$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5ca73738-9870-3cd2-90f5-fc006e9d1db6.roa File: 5ca73738-9870-3cd2-90f5-fc006e9d1db6.roa (raw, json) Hash identifier: 7uJNiCHkrqj4S9Np4hjPqtT36F4OillqAXxhYbzO8PU= Subject key identifier: 3B:2C:F1:B5:91:20:1C:D6:90:F6:94:8F:EB:A5:1E:A2:17:D9:57:0F Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Certificate serial: 010D0C9F4328584EF7177C9DBD1BAAE333133200 Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5ca73738-9870-3cd2-90f5-fc006e9d1db6.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 38047 IP address blocks: 103.133.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:7c:9d:bd:1b:aa:e3:33:13:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=ce6ccebd-9d09-4d7f-9cc4-b6fdf0f7e054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:22:fe:e0:ac:1f:aa:14:4a:55:a3:2a:68:f9: 37:99:0e:a2:7b:d7:19:02:41:03:dd:88:d5:03:a2: 9b:36:0a:f9:58:54:89:36:43:8d:44:0d:f5:38:dd: 3e:74:e6:03:1b:a9:83:fd:ba:ca:81:94:af:1b:64: ce:6a:1f:01:22:cc:c3:3b:f0:04:04:4b:96:00:0c: f5:c6:47:b3:59:d4:18:8e:a4:12:8f:3a:b7:55:1c: 47:c8:f6:e6:cd:2c:e5:d0:ce:e7:43:14:aa:2b:8a: d1:cd:3b:b9:f8:63:0a:c7:77:60:85:a7:32:52:9d: ca:db:c8:b1:10:d9:49:74:e8:6b:de:6d:ac:15:98: 19:4f:28:01:23:22:b8:4e:26:73:ef:42:b4:2e:44: 1f:d4:69:c9:4d:35:c5:e0:57:da:d3:a6:ab:13:07: 1a:83:9d:f3:84:7e:3f:fa:4c:12:c4:00:5d:f7:21: b4:20:24:39:9f:7e:78:b2:bb:e3:88:81:20:fb:61: a8:3a:87:10:82:ca:3c:d9:22:0c:3d:f9:b8:9a:f5: da:80:21:a5:79:bd:52:4a:91:cf:37:62:3a:33:04: 05:03:cc:bc:4d:d4:6a:db:2e:20:0d:16:a3:09:e0: bc:55:ea:33:54:cd:f2:db:b9:8f:48:45:93:ae:6d: bb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2C:F1:B5:91:20:1C:D6:90:F6:94:8F:EB:A5:1E:A2:17:D9:57:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5ca73738-9870-3cd2-90f5-fc006e9d1db6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl X509v3 Authority Key Identifier: keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer sbgp-ipAddrBlock: critical IPv4: 103.133.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:64:b0:bd:f5:3d:58:f6:bf:9a:5f:a7:36:f3:3b:df:2c:93: 39:37:4e:b5:cb:64:df:fc:f4:6a:5a:03:4b:af:11:9a:be:db: 48:8f:d9:6f:5d:b3:27:15:93:41:5f:0c:92:65:8e:36:9f:8b: ef:55:e2:b1:e0:94:54:c8:c3:ef:91:da:26:c1:b0:00:22:85: 17:d3:7f:75:8c:1e:43:eb:4e:f5:4a:f9:9d:a3:82:68:7c:3c: f8:93:59:c2:7b:37:4c:16:e1:d3:7d:57:ef:4f:a3:7c:8e:b9: b1:ea:a8:18:cb:1c:7a:62:0f:a2:46:1b:7a:03:3d:93:77:59: da:6f:0e:cc:9e:23:1a:c9:63:43:42:ce:f8:64:fe:8c:72:d9: 7d:0c:80:fc:f6:c6:3b:00:51:89:76:ba:06:90:40:51:83:78: 55:6d:a7:ff:a1:e6:45:d3:3e:2f:88:0c:a3:ae:b6:9a:d4:36: 41:31:b5:37:a9:a6:89:46:b2:cb:ca:3c:10:93:40:b6:4c:01: 8c:a6:c4:78:14:5c:85:68:8c:e5:11:f3:3b:c3:0a:48:80:a2: 9e:40:0d:66:5c:26:53:44:42:da:72:5d:6b:f6:a7:3c:4f:f5: 21:ec:86:78:a0:ee:ca:49:66:4c:77:96:36:59:85:a4:11:01: d4:1a:00:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3ydvRuq4zMTMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk MjYxMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk Y2U2Y2NlYmQtOWQwOS00ZDdmLTljYzQtYjZmZGYwZjdlMDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiL+4KwfqhRKVaMqaPk3mQ6ie9cZAkED3YjV A6KbNgr5WFSJNkONRA31ON0+dOYDG6mD/brKgZSvG2TOah8BIszDO/AEBEuWAAz1 xkezWdQYjqQSjzq3VRxHyPbmzSzl0M7nQxSqK4rRzTu5+GMKx3dghacyUp3K28ix ENlJdOhr3m2sFZgZTygBIyK4TiZz70K0LkQf1GnJTTXF4Ffa06arEwcag53zhH4/ +kwSxABd9yG0ICQ5n354srvjiIEg+2GoOocQgso82SIMPfm4mvXagCGleb1SSpHP N2I6MwQFA8y8TdRq2y4gDRajCeC8VeozVM3y27mPSEWTrm27SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDss8bWRIBzWkPaUj+ulHqIX2VcPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4 YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvNWNhNzM3MzgtOTg3MC0z Y2QyLTkwZjUtZmMwMDZlOWQxZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1 YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm MjVmZGQyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4WYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFksL31PVj2v5pfpzbzO98skzk3TrXLZN/89GpaA0uvEZq+20iP2W9d sycVk0FfDJJljjafi+9V4rHglFTIw++R2ibBsAAihRfTf3WMHkPrTvVK+Z2jgmh8 PPiTWcJ7N0wW4dN9V+9Po3yOubHqqBjLHHpiD6JGG3oDPZN3WdpvDsyeIxrJY0NC zvhk/oxy2X0MgPz2xjsAUYl2ugaQQFGDeFVtp/+h5kXTPi+IDKOutprUNkExtTep polGssvKPBCTQLZMAYymxHgUXIVojOUR8zvDCkiAop5ADWZcJlNEQtpyXWv2pzxP 9SHshnig7spJZkx3ljZZhaQRAdQaAIk= -----END CERTIFICATE-----Generated at Sun Oct 11 16:54:56 2026 by rpki-client