$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2088ad0e-df10-303d-a609-0636c73f7c1d.roa File: 2088ad0e-df10-303d-a609-0636c73f7c1d.roa (raw, json) Hash identifier: JGN3Rhhjq465vRKAudNV/O96zEzE0D0UKVOwhhL46dM= Subject key identifier: 0D:F5:56:14:EB:9A:EB:8A:1A:28:B3:F2:F8:B6:D4:5D:B7:20:8A:41 Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Certificate serial: 010D0C9F4328584A963693448F2424534BDA2200 Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2088ad0e-df10-303d-a609-0636c73f7c1d.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 38047 IP address blocks: 103.123.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:93:44:8f:24:24:53:4b:da:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=bca94efb-3086-45fa-b1ba-4fda0f6da931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:00:47:57:bb:f1:06:ed:46:30:65:23:d8:ac: 5a:66:35:cd:89:75:0e:39:82:ec:58:a2:b9:a7:38: 23:c6:81:1d:02:24:cc:6e:23:fa:6d:ad:68:29:0a: 76:f7:00:01:a0:33:ef:cc:15:f6:8b:73:87:73:bf: ff:5c:86:2b:1e:25:be:40:71:57:15:71:10:41:63: f2:09:85:42:f2:90:0b:98:0c:6b:0d:c0:0b:91:c0: 2b:57:d7:d9:1c:44:d0:61:47:42:6e:0b:ad:9c:55: fd:e9:2e:18:28:a7:c7:6b:d0:21:e7:27:71:27:60: 70:a7:ec:01:1c:45:7b:76:1f:fa:20:b8:cc:8b:00: ef:e8:33:02:d7:9e:ce:bf:21:8f:9f:d6:c3:04:95: 3a:47:91:98:e4:6e:2d:11:3e:ac:08:05:7f:d3:39: b0:d8:04:73:f0:40:81:95:9e:11:e7:cb:5f:1f:7a: 48:5d:74:3c:cb:d2:d1:ca:cd:e0:a8:d3:38:c9:0e: a5:9a:2b:58:2e:09:3c:23:26:d2:dd:80:26:e6:56: 0a:8b:5b:58:83:56:41:3a:7d:e6:c8:6e:94:d0:34: fb:88:a6:c8:87:f6:3f:7d:54:af:d1:a0:12:d2:62: e0:e9:26:ee:86:9a:0a:ab:54:64:3d:a5:11:a0:54: c6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F5:56:14:EB:9A:EB:8A:1A:28:B3:F2:F8:B6:D4:5D:B7:20:8A:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2088ad0e-df10-303d-a609-0636c73f7c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl X509v3 Authority Key Identifier: keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer sbgp-ipAddrBlock: critical IPv4: 103.123.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ed:41:f2:1f:ce:c6:1c:4d:00:c6:00:1d:f7:8c:1e:e4:5e: ac:1f:80:4b:b9:ba:f5:55:e9:b6:a4:84:9b:57:f8:22:9e:02: 0e:5d:9f:fb:01:df:f7:63:41:3e:22:64:b7:e9:ff:8a:87:03: 46:76:ad:68:3d:02:b9:93:42:a3:a2:26:e1:66:06:68:42:bd: 97:25:fb:fc:58:33:47:88:8f:18:cb:82:78:a3:f6:f3:8f:e8: a7:b3:cb:4e:78:de:5d:b5:12:63:a2:51:62:e6:ec:00:ba:35: c2:7d:f8:b8:09:94:47:8f:04:7f:7a:c2:96:5c:c2:82:01:24: b4:74:3c:3d:29:b3:00:00:d2:2d:ea:e4:32:92:a8:3f:88:95: c7:83:69:4e:4c:ee:63:7e:e8:e9:b5:45:1b:63:69:ba:04:a7: 2d:a8:0f:ba:af:3b:e7:93:86:c3:a8:a8:3f:dd:4f:df:d1:76: dc:63:16:43:d7:d7:f6:3b:e2:a9:94:c8:eb:13:67:05:e3:e1: 21:11:a8:e2:a3:ec:27:05:19:6a:e5:62:0e:af:33:54:a8:68: f8:f0:a7:db:b5:3d:17:f5:4c:1d:12:ad:ed:09:4f:c3:7c:f1: a9:5f:03:37:8f:c1:c8:c8:d6:26:91:91:2d:d6:4b:72:d0:cd: 4b:ce:c1:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNpNEjyQkU0vaIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk MjYxMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk YmNhOTRlZmItMzA4Ni00NWZhLWIxYmEtNGZkYTBmNmRhOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApABHV7vxBu1GMGUj2KxaZjXNiXUOOYLsWKK5 pzgjxoEdAiTMbiP6ba1oKQp29wABoDPvzBX2i3OHc7//XIYrHiW+QHFXFXEQQWPy CYVC8pALmAxrDcALkcArV9fZHETQYUdCbgutnFX96S4YKKfHa9Ah5ydxJ2Bwp+wB HEV7dh/6ILjMiwDv6DMC157OvyGPn9bDBJU6R5GY5G4tET6sCAV/0zmw2ARz8ECB lZ4R58tfH3pIXXQ8y9LRys3gqNM4yQ6lmitYLgk8IybS3YAm5lYKi1tYg1ZBOn3m yG6U0DT7iKbIh/Y/fVSv0aAS0mLg6SbuhpoKq1RkPaURoFTGNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA31VhTrmuuKGiiz8vi21F23IIpBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4 YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvMjA4OGFkMGUtZGYxMC0z MDNkLWE2MDktMDYzNmM3M2Y3YzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1 YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm MjVmZGQyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3tkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrtQfIfzsYcTQDGAB33jB7kXqwfgEu5uvVV6bakhJtX+CKeAg5dn/sB 3/djQT4iZLfp/4qHA0Z2rWg9ArmTQqOiJuFmBmhCvZcl+/xYM0eIjxjLgnij9vOP 6Kezy0543l21EmOiUWLm7AC6NcJ9+LgJlEePBH96wpZcwoIBJLR0PD0pswAA0i3q 5DKSqD+IlceDaU5M7mN+6Om1RRtjaboEpy2oD7qvO+eThsOoqD/dT9/RdtxjFkPX 1/Y74qmUyOsTZwXj4SERqOKj7CcFGWrlYg6vM1SoaPjwp9u1PRf1TB0Sre0JT8N8 8alfAzePwcjI1iaRkS3WS3LQzUvOwV8= -----END CERTIFICATE-----Generated at Thu Jul 24 11:51:37 2025 by rpki-client