$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/066ef50a-4853-3715-b6ee-33eef2ad050f.roa File: 066ef50a-4853-3715-b6ee-33eef2ad050f.roa (raw, json) Hash identifier: oy0AkHw9U2zjFkXZPRTGTpXkpiOKFtbjtIFV2UClWKE= Subject key identifier: 26:0D:89:1C:5D:87:51:0C:11:B9:2D:3A:F8:9D:83:9C:77:61:26:D6 Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584B477C9F2E191BA22DCDA69080 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/066ef50a-4853-3715-b6ee-33eef2ad050f.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 20454 IP address blocks: 125.253.86.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:9f:2e:19:1b:a2:2d:cd:a6:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=c28f291e-26f2-4861-a047-e5cfa212d7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c4:ba:22:c9:6e:5e:23:7f:55:61:79:a9:37: cd:d0:cf:50:bd:c8:f3:9d:31:18:50:ff:32:44:9e: de:7b:a7:7d:93:ec:74:e6:65:6b:93:9b:67:a0:ac: 66:39:95:be:1c:86:19:52:89:85:58:7b:6b:3d:79: a5:35:6c:8d:fb:49:d4:0d:86:11:cc:6c:45:2a:6c: 4b:88:ad:aa:23:8b:66:c7:4c:67:7f:81:f1:5d:cb: cd:b5:c8:1d:27:4e:48:f6:a8:59:fb:20:a0:db:e3: 6c:1f:fe:49:79:5a:d2:83:5c:97:bb:2d:ad:cb:96: 5a:88:7d:f2:63:1d:0f:7b:94:a6:9d:f5:a3:71:e2: 66:97:03:4e:7d:83:b1:a3:8d:f8:2e:25:30:f4:c3: 3a:46:0b:8a:41:3f:77:1b:4b:82:bb:52:4e:bd:b3: 98:18:c4:50:d7:2a:9c:11:70:b1:12:53:8f:93:61: b4:ca:6a:84:2f:50:c1:5f:f9:e9:39:ff:c0:a3:32: da:2d:9c:f0:9b:8e:6f:ea:5e:fa:df:a0:5a:ed:9d: 30:a1:01:5c:7b:47:37:55:e6:e6:76:19:07:26:05: fc:89:3f:23:9a:d7:ed:56:a2:ac:ca:1a:fe:63:9c: 70:ec:32:72:1f:b3:00:ee:41:ff:ba:df:11:18:89: c8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:0D:89:1C:5D:87:51:0C:11:B9:2D:3A:F8:9D:83:9C:77:61:26:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/066ef50a-4853-3715-b6ee-33eef2ad050f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:fc:fc:64:b2:90:b7:76:58:d8:c4:76:99:97:c5:6d:07:45: 82:9a:a4:af:2c:df:37:6f:98:97:42:32:17:22:48:d5:0d:fc: 47:af:45:6d:0f:94:14:c3:c7:3d:72:b4:8b:56:31:e1:60:82: 3c:a8:cc:bd:e8:d8:9c:ee:36:84:b7:9e:aa:29:2e:4b:2d:44: 62:97:08:03:f6:d6:cf:e2:ee:fb:ce:ef:e9:ae:71:d1:46:21: a1:92:50:a9:88:04:6d:c7:8e:54:a5:f2:05:0d:fb:9a:68:0f: f9:00:cf:24:3a:95:05:4b:47:ed:36:db:d6:49:9c:27:05:e8: 80:9e:51:22:ce:c2:c8:78:92:0e:46:6e:a0:02:89:fc:4d:72: 01:09:1f:10:c2:1f:51:6e:b6:3d:fd:bb:11:59:65:48:f6:67: 3c:a1:15:1b:a6:3d:45:f7:9d:e5:fb:97:b8:80:73:11:ab:25: 00:37:68:af:6c:47:70:fd:85:d9:76:0a:38:43:9b:55:09:2e: a4:0e:3c:07:1e:f2:08:fb:8b:f7:97:fc:a6:d4:25:e6:a6:7f: 5b:ec:fb:a0:50:cc:bb:e5:35:4a:c9:3b:a2:36:96:63:bf:7b: 08:24:56:51:43:36:19:59:0e:31:12:f0:7c:94:41:6d:42:9d: 6d:8a:a4:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJ8uGRuiLc2mkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk YzI4ZjI5MWUtMjZmMi00ODYxLWEwNDctZTVjZmEyMTJkN2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cS6IsluXiN/VWF5qTfN0M9QvcjznTEYUP8y RJ7ee6d9k+x05mVrk5tnoKxmOZW+HIYZUomFWHtrPXmlNWyN+0nUDYYRzGxFKmxL iK2qI4tmx0xnf4HxXcvNtcgdJ05I9qhZ+yCg2+NsH/5JeVrSg1yXuy2ty5ZaiH3y Yx0Pe5SmnfWjceJmlwNOfYOxo434LiUw9MM6RguKQT93G0uCu1JOvbOYGMRQ1yqc EXCxElOPk2G0ymqEL1DBX/npOf/AozLaLZzwm45v6l7636Ba7Z0woQFce0c3Vebm dhkHJgX8iT8jmtftVqKsyhr+Y5xw7DJyH7MA7kH/ut8RGInIxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYNiRxdh1EMEbktOvidg5x3YSbWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvMDY2ZWY1MGEtNDg1My0z NzE1LWI2ZWUtMzNlZWYyYWQwNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAff1WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGj8/GSykLd2WNjEdpmXxW0HRYKapK8s3zdvmJdCMhciSNUN/EevRW0P lBTDxz1ytItWMeFggjyozL3o2JzuNoS3nqopLkstRGKXCAP21s/i7vvO7+mucdFG IaGSUKmIBG3HjlSl8gUN+5poD/kAzyQ6lQVLR+0229ZJnCcF6ICeUSLOwsh4kg5G bqACifxNcgEJHxDCH1Futj39uxFZZUj2ZzyhFRumPUX3neX7l7iAcxGrJQA3aK9s R3D9hdl2CjhDm1UJLqQOPAce8gj7i/eX/KbUJeamf1vs+6BQzLvlNUrJO6I2lmO/ ewgkVlFDNhlZDjES8HyUQW1CnW2KpOU= -----END CERTIFICATE-----Generated at Fri Oct 10 20:19:49 2025 by rpki-client