$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3cd115c8-3c6e-3d24-a93c-ec589ec9b7c8.roa File: 3cd115c8-3c6e-3d24-a93c-ec589ec9b7c8.roa (raw, json) Hash identifier: 9yvWTXI3SAkBLBxGLq8uvJWxEhHg9WIzaXisheGwF+U= Subject key identifier: 0D:85:22:CB:19:91:78:E1:E4:29:AA:AA:18:94:35:D9:12:A2:E5:56 Certificate issuer: /CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Certificate serial: 010D0C9F4328584B3586BE3E169C540A316F69C0 Authority key identifier: 86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3cd115c8-3c6e-3d24-a93c-ec589ec9b7c8.roa Signing time: Tue 16 Sep 2025 02:37:02 +0000 ROA not before: Tue 16 Sep 2025 02:37:02 +0000 ROA not after: Mon 15 Dec 2025 03:37:02 +0000 asID: 33715 IP address blocks: 103.66.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:86:be:3e:16:9c:54:0a:31:6f:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Validity Not Before: Sep 16 02:37:02 2025 GMT Not After : Dec 15 03:37:02 2025 GMT Subject: CN=97aa79aa-6b80-4420-a9cc-e020c0895bde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c5:97:67:ff:2f:bd:4d:3a:2d:e8:bb:1a:89: 12:c9:3e:9c:d9:3b:95:67:e2:76:8f:55:0a:08:7a: 98:c3:57:89:cf:a1:19:f2:25:bc:be:fc:31:a4:0a: 85:4c:37:42:8e:a0:7d:24:34:a5:b5:b6:01:f7:30: 30:3b:2c:97:b2:91:bc:8d:e6:74:b2:74:ad:18:cb: 72:43:fd:8a:2d:0c:ca:a7:c1:58:48:06:50:96:c5: dc:b6:2a:42:aa:30:f8:91:89:5d:5c:b0:68:c4:72: cd:79:e1:f7:2b:1a:b1:5a:d1:ee:7d:42:65:11:18: 4b:44:d0:41:70:1c:12:6b:35:70:c0:3a:10:70:0b: 84:42:9b:ef:39:34:ac:4d:f3:40:6d:85:6e:14:22: a3:ac:7b:aa:c2:05:e3:d7:4d:53:57:b2:9f:1c:19: e8:4f:99:d8:44:8a:92:ab:df:8c:a2:cb:58:ad:ef: 4b:0d:b0:88:01:f0:de:3b:93:cf:d9:9f:43:cf:72: f6:1b:d1:13:e3:e7:4a:18:07:ba:e4:db:4d:1c:61: 06:9f:b1:e5:9d:9c:ed:95:c7:0c:a5:5a:2c:c8:6a: 44:83:98:51:33:21:97:8a:96:ab:a7:a1:46:28:ed: f2:ba:82:74:a2:c2:c3:7a:61:85:f9:36:02:f7:8e: 37:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:85:22:CB:19:91:78:E1:E4:29:AA:AA:18:94:35:D9:12:A2:E5:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3cd115c8-3c6e-3d24-a93c-ec589ec9b7c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl X509v3 Authority Key Identifier: keyid:86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer sbgp-ipAddrBlock: critical IPv4: 103.66.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:3b:b4:a1:45:f1:50:f6:5b:12:05:62:de:ea:7e:5f:30:40: fd:76:01:16:63:3f:46:da:8e:dc:fc:29:37:d5:13:7a:9d:67: 28:31:43:d2:b1:05:20:ea:72:cf:86:92:d6:b2:7f:53:d6:2d: 7a:1a:0b:a9:05:68:51:cf:e8:f5:46:45:80:cf:ce:b9:17:a1: 9e:ff:7c:20:1b:f5:30:00:8c:83:69:2d:54:5a:d4:82:85:17: 0e:d6:3d:43:68:8b:c0:9e:71:8d:33:53:c3:e7:58:e5:a8:73: 97:2c:c3:23:91:15:49:d8:68:d6:79:77:a6:dc:74:1f:62:60: 31:e5:71:2c:11:f1:28:af:d5:91:b6:1f:2a:2b:5f:26:72:7e: 12:31:00:50:e3:05:cb:5f:2a:64:39:f6:76:4a:ad:99:2e:54: ad:c2:45:0d:ec:a5:5e:1c:2a:e6:c7:e9:ec:79:e4:ec:8f:30: 40:5f:60:d9:d9:13:0d:54:80:81:8d:ea:ec:80:f3:0f:f2:6e: ed:14:b9:f7:f8:ae:da:b2:75:ba:c6:31:2b:5b:71:50:d0:ab: 57:03:ca:e9:88:35:b2:a1:68:66:df:b1:fc:f9:49:d5:8a:2d: 16:5d:f5:c7:0f:86:6e:e5:18:ce:12:3f:3b:e0:33:93:d6:40: ea:55:b7:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1hr4+FpxUCjFvacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyOGRlNTUtZjU5Ny00MGNmLWI1MDgtMGM1ZDczMThi NWVjMB4XDTI1MDkxNjAyMzcwMloXDTI1MTIxNTAzMzcwMlowLzEtMCsGA1UEAxMk OTdhYTc5YWEtNmI4MC00NDIwLWE5Y2MtZTAyMGMwODk1YmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMWXZ/8vvU06Lei7GokSyT6c2TuVZ+J2j1UK CHqYw1eJz6EZ8iW8vvwxpAqFTDdCjqB9JDSltbYB9zAwOyyXspG8jeZ0snStGMty Q/2KLQzKp8FYSAZQlsXctipCqjD4kYldXLBoxHLNeeH3KxqxWtHufUJlERhLRNBB cBwSazVwwDoQcAuEQpvvOTSsTfNAbYVuFCKjrHuqwgXj101TV7KfHBnoT5nYRIqS q9+MostYre9LDbCIAfDeO5PP2Z9Dz3L2G9ET4+dKGAe65NtNHGEGn7HlnZztlccM pVosyGpEg5hRMyGXiparp6FGKO3yuoJ0osLDemGF+TYC9443TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2FIssZkXjh5CmqqhiUNdkSouVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4 ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVkNzMxOGI1ZWMvM2NkMTE1YzgtM2M2ZS0z ZDI0LWE5M2MtZWM1ODllYzliN2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmEyOGRlNTUtZjU5Ny00MGNmLWI1 MDgtMGM1ZDczMThiNWVjLzJhMjhkZTU1LWY1OTctNDBjZi1iNTA4LTBjNWQ3MzE4 YjVlYy5jcmwwHwYDVR0jBBgwFoAUhtnzIHbMN/Aa2EgKlFCWFdVY3HswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVk NzMxOGI1ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ0IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALk7tKFF8VD2WxIFYt7qfl8wQP12ARZjP0bajtz8KTfVE3qdZygxQ9Kx BSDqcs+Gktayf1PWLXoaC6kFaFHP6PVGRYDPzrkXoZ7/fCAb9TAAjINpLVRa1IKF Fw7WPUNoi8CecY0zU8PnWOWoc5cswyORFUnYaNZ5d6bcdB9iYDHlcSwR8Siv1ZG2 HyorXyZyfhIxAFDjBctfKmQ59nZKrZkuVK3CRQ3spV4cKubH6ex55OyPMEBfYNnZ Ew1UgIGN6uyA8w/ybu0Uuff4rtqydbrGMStbcVDQq1cDyumINbKhaGbfsfz5SdWK LRZd9ccPhm7lGM4SPzvgM5PWQOpVtxA= -----END CERTIFICATE-----Generated at Fri Oct 10 19:47:33 2025 by rpki-client