$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/da2f45ae-85e1-393c-a63b-9abdc2736515.roa File: da2f45ae-85e1-393c-a63b-9abdc2736515.roa (raw, json) Hash identifier: dD+ZmG6ufRvbbSiq2uyAtw5Q1zb/GITcJJYNoQdT6A0= Subject key identifier: 19:4A:D3:FB:F7:05:36:14:8F:DF:77:44:A0:75:24:59:6A:26:D4:AC Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584B99D79B1089B5EBE5B1CB5F00 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/da2f45ae-85e1-393c-a63b-9abdc2736515.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 19437 IP address blocks: 125.253.89.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:9b:10:89:b5:eb:e5:b1:cb:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=fc8bac47-a9fe-4005-a34c-337edfe3ec7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f7:0e:0a:de:18:5e:6c:2c:71:11:c1:30:cf: 61:e7:88:44:2d:4d:d9:bd:74:7c:f2:21:7b:9d:21: f2:00:58:66:fd:b0:24:de:84:d8:88:05:da:c4:59: 3b:ca:1c:9a:2b:00:d1:c2:aa:1b:db:16:e4:b2:f1: 4a:0f:de:3b:cd:c1:92:b1:4d:f0:9d:0f:77:d7:37: e5:93:0c:45:0d:59:64:7e:70:13:43:c8:e5:d7:6d: e7:37:1b:60:40:fa:e4:b5:c5:07:3d:7b:41:bf:13: 25:50:9a:fd:cd:16:8a:27:54:21:28:cb:45:cf:ac: 47:1f:ad:65:c2:f6:56:c7:fa:44:47:9a:0a:2c:01: 3d:4c:e6:93:83:24:5d:13:80:80:aa:21:cc:aa:f6: 99:d2:53:14:0b:b6:02:5e:31:bd:c1:94:14:0b:ef: 61:4f:37:17:bf:f7:da:17:1e:63:f4:7f:4d:b5:60: 40:7f:f6:f6:ca:cf:96:97:7a:49:60:f5:a3:15:eb: 1f:59:0e:89:e5:9f:0c:f1:b1:b4:ac:52:cd:dc:21: 00:b3:9b:99:c6:b4:b3:a5:3d:72:0f:10:29:88:28: 4e:5a:73:74:72:35:fe:ca:a3:0f:6f:2f:e3:ff:52: c4:41:34:ce:35:6b:f7:f9:10:2b:c1:20:e1:e8:6a: c2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4A:D3:FB:F7:05:36:14:8F:DF:77:44:A0:75:24:59:6A:26:D4:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/da2f45ae-85e1-393c-a63b-9abdc2736515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:3b:9d:35:6e:02:b6:32:87:b6:24:ca:33:cc:96:89:82:78: 1c:8b:bf:0a:e4:7e:f6:c4:1a:4c:eb:3b:81:5d:23:fc:d0:ee: 6f:f1:e0:7d:fe:c0:c1:70:90:8b:67:35:96:a2:cb:29:ef:34: 51:16:ab:28:75:cb:27:f5:d4:ad:63:54:82:10:78:81:65:68: 11:30:01:38:19:57:15:8d:26:8b:ad:70:a8:e3:72:88:77:bd: c9:d3:6b:61:68:62:8b:8f:7f:fe:40:f9:8a:eb:a0:e0:7d:39: 3a:3a:87:be:d1:1d:71:ee:1b:eb:b7:92:9b:ff:48:78:d0:c0: b3:fe:88:fc:38:7b:fd:7b:7f:25:5c:f3:28:b3:b5:48:8a:e0: 1a:5a:d5:95:23:67:d2:39:60:db:97:14:2f:1d:df:01:62:b9: 9a:83:a4:c8:3d:0f:09:92:50:84:37:9b:ee:d1:57:92:13:0b: 1f:a6:5b:a3:67:cd:f3:7a:43:57:56:2b:10:57:e4:50:b3:0c: bb:6a:60:05:fe:c6:41:b4:7f:0f:fa:fb:f7:76:f3:12:c6:72: be:cd:dc:52:a8:e5:c4:8c:af:b0:2b:1c:6c:5c:c7:73:34:1c: b9:6c:75:f1:64:72:0e:29:04:9b:68:05:78:69:7e:a4:a6:b2: 8a:fb:4b:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15sQibXr5bHLXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZmM4YmFjNDctYTlmZS00MDA1LWEzNGMtMzM3ZWRmZTNlYzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPcOCt4YXmwscRHBMM9h54hELU3ZvXR88iF7 nSHyAFhm/bAk3oTYiAXaxFk7yhyaKwDRwqob2xbksvFKD947zcGSsU3wnQ931zfl kwxFDVlkfnATQ8jl123nNxtgQPrktcUHPXtBvxMlUJr9zRaKJ1QhKMtFz6xHH61l wvZWx/pER5oKLAE9TOaTgyRdE4CAqiHMqvaZ0lMUC7YCXjG9wZQUC+9hTzcXv/fa Fx5j9H9NtWBAf/b2ys+Wl3pJYPWjFesfWQ6J5Z8M8bG0rFLN3CEAs5uZxrSzpT1y DxApiChOWnN0cjX+yqMPby/j/1LEQTTONWv3+RArwSDh6GrCGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlK0/v3BTYUj993RKB1JFlqJtSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvZGEyZjQ1YWUtODVlMS0z OTNjLWE2M2ItOWFiZGMyNzM2NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAff1ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI87nTVuArYyh7YkyjPMlomCeByLvwrkfvbEGkzrO4FdI/zQ7m/x4H3+ wMFwkItnNZaiyynvNFEWqyh1yyf11K1jVIIQeIFlaBEwATgZVxWNJoutcKjjcoh3 vcnTa2FoYouPf/5A+YrroOB9OTo6h77RHXHuG+u3kpv/SHjQwLP+iPw4e/17fyVc 8yiztUiK4Bpa1ZUjZ9I5YNuXFC8d3wFiuZqDpMg9DwmSUIQ3m+7RV5ITCx+mW6Nn zfN6Q1dWKxBX5FCzDLtqYAX+xkG0fw/6+/d28xLGcr7N3FKo5cSMr7ArHGxcx3M0 HLlsdfFkcg4pBJtoBXhpfqSmsor7S6g= -----END CERTIFICATE-----Generated at Tue Nov 4 19:46:52 2025 by rpki-client