$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ce96f6f7-4210-3b5a-aa54-5d33a95d45b6.roa File: ce96f6f7-4210-3b5a-aa54-5d33a95d45b6.roa (raw, json) Hash identifier: MvjlyfqIMkisgoqad4MTk+oqa2PNrt6vDTsGyTE3V1k= Subject key identifier: 13:90:23:FE:11:65:C1:F8:3D:B4:42:5F:51:C2:24:DA:28:6B:F8:1A Certificate issuer: /CN=eb5e041e-98b3-4dff-827b-03e1387393cf Certificate serial: 010D0C9F4328584E6F3A314BCF4BF72E69847FD0 Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ce96f6f7-4210-3b5a-aa54-5d33a95d45b6.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 20454 IP address blocks: 125.253.85.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:31:4b:cf:4b:f7:2e:69:84:7f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=8ac81a5d-eac2-42fe-888c-3124c73761e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:85:4e:52:67:d9:be:89:60:d9:61:66:4c:56: 7c:ed:da:2f:e8:c7:d1:21:61:3c:6c:2e:71:ad:3d: a6:f9:32:db:16:a6:13:af:bf:f6:09:aa:b7:cf:ca: ca:ad:f4:fe:99:81:e9:aa:4b:3e:3d:0d:36:e0:8c: 5f:f6:23:eb:b5:ff:ba:b5:9f:41:af:3c:7e:7a:05: 9c:8a:d5:90:54:f0:60:b1:a8:ab:52:5d:4e:86:f8: 43:9f:42:7b:86:1e:48:e3:07:aa:31:fd:59:3a:f4: 58:76:71:e3:64:a7:28:af:60:e4:b9:a2:e3:e1:3e: 56:8f:ee:9c:25:70:33:61:70:cf:99:fb:87:1f:36: 4a:b7:06:7e:58:cb:a4:1a:42:53:09:f3:27:94:db: 2f:bf:76:50:ad:8c:3b:b1:dd:ad:ae:a0:17:7c:38: fa:6e:aa:71:af:f5:2e:69:19:a3:9d:2a:bb:ee:4a: 89:33:82:7e:14:c4:3f:e8:53:98:7e:4f:74:15:dd: 40:78:af:38:18:c7:0d:4c:9b:1c:3d:fc:ec:09:0e: 7f:59:d5:25:04:8d:fe:cc:71:92:a9:e8:77:dc:98: 25:b4:39:e6:03:29:96:52:cb:d3:de:19:7f:a7:8b: 0e:e6:a1:c9:05:9e:68:f4:e4:da:c4:e2:f7:e4:9b: 24:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:90:23:FE:11:65:C1:F8:3D:B4:42:5F:51:C2:24:DA:28:6B:F8:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/ce96f6f7-4210-3b5a-aa54-5d33a95d45b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl X509v3 Authority Key Identifier: keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer sbgp-ipAddrBlock: critical IPv4: 125.253.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:50:6d:4a:23:98:18:d2:5a:3d:bb:1f:04:99:82:67:91:02: 99:ec:2f:2b:c2:d7:6b:4f:93:a1:36:3a:ec:1d:9f:02:a2:57: 14:62:dc:76:30:b8:31:1f:0a:0c:36:87:b7:29:fa:f0:2e:79: ea:0d:15:6d:6b:b5:0d:7a:49:6c:e0:d0:0e:a2:8c:cd:42:f9: e5:50:ae:34:fd:c2:27:e2:c1:59:b2:60:7b:6f:37:5f:85:e1: db:cd:a6:44:0f:ab:0a:dc:69:68:1f:ac:70:88:e5:9b:4e:3a: 65:08:09:69:68:81:35:09:21:29:ed:a0:8f:a8:2d:8d:f7:ab: 32:4e:e6:f1:a8:d0:ad:08:bd:96:f1:b1:95:9f:2f:33:05:85: d4:4c:99:c4:a2:44:8f:cd:41:e1:64:2d:8b:8f:52:ce:b1:6e: 6c:54:7d:1b:c0:fc:70:98:9c:a4:40:e5:b6:47:c1:e5:e3:d4: 33:bb:7f:00:a9:ca:2f:09:ca:c9:ee:6c:7a:24:0b:cf:a9:92: 8a:70:c2:32:48:40:d9:3d:be:c0:0d:84:d7:28:97:fa:e2:12: c8:38:ef:dc:65:30:e1:b5:46:76:46:fa:6e:02:5d:d8:86:90: 2f:cd:32:5f:15:18:7b:40:14:d3:dc:0c:06:fd:91:95:0f:ce: c7:a8:4f:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOjFLz0v3LmmEf9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5 M2NmMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk OGFjODFhNWQtZWFjMi00MmZlLTg4OGMtMzEyNGM3Mzc2MWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoVOUmfZvolg2WFmTFZ87dov6MfRIWE8bC5x rT2m+TLbFqYTr7/2Caq3z8rKrfT+mYHpqks+PQ024Ixf9iPrtf+6tZ9Brzx+egWc itWQVPBgsairUl1OhvhDn0J7hh5I4weqMf1ZOvRYdnHjZKcor2DkuaLj4T5Wj+6c JXAzYXDPmfuHHzZKtwZ+WMukGkJTCfMnlNsvv3ZQrYw7sd2trqAXfDj6bqpxr/Uu aRmjnSq77kqJM4J+FMQ/6FOYfk90Fd1AeK84GMcNTJscPfzsCQ5/WdUlBI3+zHGS qeh33JgltDnmAymWUsvT3hl/p4sO5qHJBZ5o9OTaxOL35Jsk7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOQI/4RZcH4PbRCX1HCJNooa/gaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvY2U5NmY2ZjctNDIxMC0z YjVhLWFhNTQtNWQzM2E5NWQ0NWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAff1VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9QbUojmBjSWj27HwSZgmeRApnsLyvC12tPk6E2OuwdnwKiVxRi3HYw uDEfCgw2h7cp+vAueeoNFW1rtQ16SWzg0A6ijM1C+eVQrjT9wifiwVmyYHtvN1+F 4dvNpkQPqwrcaWgfrHCI5ZtOOmUICWlogTUJISntoI+oLY33qzJO5vGo0K0IvZbx sZWfLzMFhdRMmcSiRI/NQeFkLYuPUs6xbmxUfRvA/HCYnKRA5bZHweXj1DO7fwCp yi8JysnubHokC8+pkopwwjJIQNk9vsANhNcol/riEsg479xlMOG1RnZG+m4CXdiG kC/NMl8VGHtAFNPcDAb9kZUPzseoT58= -----END CERTIFICATE-----Generated at Tue Jul 21 18:19:44 2026 by rpki-client