$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2455bf61-a2a2-39e5-bf04-82c479a5b223.roa File: 2455bf61-a2a2-39e5-bf04-82c479a5b223.roa (raw, json) Hash identifier: kK90W3uxWNBfIfWdShoEr7epl5CCGfNjE04aRUTnH1U= Subject key identifier: F1:6A:AE:66:95:8D:CE:F1:AE:3E:AF:53:AE:DA:5C:22:C5:FD:1C:EC Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584E3069B156D180F6DD9AD61500 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2455bf61-a2a2-39e5-bf04-82c479a5b223.roa Signing time: Tue 16 Jun 2026 09:00:12 +0000 ROA not before: Tue 16 Jun 2026 09:00:12 +0000 ROA not after: Mon 14 Sep 2026 09:00:12 +0000 asID: 20454 IP address blocks: 125.253.64.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:30:69:b1:56:d1:80:f6:dd:9a:d6:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Jun 16 09:00:12 2026 GMT Not After : Sep 14 09:00:12 2026 GMT Subject: CN=bd92cd5a-be19-474f-8f9c-dcd08be91ac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:07:88:91:e9:0e:1b:6d:17:10:69:21:ed: 87:04:2e:85:c7:79:1c:ad:84:9b:13:19:12:67:4f: 93:5d:ac:6e:f8:21:ab:72:9c:f1:6d:f7:1e:04:61: 13:8b:8b:6a:6d:02:86:a3:18:7c:19:39:ee:43:bd: 80:a6:18:44:a3:45:ce:03:4e:5b:22:39:fa:4a:bf: cc:a2:47:5c:48:d2:e1:2f:8e:88:e2:68:40:d0:a6: ba:36:44:b2:25:91:ac:c5:bd:91:1e:4f:3f:19:3b: 24:43:61:78:07:34:57:05:d0:3e:cb:c2:a5:8a:4a: 0d:cf:f7:af:95:9e:c9:1d:ec:17:c7:a5:7b:61:c7: 57:49:cb:ab:79:bd:1c:c3:0c:9b:bb:28:57:b4:ef: 6c:76:4b:66:5b:ef:3a:df:58:9d:5f:8b:cc:e5:15: 4d:7b:d2:79:6d:b3:1d:96:1b:98:85:fd:43:5c:46: 8d:47:f9:c9:ed:c9:44:bc:49:71:ef:6d:6e:ec:5f: bd:eb:25:a2:29:f3:ff:d8:04:8c:02:be:fe:f0:b0: e8:19:2b:cf:97:f6:a0:27:0a:07:ff:7f:df:54:ee: 5f:d9:39:1f:52:5d:1d:e7:dd:ae:73:c3:3d:7a:5a: db:61:28:ec:1d:f1:84:b2:84:cc:c2:be:c2:7b:69: 40:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6A:AE:66:95:8D:CE:F1:AE:3E:AF:53:AE:DA:5C:22:C5:FD:1C:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/2455bf61-a2a2-39e5-bf04-82c479a5b223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e9:f6:31:1c:d4:36:0b:48:32:35:c0:c3:fe:d3:d9:b0:d7: 56:5e:bc:00:79:c7:9f:6b:f4:c6:13:65:57:b6:f4:d7:f0:dc: b1:c4:a3:7d:93:cc:8d:d8:2a:42:c4:e2:15:f8:cb:c1:11:35: 45:bb:a6:1b:b5:78:bd:2a:61:47:94:47:91:51:ca:f9:25:4b: fb:3e:79:03:d8:4a:f6:6b:58:db:8b:84:03:65:23:f9:06:c9: 30:89:d4:75:ec:5b:f8:27:d8:28:c8:1a:b6:72:bf:8d:6a:c4: f5:d6:1c:a3:b0:5d:79:33:aa:c2:f6:06:b8:92:2f:47:fc:ea: 81:82:38:41:10:a8:7c:ec:39:83:5b:82:b3:50:3f:8e:b8:de: e3:fa:4d:50:5b:fc:38:94:e9:8f:8e:93:c8:81:d5:0f:45:db: 46:fe:48:7e:c0:de:ee:ae:0e:cc:1b:fc:00:0c:e2:02:99:35: f5:a4:88:49:b8:d8:d9:ea:0d:da:3b:01:2d:23:f5:93:4d:13: e9:5a:51:a6:3b:c5:88:12:47:32:a9:a6:d3:19:c4:10:cc:eb: b5:36:be:91:cd:df:82:91:e1:e4:8d:2f:fe:66:0a:0f:a9:74: 09:58:5d:8b:e0:be:ed:95:57:db:93:12:5f:b0:46:bb:67:77: 52:90:9e:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4wabFW0YD23ZrWFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI2MDYxNjA5MDAxMloXDTI2MDkxNDA5MDAxMlowLzEtMCsGA1UEAxMk YmQ5MmNkNWEtYmUxOS00NzRmLThmOWMtZGNkMDhiZTkxYWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqEHiJHpDhttFxBpIe2HBC6Fx3kcrYSbExkS Z0+TXaxu+CGrcpzxbfceBGETi4tqbQKGoxh8GTnuQ72AphhEo0XOA05bIjn6Sr/M okdcSNLhL46I4mhA0Ka6NkSyJZGsxb2RHk8/GTskQ2F4BzRXBdA+y8KlikoNz/ev lZ7JHewXx6V7YcdXScureb0cwwybuyhXtO9sdktmW+8631idX4vM5RVNe9J5bbMd lhuYhf1DXEaNR/nJ7clEvElx721u7F+96yWiKfP/2ASMAr7+8LDoGSvPl/agJwoH /3/fVO5f2TkfUl0d592uc8M9elrbYSjsHfGEsoTMwr7Ce2lAswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFqrmaVjc7xrj6vU67aXCLF/RzsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvMjQ1NWJmNjEtYTJhMi0z OWU1LWJmMDQtODJjNDc5YTViMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCff1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXp9jEc1DYLSDI1wMP+09mw11ZevAB5x59r9MYTZVe29Nfw3LHEo32T zI3YKkLE4hX4y8ERNUW7phu1eL0qYUeUR5FRyvklS/s+eQPYSvZrWNuLhANlI/kG yTCJ1HXsW/gn2CjIGrZyv41qxPXWHKOwXXkzqsL2BriSL0f86oGCOEEQqHzsOYNb grNQP4643uP6TVBb/DiU6Y+Ok8iB1Q9F20b+SH7A3u6uDswb/AAM4gKZNfWkiEm4 2NnqDdo7AS0j9ZNNE+laUaY7xYgSRzKpptMZxBDM67U2vpHN34KR4eSNL/5mCg+p dAlYXYvgvu2VV9uTEl+wRrtnd1KQnpI= -----END CERTIFICATE-----Generated at Tue Jul 21 18:21:00 2026 by rpki-client