$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/0205037e-c076-3912-81ad-0a7baa3802d8.roa File: 0205037e-c076-3912-81ad-0a7baa3802d8.roa (raw, json) Hash identifier: eOI/CWzpTPXaVUxVZl0fm+nplOiFUBSZlaNfCQp34kI= Subject key identifier: A0:15:2A:E0:92:6B:53:6E:0B:62:40:F5:C5:CA:33:DA:8F:D1:4B:4E Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Certificate serial: 010D0C9F43285849F17FD6EB54B6F2A4E3D70700 Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/0205037e-c076-3912-81ad-0a7baa3802d8.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 38047 IP address blocks: 103.106.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:d6:eb:54:b6:f2:a4:e3:d7:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=be512f5d-9a1c-4b76-9aac-bd0330d14c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:57:4f:50:2c:c9:53:4a:b4:a6:39:f6:e6: 9a:28:52:dd:87:30:f5:02:22:3f:39:38:39:77:ec: 50:5e:30:09:30:85:8a:79:fb:36:31:ff:44:ae:61: 3a:43:63:0b:96:ff:a4:8f:18:9e:bc:eb:75:b7:c1: 96:7e:9d:9d:fa:d6:7c:42:86:02:ce:f1:b7:33:28: bd:f5:69:8e:5c:8d:14:0d:2b:cc:1d:49:ea:d0:69: 93:35:c5:07:da:01:24:67:32:c4:75:c4:d4:a7:0a: 8a:9c:29:b5:a7:62:39:f9:d1:e8:b6:cb:1b:a8:aa: ae:1e:58:6d:e6:df:b3:8f:8b:ee:ec:13:5c:01:2c: 5d:5e:43:7b:1e:7c:b2:62:75:07:38:68:2e:52:2e: 61:2b:fc:03:71:6d:9d:ec:e5:93:d9:18:f8:45:dd: 8f:4c:5d:b5:fa:5e:75:83:11:07:21:c9:3e:64:12: 0e:d5:87:13:2d:70:76:c8:14:59:ed:50:61:a9:db: 10:9f:0e:38:5d:38:82:64:f9:6f:8a:d4:a6:e6:35: 2a:86:8b:ef:89:0a:d3:77:b0:52:88:25:15:f1:55: 14:70:93:e4:cb:c8:24:57:8b:ba:15:eb:7b:c9:c7: fe:fd:4f:dc:d7:20:45:b1:eb:95:b8:8a:ab:79:1d: 03:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:15:2A:E0:92:6B:53:6E:0B:62:40:F5:C5:CA:33:DA:8F:D1:4B:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/0205037e-c076-3912-81ad-0a7baa3802d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl X509v3 Authority Key Identifier: keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer sbgp-ipAddrBlock: critical IPv4: 103.106.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:59:fa:28:87:25:f0:ac:9e:45:c5:6b:d6:67:32:53:55:41: 2c:56:f9:26:af:68:ea:ea:40:cf:1f:25:97:71:1b:6f:c5:6c: 9e:8a:40:e6:a8:d4:d2:93:fd:75:2d:85:2b:52:2d:d8:65:f6: e7:37:97:71:b8:8a:71:6f:f0:fe:e0:1d:7e:e3:a5:63:50:c1: 82:03:75:c4:3e:36:06:82:74:c4:9e:22:07:63:33:b2:1b:a7: c8:95:d3:c3:64:2b:4d:dd:fd:ce:9c:06:89:09:94:66:db:c5: bb:3b:4c:ca:48:4f:67:99:28:b4:5d:6b:78:c4:c1:70:cb:63: 9a:60:65:aa:f9:94:8e:0d:95:61:00:ea:ef:22:ef:9c:90:67: 1b:31:30:0e:90:82:62:69:9b:ff:36:2b:12:08:ef:50:56:1d: b6:d9:ed:d9:46:7f:6e:13:63:0f:d0:1f:47:85:34:4a:32:24: 49:0e:16:49:aa:9b:5a:5f:56:a9:54:b8:8b:af:e7:a3:e6:48: f7:9a:9a:41:57:a9:a5:53:be:8e:6e:71:2f:11:dd:80:85:4e: 9a:e8:e3:ee:7c:5a:ba:44:af:64:cc:05:f3:0e:7b:7f:4d:95: 86:e5:2c:42:3e:b5:a0:f4:92:8f:f2:a3:d6:f7:8e:10:ef:0d: 99:d0:6a:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf9brVLbypOPXBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk MjYxMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk YmU1MTJmNWQtOWExYy00Yjc2LTlhYWMtYmQwMzMwZDE0YzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPRXT1AsyVNKtKY59uaaKFLdhzD1AiI/OTg5 d+xQXjAJMIWKefs2Mf9ErmE6Q2MLlv+kjxievOt1t8GWfp2d+tZ8QoYCzvG3Myi9 9WmOXI0UDSvMHUnq0GmTNcUH2gEkZzLEdcTUpwqKnCm1p2I5+dHotssbqKquHlht 5t+zj4vu7BNcASxdXkN7HnyyYnUHOGguUi5hK/wDcW2d7OWT2Rj4Rd2PTF21+l51 gxEHIck+ZBIO1YcTLXB2yBRZ7VBhqdsQnw44XTiCZPlvitSm5jUqhovviQrTd7BS iCUV8VUUcJPky8gkV4u6Fet7ycf+/U/c1yBFseuVuIqreR0DNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAVKuCSa1NuC2JA9cXKM9qP0UtOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4 YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvMDIwNTAzN2UtYzA3Ni0z OTEyLTgxYWQtMGE3YmFhMzgwMmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1 YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm MjVmZGQyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2o0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxZ+iiHJfCsnkXFa9ZnMlNVQSxW+SavaOrqQM8fJZdxG2/FbJ6KQOao 1NKT/XUthStSLdhl9uc3l3G4inFv8P7gHX7jpWNQwYIDdcQ+NgaCdMSeIgdjM7Ib p8iV08NkK03d/c6cBokJlGbbxbs7TMpIT2eZKLRda3jEwXDLY5pgZar5lI4NlWEA 6u8i75yQZxsxMA6QgmJpm/82KxII71BWHbbZ7dlGf24TYw/QH0eFNEoyJEkOFkmq m1pfVqlUuIuv56PmSPeamkFXqaVTvo5ucS8R3YCFTpro4+58WrpEr2TMBfMOe39N lYblLEI+taD0ko/yo9b3jhDvDZnQavE= -----END CERTIFICATE-----Generated at Sat Jun 7 15:37:21 2025 by rpki-client