$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ce96f6f7-4210-3b5a-aa54-5d33a95d45b6.roa File: ce96f6f7-4210-3b5a-aa54-5d33a95d45b6.roa (raw, json) Hash identifier: H6oLGihpHq49HIDIcEePjJDqtZOWIe3odl76ILFk7D0= Subject key identifier: E8:E7:06:B7:98:44:4C:50:0C:C0:E5:13:BB:BA:F8:B9:8E:6A:1E:CE Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584CAE571F73948166FFF7779550 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ce96f6f7-4210-3b5a-aa54-5d33a95d45b6.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 20454 IP address blocks: 125.253.85.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:1f:73:94:81:66:ff:f7:77:95:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b14f387b-cc4b-4627-84e6-fdc7a87bd1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:86:65:53:c6:24:73:35:09:75:87:e6:b9:b4: 29:0c:cb:bd:95:79:1c:e2:fa:07:f8:a4:36:69:87: c2:4c:ad:99:db:6a:90:ad:e7:92:0c:a1:7c:6b:db: 27:df:08:d1:a6:27:55:2a:1c:ec:8b:90:cb:44:8a: c7:7f:39:e8:c9:1f:4e:c2:44:bf:6b:53:b7:79:43: 2e:67:55:b5:17:08:33:43:6e:93:52:90:3a:19:b5: 72:1e:80:f4:4a:8f:36:b2:a9:d5:ed:bd:64:e2:dd: 5a:a1:7c:0d:68:9a:88:ee:62:5a:ec:f1:9d:ec:ce: 62:5d:8c:0e:61:aa:ad:51:1e:86:49:0d:ac:fe:58: af:55:f6:94:d3:56:c0:b3:ea:5b:31:57:2c:bf:e5: 5f:6e:17:18:3b:14:a9:87:cb:3d:6d:88:30:a3:86: 40:07:41:be:f9:86:55:40:cf:07:ef:2c:aa:60:8d: e7:79:0a:df:fe:35:48:de:09:07:02:b6:e6:ba:8f: 77:49:2f:d0:19:b0:62:c6:fe:90:e6:ed:5e:e1:b4: ce:f0:4c:ce:df:80:34:05:fa:ca:d1:eb:17:e4:ae: fd:3a:3e:36:3b:96:7f:67:75:ae:63:b6:94:7e:51: 3f:60:68:d2:fd:de:ac:4d:4f:c8:1f:24:fb:7e:96: 96:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E7:06:B7:98:44:4C:50:0C:C0:E5:13:BB:BA:F8:B9:8E:6A:1E:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ce96f6f7-4210-3b5a-aa54-5d33a95d45b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:ef:18:3f:63:3c:7f:97:93:fb:c6:7a:19:93:f7:3c:fc:c6: 0c:9a:fa:c5:1f:33:9d:d4:36:c1:7f:a6:3f:0c:c0:b6:e6:a2: 66:78:36:55:db:10:98:dc:d1:44:ea:dc:d9:4c:31:49:f2:a4: 41:6a:1f:8a:dc:a4:3e:8c:e7:5c:b2:cc:6e:46:93:1c:cd:1b: fb:88:f2:df:1b:32:f2:0c:a6:73:53:d1:36:b9:26:ec:29:e9: 1b:57:88:f9:47:c9:a9:06:c0:9b:b7:1c:29:2e:a9:e9:60:cb: 32:7e:07:f7:46:76:60:9a:15:d2:c5:53:51:54:c3:a3:af:00: c2:f3:dd:05:c0:6d:d6:50:a8:72:fa:01:bc:1e:08:4d:5f:6d: 27:63:ab:f4:27:78:c5:a8:33:b8:e1:03:f8:bc:fb:12:6f:29: 6d:67:cc:5d:87:f5:60:d2:da:fe:ad:71:2b:06:b1:cf:bb:7f: 58:db:06:8e:59:98:c5:23:c1:38:d0:18:c7:01:cb:b5:fb:67: 0e:04:e1:f0:60:89:bc:5c:80:61:69:f2:d3:42:51:40:f4:68: bc:1e:d2:e3:cb:63:d2:e1:a4:39:97:43:44:03:54:fd:46:af: b5:4a:8d:13:44:26:15:f2:93:ac:77:ec:63:1f:87:97:e4:37: 0c:0c:b4:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVx9zlIFm//d3lVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjE0ZjM4N2ItY2M0Yi00NjI3LTg0ZTYtZmRjN2E4N2JkMWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioZlU8YkczUJdYfmubQpDMu9lXkc4voH+KQ2 aYfCTK2Z22qQreeSDKF8a9sn3wjRpidVKhzsi5DLRIrHfznoyR9OwkS/a1O3eUMu Z1W1FwgzQ26TUpA6GbVyHoD0So82sqnV7b1k4t1aoXwNaJqI7mJa7PGd7M5iXYwO YaqtUR6GSQ2s/livVfaU01bAs+pbMVcsv+VfbhcYOxSph8s9bYgwo4ZAB0G++YZV QM8H7yyqYI3neQrf/jVI3gkHArbmuo93SS/QGbBixv6Q5u1e4bTO8EzO34A0BfrK 0esX5K79Oj42O5Z/Z3WuY7aUflE/YGjS/d6sTU/IHyT7fpaWjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjnBreYRExQDMDlE7u6+LmOah7OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvY2U5NmY2ZjctNDIxMC0z YjVhLWFhNTQtNWQzM2E5NWQ0NWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAff1VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/vGD9jPH+Xk/vGehmT9zz8xgya+sUfM53UNsF/pj8MwLbmomZ4NlXb EJjc0UTq3NlMMUnypEFqH4rcpD6M51yyzG5GkxzNG/uI8t8bMvIMpnNT0Ta5Juwp 6RtXiPlHyakGwJu3HCkuqelgyzJ+B/dGdmCaFdLFU1FUw6OvAMLz3QXAbdZQqHL6 AbweCE1fbSdjq/QneMWoM7jhA/i8+xJvKW1nzF2H9WDS2v6tcSsGsc+7f1jbBo5Z mMUjwTjQGMcBy7X7Zw4E4fBgibxcgGFp8tNCUUD0aLwe0uPLY9LhpDmXQ0QDVP1G r7VKjRNEJhXyk6x37GMfh5fkNwwMtII= -----END CERTIFICATE-----Generated at Mon Mar 2 06:26:54 2026 by rpki-client