$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d031fc45-96ad-3b9c-90d9-9ca75142eb5c.roa File: d031fc45-96ad-3b9c-90d9-9ca75142eb5c.roa (raw, json) Hash identifier: 8o9w3eVVfZOy8dxA5GmHtaOaUp2Cfx7Cru771PAW4iE= Subject key identifier: AB:A1:A8:DA:14:92:A0:DB:73:84:9A:49:5D:C2:FD:72:C1:DF:71:E7 Certificate issuer: /CN=11f590b6-eb6e-4969-824b-0df247220283 Certificate serial: 010D0C9F4328584B13D6BC50AA35B0762BE5CDB0 Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d031fc45-96ad-3b9c-90d9-9ca75142eb5c.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 395301 IP address blocks: 103.135.128.0/23 maxlen: 23 103.135.128.0/24 maxlen: 24 103.135.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:bc:50:aa:35:b0:76:2b:e5:cd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=2b1593a2-cbc7-4567-95f7-5bdaa988a8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a4:a1:21:6f:60:a6:51:78:ca:8f:21:22:82: be:a4:00:32:70:23:e7:1f:f2:31:a8:87:99:2d:e5: 0b:98:74:85:7a:fc:33:ba:4f:f1:58:1d:21:0a:40: f6:f2:cd:ad:f3:4b:c7:a3:2f:cf:90:e7:a6:17:08: 61:48:93:1a:a9:32:6e:02:cb:b5:51:dd:c1:50:b8: 27:5a:b7:d3:72:68:d6:14:f4:0d:cc:bc:61:df:57: 05:8f:84:bf:89:1c:4a:de:63:99:c5:9b:ad:90:ec: d4:41:f7:39:30:42:82:63:44:72:3a:91:c6:fc:34: d7:a7:65:c5:45:39:27:df:c3:e2:34:ef:06:2e:e2: 67:40:db:ed:3e:ea:04:46:33:81:50:5d:cd:5b:9d: 50:45:8c:dc:d7:c0:ea:37:74:7f:55:2e:5b:29:59: 70:78:e5:f9:26:ec:b9:19:d6:c2:83:af:de:a8:54: e8:38:ed:4a:e0:a5:0d:69:b4:5e:08:45:31:9e:66: a2:3e:c0:1f:d8:6e:c5:28:5d:67:6d:40:f5:c5:95: b3:1b:78:4c:e1:6b:7d:16:c0:ba:fc:28:24:17:5f: fc:3e:48:5d:02:1c:d4:e9:aa:17:87:ac:2e:e1:94: c9:73:ce:7d:d1:83:07:40:51:97:ac:54:3d:b6:d6: d5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A1:A8:DA:14:92:A0:DB:73:84:9A:49:5D:C2:FD:72:C1:DF:71:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d031fc45-96ad-3b9c-90d9-9ca75142eb5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl X509v3 Authority Key Identifier: keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer sbgp-ipAddrBlock: critical IPv4: 103.135.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c8:f5:7e:a6:df:40:88:f1:17:f1:cd:a8:4a:9f:18:6b:3e: 0d:d4:e4:00:50:eb:ef:c1:e7:fc:fe:dd:7a:8c:52:c1:94:9a: e0:44:1c:74:97:76:2b:71:d8:97:63:ce:3f:5a:27:47:7e:c8: 73:5c:e5:06:a6:bf:3b:d1:cf:19:4a:3a:aa:06:23:30:80:c0: b0:77:76:91:44:99:a4:e8:74:55:e4:4b:73:ee:fe:12:35:68: 9c:26:2d:2f:95:b7:19:ef:f2:dc:c2:d4:ba:22:8e:da:45:41: 71:4b:e4:b4:b9:ac:b2:83:91:de:e7:6a:cc:6a:b9:6f:43:52: cd:a5:d9:ca:aa:14:89:95:99:fe:d9:79:f9:1b:11:7c:41:91: 8e:e6:bf:09:74:2e:f3:29:1d:b6:48:76:86:bb:bd:c9:25:6c: 6c:b6:76:00:2f:55:d3:20:43:22:d3:ee:a8:7a:3d:0a:22:d9: 31:fa:8f:e5:15:7a:11:61:db:e7:0a:6f:54:e7:1b:07:5e:ba: 38:1d:68:cb:26:07:a3:d4:6b:94:30:4f:cd:ca:e7:99:30:7b: 50:75:7e:22:f7:84:18:8c:ba:65:0e:02:48:4b:bd:01:b4:e3: 87:1e:aa:4e:7c:71:38:0c:47:4d:77:4a:21:ec:f6:0d:c8:63: 57:3c:0b:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1rxQqjWwdivlzbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw MjgzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MmIxNTkzYTItY2JjNy00NTY3LTk1ZjctNWJkYWE5ODhhOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqShIW9gplF4yo8hIoK+pAAycCPnH/IxqIeZ LeULmHSFevwzuk/xWB0hCkD28s2t80vHoy/PkOemFwhhSJMaqTJuAsu1Ud3BULgn WrfTcmjWFPQNzLxh31cFj4S/iRxK3mOZxZutkOzUQfc5MEKCY0RyOpHG/DTXp2XF RTkn38PiNO8GLuJnQNvtPuoERjOBUF3NW51QRYzc18DqN3R/VS5bKVlweOX5Juy5 GdbCg6/eqFToOO1K4KUNabReCEUxnmaiPsAf2G7FKF1nbUD1xZWzG3hM4Wt9FsC6 /CgkF1/8PkhdAhzU6aoXh6wu4ZTJc8590YMHQFGXrFQ9ttbV6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKuhqNoUkqDbc4SaSV3C/XLB33HnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1 OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvZDAzMWZjNDUtOTZhZC0z YjljLTkwZDktOWNhNzUxNDJlYjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4eAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLI9X6m30CI8RfxzahKnxhrPg3U5ABQ6+/B5/z+3XqMUsGUmuBEHHSX ditx2Jdjzj9aJ0d+yHNc5QamvzvRzxlKOqoGIzCAwLB3dpFEmaTodFXkS3Pu/hI1 aJwmLS+Vtxnv8tzC1LoijtpFQXFL5LS5rLKDkd7nasxquW9DUs2l2cqqFImVmf7Z efkbEXxBkY7mvwl0LvMpHbZIdoa7vcklbGy2dgAvVdMgQyLT7qh6PQoi2TH6j+UV ehFh2+cKb1TnGwdeujgdaMsmB6PUa5QwT83K55kwe1B1fiL3hBiMumUOAkhLvQG0 44ceqk58cTgMR013SiHs9g3IY1c8C+E= -----END CERTIFICATE-----Generated at Tue Oct 14 11:24:22 2025 by rpki-client