$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d0ad8b12-f500-35ad-bbab-c68990fd814c.roa File: d0ad8b12-f500-35ad-bbab-c68990fd814c.roa (raw, json) Hash identifier: sFK10RI1xmtVmc0y4JwrfmMRe7NCzb1keEZ6T9bDODo= Subject key identifier: A3:3F:54:AE:70:DC:46:A4:25:5B:11:F7:4A:AC:08:36:31:D7:B9:A7 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584AB0BB74032E0ACBE3A5ED7800 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d0ad8b12-f500-35ad-bbab-c68990fd814c.roa Signing time: Wed 30 Jul 2025 13:00:40 +0000 ROA not before: Wed 30 Jul 2025 13:00:40 +0000 ROA not after: Tue 28 Oct 2025 13:00:40 +0000 asID: 20454 IP address blocks: 125.253.70.0/23 maxlen: 32 125.253.72.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b0:bb:74:03:2e:0a:cb:e3:a5:ed:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Jul 30 13:00:40 2025 GMT Not After : Oct 28 13:00:40 2025 GMT Subject: CN=984f838f-04e8-4330-8387-0be96f9ec68b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:67:38:0c:57:f3:2b:b1:55:56:74:3e:6f:81: 9c:2b:8c:ed:01:1f:a0:0f:e7:4f:08:a1:58:7b:c9: aa:e5:5e:d7:86:39:2a:ee:64:e8:b0:42:ad:c6:00: 7e:01:9b:8f:a9:30:9e:4b:ee:d0:4d:d2:da:d8:05: 57:af:52:c7:ce:b5:4e:01:5d:7d:7f:f6:30:fa:87: 10:00:df:5e:b0:bf:1c:58:ad:b1:84:d4:ee:f8:b8: bc:5c:a0:d9:74:3a:94:67:11:89:c0:f2:6c:bf:85: 92:b1:ea:9d:44:db:74:6c:39:89:c3:cc:34:49:21: 35:c2:d0:d3:b1:47:ff:b6:b7:9d:a4:e6:9a:6c:86: a2:85:b7:f1:11:87:ec:81:b4:75:c1:3c:b9:85:98: a0:72:7f:42:77:02:10:61:c9:76:76:c4:14:ba:f8: 2a:49:01:c1:80:0e:aa:c4:b5:ea:30:a0:d2:83:ce: f9:7a:e9:8a:49:d6:12:06:09:2b:2c:64:10:06:55: dd:a0:8a:0b:9f:cf:68:64:19:4a:a2:8a:55:8a:31: ce:1d:8e:69:d6:8a:fd:d3:50:69:7f:3b:f0:98:ca: da:66:80:29:4f:e8:53:3a:30:54:55:f2:fa:37:de: 85:49:02:10:0b:02:77:70:b5:f4:3b:9e:f2:e5:7f: 9d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3F:54:AE:70:DC:46:A4:25:5B:11:F7:4A:AC:08:36:31:D7:B9:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d0ad8b12-f500-35ad-bbab-c68990fd814c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.70.0-125.253.79.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:8b:16:b5:de:8b:45:91:fc:05:49:00:2a:fe:18:d9:77:4c: 9a:aa:cc:07:43:a0:b8:83:34:18:6c:b6:5d:84:07:1a:b3:7b: b1:01:42:92:c3:85:52:b8:18:70:10:aa:16:05:92:fb:10:3c: 9c:2f:b6:f9:e4:77:33:04:f4:98:55:e2:56:c9:ad:6d:3a:0b: 63:fe:95:85:88:19:8c:ab:6e:f7:9e:31:06:32:af:e1:4a:7f: 00:2d:87:99:90:3b:06:7f:86:12:27:0e:25:d9:fe:66:fa:ca: 74:d9:a8:f8:db:48:cc:0b:3c:64:fb:03:ef:a4:e3:91:81:73: fd:f8:77:96:84:90:ac:0f:e6:cc:37:0e:20:90:3b:55:a0:d9: ba:00:97:be:20:dc:39:af:cf:c9:45:96:b1:54:0f:70:a2:d2: af:b8:a0:08:31:7d:ae:aa:06:c8:3d:46:8b:86:95:13:b6:f1: 94:61:9b:49:4d:36:8d:b5:e6:51:5b:1e:67:fb:b4:f9:13:03: 69:f9:e2:9b:1a:b0:de:d3:4e:13:e3:08:a7:e5:4a:d9:df:7a: 93:5a:af:83:43:7a:40:be:97:3d:5f:aa:e0:5f:61:34:0e:42: 4b:9d:2b:24:46:b1:ee:b8:e0:ce:5f:37:63:f6:51:14:94:a5: 71:a5:a2:a0 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEqwu3QDLgrL46XteAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDczMDEzMDA0MFoXDTI1MTAyODEzMDA0MFowLzEtMCsGA1UEAxMk OTg0ZjgzOGYtMDRlOC00MzMwLTgzODctMGJlOTZmOWVjNjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Gc4DFfzK7FVVnQ+b4GcK4ztAR+gD+dPCKFY e8mq5V7Xhjkq7mTosEKtxgB+AZuPqTCeS+7QTdLa2AVXr1LHzrVOAV19f/Yw+ocQ AN9esL8cWK2xhNTu+Li8XKDZdDqUZxGJwPJsv4WSseqdRNt0bDmJw8w0SSE1wtDT sUf/tredpOaabIaihbfxEYfsgbR1wTy5hZigcn9CdwIQYcl2dsQUuvgqSQHBgA6q xLXqMKDSg875eumKSdYSBgkrLGQQBlXdoIoLn89oZBlKoopVijHOHY5p1or901Bp fzvwmMraZoApT+hTOjBUVfL6N96FSQIQCwJ3cLX0O57y5X+dhQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFKM/VK5w3EakJVsR90qsCDYx17mnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvZDBhZDhiMTItZjUwMC0z NWFkLWJiYWItYzY4OTkwZmQ4MTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAF9/UYD BAR9/UAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEARIsWtd6LRZH8BUkAKv4Y2XdMmqrMB0OguIM0GGy2XYQH GrN7sQFCksOFUrgYcBCqFgWS+xA8nC+2+eR3MwT0mFXiVsmtbToLY/6VhYgZjKtu 954xBjKv4Up/AC2HmZA7Bn+GEicOJdn+ZvrKdNmo+NtIzAs8ZPsD76TjkYFz/fh3 loSQrA/mzDcOIJA7VaDZugCXviDcOa/PyUWWsVQPcKLSr7igCDF9rqoGyD1Gi4aV E7bxlGGbSU02jbXmUVseZ/u0+RMDafnimxqw3tNOE+MIp+VK2d96k1qvg0N6QL6X PV+q4F9hNA5CS50rJEax7rjgzl83Y/ZRFJSlcaWioA== -----END CERTIFICATE-----Generated at Wed Aug 6 12:30:53 2025 by rpki-client