$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa File: ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa (raw, json) Hash identifier: HEg3Xq3fDKlEcwx2BfO5MAssREE0yf2n5eqIY2/z+bo= Subject key identifier: 4D:99:FC:E8:8C:A7:D1:6C:1F:51:86:44:A9:D7:FF:77:9C:F5:BB:EE Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584E3069AF06431C41A958422E60 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa Signing time: Tue 16 Jun 2026 09:00:12 +0000 ROA not before: Tue 16 Jun 2026 09:00:12 +0000 ROA not after: Mon 14 Sep 2026 09:00:12 +0000 asID: 19437 IP address blocks: 125.253.68.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:30:69:af:06:43:1c:41:a9:58:42:2e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Jun 16 09:00:12 2026 GMT Not After : Sep 14 09:00:12 2026 GMT Subject: CN=a8db729d-cbc4-4a0e-a884-329d6c6dd029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:66:0f:44:fc:4f:87:eb:2f:fa:26:1e:72:73: ec:e2:a0:c8:a1:52:4b:e8:27:f6:1f:8f:44:84:78: f5:b4:e2:31:4c:5b:83:2e:5f:61:aa:68:69:3a:ea: fb:d5:16:15:3c:25:78:18:bf:77:9c:c5:0a:9f:70: 7e:c7:58:fc:7f:51:de:58:94:ad:7b:de:0c:b8:f2: 3f:63:2b:01:12:89:e3:d0:10:e9:61:11:79:e2:c2: 3b:71:d1:3c:5b:6c:74:74:de:98:1b:b1:57:08:53: ee:c8:ad:bc:dc:dd:20:12:21:bc:be:d4:1e:03:5b: f9:56:5b:17:ef:58:ff:92:89:dc:31:2e:15:c9:1b: f1:33:15:27:1f:3a:85:32:6d:0c:73:9f:0f:29:c8: ce:f9:7f:45:ca:79:15:90:73:bb:03:36:e0:d9:37: 1e:bf:96:1f:28:f6:a9:1c:8a:37:3f:c2:92:84:2b: 9d:97:54:48:ef:02:16:21:75:c6:34:05:29:f9:b9: c3:19:3d:b8:c6:70:8f:bc:cf:d7:de:83:02:94:33: 00:6c:3a:e8:90:a8:b1:2b:b4:0c:7f:d9:79:4b:33: 85:9a:a7:0b:91:22:6a:99:1e:81:0b:00:0e:95:ca: d6:40:7e:eb:5d:b8:6a:b2:33:1d:37:bc:7e:00:fc: 89:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:99:FC:E8:8C:A7:D1:6C:1F:51:86:44:A9:D7:FF:77:9C:F5:BB:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ac1a5bbe-2b4d-309f-a6de-b909f6efa9f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:9c:08:84:9d:98:e8:71:8f:54:52:9e:96:62:60:9c:5d:17: 4e:f7:07:65:22:39:6f:1b:30:c3:55:92:27:61:9a:fc:9b:f3: 2b:81:2c:0b:42:d8:d2:02:90:1f:ef:83:3f:78:dd:49:f0:7d: 77:cf:26:e6:44:66:21:a6:a4:8a:44:41:ca:fc:59:6f:e7:ff: 6e:0c:58:cf:5d:72:21:a9:72:4d:ca:b0:46:65:79:e6:47:a2: 19:56:53:bd:34:b3:e2:f8:6a:8e:c2:c4:4d:49:27:f2:6b:72: 87:a7:02:b9:aa:53:65:2c:c7:85:b5:39:ac:b2:53:a0:1e:3f: b8:15:3a:c9:e5:4a:47:d3:52:20:3e:51:e1:95:75:fb:20:58: 39:a0:d4:d9:09:87:4a:fd:07:8c:07:d9:b4:85:5e:a3:3c:e2: 04:b5:09:94:ca:d7:ec:30:6d:a3:6c:52:b5:3d:a7:75:a6:f3: 26:b7:eb:03:cb:7c:0d:77:27:63:bb:35:15:74:80:51:5c:73: 17:73:07:99:88:d2:7e:b0:95:2d:da:77:74:32:eb:01:84:52: c6:79:5a:b0:f3:ff:88:1d:09:d3:d2:f6:52:a0:8e:4c:a3:fa: bd:b0:08:1d:c4:d0:45:f6:fb:3a:f8:9a:35:ec:28:0c:bf:16: 06:13:c5:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4waa8GQxxBqVhCLmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI2MDYxNjA5MDAxMloXDTI2MDkxNDA5MDAxMlowLzEtMCsGA1UEAxMk YThkYjcyOWQtY2JjNC00YTBlLWE4ODQtMzI5ZDZjNmRkMDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mYPRPxPh+sv+iYecnPs4qDIoVJL6Cf2H49E hHj1tOIxTFuDLl9hqmhpOur71RYVPCV4GL93nMUKn3B+x1j8f1HeWJSte94MuPI/ YysBEonj0BDpYRF54sI7cdE8W2x0dN6YG7FXCFPuyK283N0gEiG8vtQeA1v5VlsX 71j/koncMS4VyRvxMxUnHzqFMm0Mc58PKcjO+X9FynkVkHO7Azbg2Tcev5YfKPap HIo3P8KShCudl1RI7wIWIXXGNAUp+bnDGT24xnCPvM/X3oMClDMAbDrokKixK7QM f9l5SzOFmqcLkSJqmR6BCwAOlcrWQH7rXbhqsjMdN7x+APyJSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2Z/OiMp9FsH1GGRKnX/3ec9bvuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvYWMxYTViYmUtMmI0ZC0z MDlmLWE2ZGUtYjkwOWY2ZWZhOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBff1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCcCISdmOhxj1RSnpZiYJxdF073B2UiOW8bMMNVkidhmvyb8yuBLAtC 2NICkB/vgz943UnwfXfPJuZEZiGmpIpEQcr8WW/n/24MWM9dciGpck3KsEZleeZH ohlWU700s+L4ao7CxE1JJ/JrcoenArmqU2Usx4W1OayyU6AeP7gVOsnlSkfTUiA+ UeGVdfsgWDmg1NkJh0r9B4wH2bSFXqM84gS1CZTK1+wwbaNsUrU9p3Wm8ya36wPL fA13J2O7NRV0gFFccxdzB5mI0n6wlS3ad3Qy6wGEUsZ5WrDz/4gdCdPS9lKgjkyj +r2wCB3E0EX2+zr4mjXsKAy/FgYTxbI= -----END CERTIFICATE-----Generated at Wed Jul 1 19:48:21 2026 by rpki-client