$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/28be0766-ef14-3b31-9912-542a0cd4b7ff.roa File: 28be0766-ef14-3b31-9912-542a0cd4b7ff.roa (raw, json) Hash identifier: 3t3o6AEn9jdkhOAV+2ZZLA6aqqzpfN4wH/EfoWKI0uY= Subject key identifier: F0:79:20:D7:74:D9:B9:10:C5:5B:56:BF:45:41:8C:2A:23:1B:80:4C Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Certificate serial: 010D0C9F4328584F1467882AE15D93C571232500 Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/28be0766-ef14-3b31-9912-542a0cd4b7ff.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 212609 IP address blocks: 103.120.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:88:2a:e1:5d:93:c5:71:23:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=63f20db2-1d35-42c5-b161-e29b2d15bb0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:29:7b:ba:4a:fa:31:86:4e:d2:13:81:88:5d: 27:6d:8d:7e:84:df:6a:40:4a:42:10:56:0b:df:44: dc:63:31:f4:1e:04:8d:40:22:0e:b0:f0:25:5e:d3: 07:e6:c5:0f:c6:7a:ae:f7:49:3d:b6:2a:12:62:66: f9:ef:8a:17:3f:f2:86:90:a8:da:f1:c6:80:6f:6d: 14:2d:3b:7b:3a:a6:71:ec:7b:98:c7:84:34:3f:6b: db:b4:a4:b4:fa:05:3c:11:0c:1b:c6:69:6b:1b:bd: 00:89:05:cb:8f:0a:fa:89:41:d7:78:21:9c:f7:10: bb:7d:6f:bc:65:28:0c:c8:6d:ae:64:7b:cd:d8:ad: 79:93:c2:da:b1:ce:26:8a:80:0d:fc:43:b3:82:b3: ed:b9:4b:ef:1c:e0:95:ed:df:b3:eb:3b:87:e0:3e: 2d:85:c6:46:ee:7b:89:c6:e5:73:ec:09:ac:9e:e1: 92:4b:12:d4:81:2c:35:9f:05:f6:68:de:60:36:1c: 65:97:0c:d4:99:10:67:52:6b:57:c0:25:a9:6d:12: eb:7f:7b:ba:ca:4b:6d:cd:64:9d:01:4e:b8:8a:7d: 48:94:ab:19:20:6b:e2:bc:5a:0c:4d:22:ee:e3:75: 0e:55:06:2d:12:26:d5:fb:1c:7b:fd:00:4c:e9:7e: e2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:79:20:D7:74:D9:B9:10:C5:5B:56:BF:45:41:8C:2A:23:1B:80:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/28be0766-ef14-3b31-9912-542a0cd4b7ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl X509v3 Authority Key Identifier: keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer sbgp-ipAddrBlock: critical IPv4: 103.120.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:85:f4:e1:7e:59:cf:1f:30:2c:0f:5a:1c:e3:3e:b7:da:d1: 2f:cc:53:47:42:cc:7d:b6:0a:ef:35:51:ca:86:61:fb:18:61: 53:42:b7:41:c5:c3:f6:b7:fc:ff:e0:ed:00:1f:96:e2:e0:1e: ce:d4:82:54:71:36:89:93:30:9d:0d:59:9e:50:5f:b6:86:b5: 48:a9:1a:e7:a4:6d:05:4a:36:81:71:5c:60:c5:2d:2c:50:69: c4:05:7a:81:d0:77:99:49:ea:14:23:d7:47:ff:b5:9d:b5:45: bf:40:47:34:45:7c:a2:d8:e9:bf:25:54:6f:62:1f:51:31:0c: c4:db:87:04:78:89:bf:9f:19:98:e4:70:44:d6:b9:d8:16:90: b9:af:fa:28:28:f4:e9:50:a5:19:58:10:e8:05:d9:b9:73:ea: e5:7b:14:e0:60:72:df:92:90:a1:41:96:23:0b:af:c4:85:85: d8:1b:f6:0b:fa:2f:c0:61:03:8c:db:75:fa:ec:48:5c:65:a8: d1:52:85:54:03:c5:01:f5:03:a8:a8:b7:fc:24:dd:e2:fd:f1: 01:c4:cf:58:6b:fc:c2:6c:72:4a:c8:bb:c6:7c:1d:c7:ad:15: 6c:7e:81:a5:97:73:b4:80:17:f3:a1:c5:30:87:eb:82:c8:58: 13:6b:aa:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ4gq4V2TxXEjJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw ZGU5MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NjNmMjBkYjItMWQzNS00MmM1LWIxNjEtZTI5YjJkMTViYjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyl7ukr6MYZO0hOBiF0nbY1+hN9qQEpCEFYL 30TcYzH0HgSNQCIOsPAlXtMH5sUPxnqu90k9tioSYmb574oXP/KGkKja8caAb20U LTt7OqZx7HuYx4Q0P2vbtKS0+gU8EQwbxmlrG70AiQXLjwr6iUHXeCGc9xC7fW+8 ZSgMyG2uZHvN2K15k8Lasc4mioAN/EOzgrPtuUvvHOCV7d+z6zuH4D4thcZG7nuJ xuVz7AmsnuGSSxLUgSw1nwX2aN5gNhxllwzUmRBnUmtXwCWpbRLrf3u6ykttzWSd AU64in1IlKsZIGvivFoMTSLu43UOVQYtEibV+xx7/QBM6X7i4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPB5INd02bkQxVtWv0VBjCojG4BMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvMjhiZTA3NjYtZWYxNC0z YjMxLTk5MTItNTQyYTBjZDRiN2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0 ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3gmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiF9OF+Wc8fMCwPWhzjPrfa0S/MU0dCzH22Cu81UcqGYfsYYVNCt0HF w/a3/P/g7QAfluLgHs7UglRxNomTMJ0NWZ5QX7aGtUipGuekbQVKNoFxXGDFLSxQ acQFeoHQd5lJ6hQj10f/tZ21Rb9ARzRFfKLY6b8lVG9iH1ExDMTbhwR4ib+fGZjk cETWudgWkLmv+igo9OlQpRlYEOgF2blz6uV7FOBgct+SkKFBliMLr8SFhdgb9gv6 L8BhA4zbdfrsSFxlqNFShVQDxQH1A6iot/wk3eL98QHEz1hr/MJsckrIu8Z8Hcet FWx+gaWXc7SAF/OhxTCH64LIWBNrqvk= -----END CERTIFICATE-----Generated at Sat Sep 26 23:45:46 2026 by rpki-client