$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5ca73738-9870-3cd2-90f5-fc006e9d1db6.roa File: 5ca73738-9870-3cd2-90f5-fc006e9d1db6.roa (raw, json) Hash identifier: wxrdkp9bxsTXCCDMrpWi9iu7dCu2Uda8/N1xMBv97zw= Subject key identifier: 65:C4:7D:AE:AA:27:CB:1D:19:9F:9A:0D:5C:BB:D8:2C:EE:EE:DE:60 Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Certificate serial: 010D0C9F4328584AD23BD86C8FAB510361BAC940 Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5ca73738-9870-3cd2-90f5-fc006e9d1db6.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 38047 IP address blocks: 103.133.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:d8:6c:8f:ab:51:03:61:ba:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=126bc7f8-d3ef-46fc-b8f6-4eadcd174bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b5:cd:10:5a:b5:78:38:61:cb:bf:85:9c:56: d6:7b:ce:db:a0:bb:b0:d1:b4:62:1f:4c:ac:0c:51: 8c:95:7c:e9:03:10:47:4a:8c:2f:17:c4:cd:1f:22: 16:bf:3e:c9:17:a0:bb:6f:f5:18:66:2f:73:55:ea: 00:cc:5f:61:53:e7:2e:96:26:1e:03:e5:d1:f8:93: 63:75:3f:7d:b8:29:35:01:74:7b:bd:49:6a:9c:fe: 73:b8:ff:50:57:df:22:39:31:40:1f:a9:cf:dc:71: b3:11:e9:2b:98:41:4c:6b:4a:56:4b:e1:4f:fa:38: 36:6c:f9:20:65:1e:71:cc:80:4f:b4:39:07:10:60: 85:df:12:4e:51:03:62:ad:7a:53:bb:79:0f:05:b5: 97:da:f3:ee:9e:ee:95:cc:b6:17:a6:12:48:88:ef: d9:d0:c0:45:c6:21:50:26:28:90:aa:02:07:a6:56: ec:c7:1c:6b:c9:94:10:f7:3c:70:59:80:66:a3:0c: a0:2e:32:82:dc:12:78:50:a2:29:6c:6c:56:23:30: 22:05:77:2c:38:4e:1e:55:b8:e6:42:c0:0e:c4:df: 10:bb:0f:73:ed:bc:a0:3d:25:bd:9c:6c:f8:e9:d1: 23:69:31:71:23:fc:b9:19:a9:65:4f:d0:c2:dd:82: 2a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C4:7D:AE:AA:27:CB:1D:19:9F:9A:0D:5C:BB:D8:2C:EE:EE:DE:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5ca73738-9870-3cd2-90f5-fc006e9d1db6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl X509v3 Authority Key Identifier: keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer sbgp-ipAddrBlock: critical IPv4: 103.133.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:98:15:41:90:07:e2:aa:6e:1b:67:d4:f8:8f:71:a3:10:be: 8c:61:27:19:19:87:b7:1a:6c:04:12:25:07:66:07:a7:a8:b7: 29:6b:d9:43:52:67:c7:49:a2:ef:91:ad:a5:b7:9c:40:a7:32: 64:38:2e:ed:19:2f:01:a5:36:25:27:04:37:ef:bb:7a:9a:7d: ad:47:31:24:40:ed:7d:1a:2e:5e:b8:91:26:61:6d:44:ec:e1: aa:11:6f:10:2d:ff:3a:f1:d7:3d:64:37:da:6f:68:06:89:e7: 5c:38:f1:ae:39:45:8b:40:c7:a3:a5:86:34:c8:c2:4b:9e:38: ab:8c:1c:32:d7:ff:8f:7f:66:ef:c3:4b:db:67:25:00:a0:3c: a1:a0:b4:9d:b9:a1:22:0f:1a:e1:16:50:f3:74:95:9d:58:e4: 74:44:cf:93:1e:8f:9f:33:da:86:8d:4b:65:f7:d4:d4:6c:1d: 03:b2:4e:95:dc:3b:0d:55:e0:96:28:d9:d7:a5:4f:aa:e8:5b: 4f:70:6e:12:c2:e8:7c:d2:12:74:c2:51:fc:ab:b1:98:0e:a1: a2:18:03:b5:dd:3d:78:e3:b1:c0:c3:d4:9d:f2:2b:0f:79:c7: 43:db:41:c3:c8:14:f8:7b:ae:5d:fd:46:33:07:4b:9b:c2:89: a1:76:a1:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9hsj6tRA2G6yUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk MjYxMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk MTI2YmM3ZjgtZDNlZi00NmZjLWI4ZjYtNGVhZGNkMTc0YmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7XNEFq1eDhhy7+FnFbWe87boLuw0bRiH0ys DFGMlXzpAxBHSowvF8TNHyIWvz7JF6C7b/UYZi9zVeoAzF9hU+culiYeA+XR+JNj dT99uCk1AXR7vUlqnP5zuP9QV98iOTFAH6nP3HGzEekrmEFMa0pWS+FP+jg2bPkg ZR5xzIBPtDkHEGCF3xJOUQNirXpTu3kPBbWX2vPunu6VzLYXphJIiO/Z0MBFxiFQ JiiQqgIHplbsxxxryZQQ9zxwWYBmowygLjKC3BJ4UKIpbGxWIzAiBXcsOE4eVbjm QsAOxN8Quw9z7bygPSW9nGz46dEjaTFxI/y5GallT9DC3YIqkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXEfa6qJ8sdGZ+aDVy72Czu7t5gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4 YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvNWNhNzM3MzgtOTg3MC0z Y2QyLTkwZjUtZmMwMDZlOWQxZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1 YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm MjVmZGQyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4WYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKYFUGQB+Kqbhtn1PiPcaMQvoxhJxkZh7cabAQSJQdmB6eotylr2UNS Z8dJou+RraW3nECnMmQ4Lu0ZLwGlNiUnBDfvu3qafa1HMSRA7X0aLl64kSZhbUTs 4aoRbxAt/zrx1z1kN9pvaAaJ51w48a45RYtAx6OlhjTIwkueOKuMHDLX/49/Zu/D S9tnJQCgPKGgtJ25oSIPGuEWUPN0lZ1Y5HREz5Mej58z2oaNS2X31NRsHQOyTpXc Ow1V4JYo2delT6roW09wbhLC6HzSEnTCUfyrsZgOoaIYA7XdPXjjscDD1J3yKw95 x0PbQcPIFPh7rl39RjMHS5vCiaF2oWM= -----END CERTIFICATE-----Generated at Tue Oct 28 04:44:27 2025 by rpki-client