$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa File: 3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa (raw, json) Hash identifier: PcZ/Jf8urvooeIs3BaCqUCb+XaYGe6HL7rFdqs4bZi4= Subject key identifier: 66:D2:A6:C2:29:C6:86:66:3B:59:08:F2:32:8A:7B:FF:DB:57:E7:1C Certificate issuer: /CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Certificate serial: 010D0C9F4328584B358647FAD5EE2B91A6FD5900 Authority key identifier: 86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa Signing time: Tue 16 Sep 2025 02:36:06 +0000 ROA not before: Tue 16 Sep 2025 02:36:06 +0000 ROA not after: Mon 15 Dec 2025 03:36:06 +0000 asID: 396982 IP address blocks: 103.66.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:86:47:fa:d5:ee:2b:91:a6:fd:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Validity Not Before: Sep 16 02:36:06 2025 GMT Not After : Dec 15 03:36:06 2025 GMT Subject: CN=5bc4ddd3-10cc-4b2c-878c-4682c55984cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:f8:80:36:7e:e5:ec:98:07:6e:fb:00:18: 79:a1:94:48:8e:41:85:5b:a1:fa:1d:f2:d7:4f:ce: 32:a5:1c:f5:ad:c5:41:de:28:12:35:8f:68:81:8a: c8:ae:44:d4:c9:6a:a4:70:1e:31:86:84:57:fd:a7: cb:c6:57:c5:a2:70:86:66:ea:a9:61:e1:d6:b4:30: 19:01:91:30:6e:f8:87:6b:d1:57:ee:be:08:67:f8: 90:49:4d:67:67:ea:61:f4:09:a6:4b:28:a3:ba:03: 81:b1:8d:40:1c:68:8b:24:15:8d:6e:de:d6:1f:97: 3a:a5:35:68:20:a1:94:a5:a8:58:89:f1:2d:0b:bf: 61:f7:27:4e:06:b5:61:88:66:99:9c:a2:5b:61:56: 65:b5:a5:4c:70:eb:15:09:08:ac:18:89:56:de:76: 31:e4:07:e5:96:a2:69:b2:a1:f3:2d:29:03:e5:66: e5:d6:00:f7:0c:70:08:fb:1e:7d:fe:65:70:eb:90: 8a:66:7e:9a:a2:98:00:a1:2e:cc:bf:68:3a:67:46: d2:04:03:4f:b4:d4:21:ac:28:ae:dc:07:18:2b:2a: 36:38:af:41:ee:0c:4a:90:70:f1:3b:05:62:22:29: eb:3e:eb:f4:e7:87:fa:c3:48:a8:2b:3a:d2:db:93: 21:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D2:A6:C2:29:C6:86:66:3B:59:08:F2:32:8A:7B:FF:DB:57:E7:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl X509v3 Authority Key Identifier: keyid:86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer sbgp-ipAddrBlock: critical IPv4: 103.66.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:ac:7b:39:48:a7:3c:68:18:0b:d7:32:b1:1a:94:5f:3d:3b: db:89:36:c0:9b:4f:27:58:94:31:64:83:d8:80:6f:57:e7:d1: 7e:12:2c:9e:b9:42:13:51:3b:2f:c0:67:a0:a1:90:08:c5:bc: 7f:5a:6c:f6:0c:79:5b:95:25:01:e4:8a:a9:96:ea:78:bf:20: 26:9b:2e:fd:d3:41:15:46:ef:c9:3f:9f:05:08:d8:40:aa:76: c2:c9:f0:28:12:25:fd:2b:86:fd:4f:e9:cd:8a:7b:98:f1:db: 08:7c:14:93:cf:38:d0:72:ef:6d:a8:53:8f:03:54:d1:4a:fe: 51:60:3b:f0:08:12:cc:d6:f6:77:f2:73:7a:7d:3a:e2:f3:7a: 87:61:36:57:bb:18:1a:98:04:81:3e:ee:7a:7b:a7:c9:e4:17: b2:e6:70:27:5b:4c:d3:cb:2d:91:70:59:5f:c4:5d:39:c3:e7: 53:b1:ea:e0:58:b9:d7:02:5b:78:b8:ed:7b:5a:ef:0d:cc:ce: 68:b3:41:ae:9d:44:da:88:8b:08:f1:67:77:29:d0:9d:55:4e: 8d:bf:08:3c:7b:d1:16:79:43:c4:bb:a4:c6:f6:0c:31:ea:3f: 93:c6:50:54:4d:2b:aa:e7:34:7b:2b:6d:92:12:88:f0:76:f0: f5:70:bb:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1hkf61e4rkab9WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyOGRlNTUtZjU5Ny00MGNmLWI1MDgtMGM1ZDczMThi NWVjMB4XDTI1MDkxNjAyMzYwNloXDTI1MTIxNTAzMzYwNlowLzEtMCsGA1UEAxMk NWJjNGRkZDMtMTBjYy00YjJjLTg3OGMtNDY4MmM1NTk4NGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/L4gDZ+5eyYB277ABh5oZRIjkGFW6H6HfLX T84ypRz1rcVB3igSNY9ogYrIrkTUyWqkcB4xhoRX/afLxlfFonCGZuqpYeHWtDAZ AZEwbviHa9FX7r4IZ/iQSU1nZ+ph9AmmSyijugOBsY1AHGiLJBWNbt7WH5c6pTVo IKGUpahYifEtC79h9ydOBrVhiGaZnKJbYVZltaVMcOsVCQisGIlW3nYx5AfllqJp sqHzLSkD5Wbl1gD3DHAI+x59/mVw65CKZn6aopgAoS7Mv2g6Z0bSBANPtNQhrCiu 3AcYKyo2OK9B7gxKkHDxOwViIinrPuv054f6w0ioKzrS25MhuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbSpsIpxoZmO1kI8jKKe//bV+ccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4 ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVkNzMxOGI1ZWMvMzM1OGRkN2EtZWE1NS0z MTA3LWI3ZjctZWQyM2UyNzI5YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmEyOGRlNTUtZjU5Ny00MGNmLWI1 MDgtMGM1ZDczMThiNWVjLzJhMjhkZTU1LWY1OTctNDBjZi1iNTA4LTBjNWQ3MzE4 YjVlYy5jcmwwHwYDVR0jBBgwFoAUhtnzIHbMN/Aa2EgKlFCWFdVY3HswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVk NzMxOGI1ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ0IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALasezlIpzxoGAvXMrEalF89O9uJNsCbTydYlDFkg9iAb1fn0X4SLJ65 QhNROy/AZ6ChkAjFvH9abPYMeVuVJQHkiqmW6ni/ICabLv3TQRVG78k/nwUI2ECq dsLJ8CgSJf0rhv1P6c2Ke5jx2wh8FJPPONBy722oU48DVNFK/lFgO/AIEszW9nfy c3p9OuLzeodhNle7GBqYBIE+7np7p8nkF7LmcCdbTNPLLZFwWV/EXTnD51Ox6uBY udcCW3i47Xta7w3MzmizQa6dRNqIiwjxZ3cp0J1VTo2/CDx70RZ5Q8S7pMb2DDHq P5PGUFRNK6rnNHsrbZISiPB28PVwu9M= -----END CERTIFICATE-----Generated at Fri Sep 19 08:57:51 2025 by rpki-client