JQQ9M1qUn1r+NqMvYNM9cJ43S4ErN7QzM6NzbvLV ayYMryv5audpj3hvFJiQmT87Dz+SDz9mJ1KBl81tVlk7j/MkvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+Snkv7vubgdtz48+IosKT2LQllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvY2U5NmY2ZjctNDIxMC0z YjVhLWFhNTQtNWQzM2E5NWQ0NWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAff1VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLKUYs/8kd4TA6gx33uNPKZb1caUOqF+gojgyepzMzsh68WrZWhUOIk pcKVkpVhHegbDy/CN77YNsOHoyftvpQT5iXlA831F8aHPNsm4ZRTgUsP2xnvY+X0 NYBT2nz6lkG/23h8yHMFFd1XS/hD08blrplkzlGq7z4OEEoJHM4VcZLmHC1b+eIQ tknoXq2TaQt1Wd3D4w9dHOAU84zHg82AnbVvTqubCNgU3yT0ZLPc+n67BnPTNG01 65mXiGo2tNI90OQMHLXBNMr2LQFfgNbUb2uOFffCweScog+/DZMzAokNvksVIFn7 aI3DnWv2KzcvCWd/JNcEF9fLAQlhGkw= -----END CERTIFICATE-----Generated at Tue Nov 4 19:39:51 2025 by rpki-client