$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/6cdb3978-ee67-3d76-8c5f-204f6a98285d.roa File: 6cdb3978-ee67-3d76-8c5f-204f6a98285d.roa (raw, json) Hash identifier: 2V0z+tKjaLgXz3H5OGo4rQAu7pGEqF3j5LLDgLokBV4= Subject key identifier: 29:D5:F3:10:41:63:49:07:67:66:CC:35:C0:9C:F1:08:20:5E:CA:2A Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584B5F3724745E3A8D69666CBD60 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/6cdb3978-ee67-3d76-8c5f-204f6a98285d.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 59210 IP address blocks: 125.253.90.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:24:74:5e:3a:8d:69:66:6c:bd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=9c1ce64d-f4a1-4795-89d8-b0daff2741ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:fd:7c:14:2d:43:54:de:18:51:93:ba:bd: 97:8d:40:90:d4:c2:f1:7c:25:4d:03:75:58:74:b1: 24:f2:87:40:d3:48:ed:32:02:94:6b:a5:7a:10:91: fc:47:37:5a:52:fc:a3:4c:d6:0e:e1:03:03:b1:19: 00:82:f9:0e:d6:dc:1d:b0:d3:b6:87:29:4d:5f:4e: 9b:56:d5:95:75:4a:c5:e7:83:f8:dc:38:da:a6:50: e9:9a:d1:23:5e:15:c6:49:76:37:9f:df:9e:92:97: c0:6d:3f:6a:f9:91:a4:fc:37:f6:26:76:8d:9e:0a: e5:74:1a:be:a6:ec:19:b8:a2:0d:23:c3:dd:6b:1b: 23:53:c4:e3:c4:54:fd:7b:4e:70:29:ad:d4:79:64: 90:92:e2:47:88:db:c4:58:7f:e6:f6:30:87:7b:ec: 7d:5a:3b:5d:3b:3d:ba:96:49:38:73:10:7b:8b:79: 2e:68:11:07:40:b8:f1:94:c9:79:da:a2:50:d0:e5: 5b:eb:06:81:a8:0f:61:17:33:a9:95:92:6d:e7:09: cc:22:e9:9a:04:c3:4f:70:b0:dc:09:83:e4:4e:52: 67:41:28:de:24:60:64:80:94:b8:1f:2b:bf:d0:97: 9e:22:db:98:e7:85:ab:3d:f1:60:bb:4e:00:e6:70: 95:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D5:F3:10:41:63:49:07:67:66:CC:35:C0:9C:F1:08:20:5E:CA:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/6cdb3978-ee67-3d76-8c5f-204f6a98285d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:14:3d:aa:19:ee:2f:f4:12:43:7c:0b:e1:1e:4d:22:09:10: c4:7e:f4:a9:2b:1e:e8:75:b7:f7:04:d3:59:a3:ea:29:fc:21: 91:87:51:5b:17:f5:04:cd:04:02:8c:be:a4:dd:53:96:ca:b1: f9:7f:fd:9f:70:aa:69:8d:2e:1a:ab:97:99:76:6b:62:3c:e4: 67:bd:1c:67:58:98:45:ad:a9:91:0e:b3:63:21:dd:a5:3e:92: 4f:3a:28:86:7c:e2:eb:cb:0d:6a:bb:ab:57:ce:b4:62:63:1d: e6:c5:6b:39:f1:e6:e8:09:f2:a5:a9:43:ec:ef:07:58:55:63: 9e:68:85:54:6d:aa:44:55:17:c3:02:5a:aa:ee:c5:28:3a:6f: 2d:62:3d:4c:19:f2:39:9e:1e:95:14:a4:bf:a1:b8:b9:91:98: 5b:ba:09:dd:79:9c:d2:d2:d4:3a:52:38:8a:7d:18:ec:a9:ef: a5:39:f4:53:6f:4e:74:96:3a:e9:ac:ed:1b:b0:0b:9f:8a:8b: e1:33:ae:5f:f1:dd:9e:be:10:70:70:67:f4:68:42:4c:e4:3a: a5:7e:b8:88:f8:29:7f:fa:2b:d4:6d:70:bd:02:c2:b5:d1:16: a0:53:24:24:eb:4a:57:73:a0:35:5a:d2:57:7a:09:59:65:00: 7d:e9:83:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNyR0XjqNaWZsvWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk OWMxY2U2NGQtZjRhMS00Nzk1LTg5ZDgtYjBkYWZmMjc0MWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ79fBQtQ1TeGFGTur2XjUCQ1MLxfCVNA3VY dLEk8odA00jtMgKUa6V6EJH8RzdaUvyjTNYO4QMDsRkAgvkO1twdsNO2hylNX06b VtWVdUrF54P43DjaplDpmtEjXhXGSXY3n9+ekpfAbT9q+ZGk/Df2JnaNngrldBq+ puwZuKINI8PdaxsjU8TjxFT9e05wKa3UeWSQkuJHiNvEWH/m9jCHe+x9WjtdOz26 lkk4cxB7i3kuaBEHQLjxlMl52qJQ0OVb6waBqA9hFzOplZJt5wnMIumaBMNPcLDc CYPkTlJnQSjeJGBkgJS4Hyu/0JeeItuY54WrPfFgu04A5nCVkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnV8xBBY0kHZ2bMNcCc8QggXsoqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvNmNkYjM5NzgtZWU2Ny0z ZDc2LThjNWYtMjA0ZjZhOTgyODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAff1aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQUPaoZ7i/0EkN8C+EeTSIJEMR+9KkrHuh1t/cE01mj6in8IZGHUVsX 9QTNBAKMvqTdU5bKsfl//Z9wqmmNLhqrl5l2a2I85Ge9HGdYmEWtqZEOs2Mh3aU+ kk86KIZ84uvLDWq7q1fOtGJjHebFaznx5ugJ8qWpQ+zvB1hVY55ohVRtqkRVF8MC WqruxSg6by1iPUwZ8jmeHpUUpL+huLmRmFu6Cd15nNLS1DpSOIp9GOyp76U59FNv TnSWOums7RuwC5+Ki+Ezrl/x3Z6+EHBwZ/RoQkzkOqV+uIj4KX/6K9RtcL0CwrXR FqBTJCTrSldzoDVa0ld6CVllAH3pgzE= -----END CERTIFICATE-----Generated at Fri Oct 10 20:14:18 2025 by rpki-client