$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/fc702c1b-6be8-310b-a708-80c533edbd6d.roa File: fc702c1b-6be8-310b-a708-80c533edbd6d.roa (raw, json) Hash identifier: bHMUziEPzkuwX/9oToEKaauGk4yr7JXsVrwSooiHV3M= Subject key identifier: DD:91:E4:52:F7:06:64:46:B8:5A:59:DE:97:AB:35:35:23:49:BB:43 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584A920632505B3E609AB1544840 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/fc702c1b-6be8-310b-a708-80c533edbd6d.roa Signing time: Sat 19 Jul 2025 13:01:04 +0000 ROA not before: Sat 19 Jul 2025 13:01:04 +0000 ROA not after: Fri 17 Oct 2025 13:01:04 +0000 asID: 400097 IP address blocks: 103.123.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:92:06:32:50:5b:3e:60:9a:b1:54:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Jul 19 13:01:04 2025 GMT Not After : Oct 17 13:01:04 2025 GMT Subject: CN=afa1eebd-29ad-4292-8b3d-704adcc8cfff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cd:a7:b9:45:6b:26:ea:49:f4:99:63:6b:36: 7e:b8:15:c4:b5:62:67:f9:49:de:b4:02:2c:80:3c: c6:44:bd:3a:86:71:13:83:95:6e:20:20:7a:d6:a4: aa:27:9c:a6:67:8d:5a:a1:2d:d3:dd:99:c9:36:32: aa:81:45:67:14:82:fa:03:57:46:b9:39:97:95:d7: 0d:fe:0d:01:83:ad:c7:20:71:ca:57:1a:07:c4:68: 1f:1e:66:7b:ff:33:eb:be:a4:02:a4:3d:91:bd:c4: 9b:dd:c4:90:7f:82:5d:64:50:69:21:42:58:a5:88: 74:f0:ba:96:3c:d2:9f:17:01:9a:b5:14:6c:c3:2b: c4:ca:49:0c:69:0d:03:70:96:15:db:8e:e9:7c:66: 96:af:98:63:e8:73:e3:a0:87:c6:e2:59:27:e7:f1: 48:a3:27:6d:cb:6c:54:6f:13:87:02:f7:4b:ac:d7: 4c:f0:ae:0d:72:81:5d:5d:26:65:cb:f0:26:f9:14: 77:ea:11:32:96:51:77:41:b6:47:b7:ea:ae:7f:cc: f4:fd:d4:79:c5:ac:7c:d9:6d:24:33:f0:4f:cd:ef: 79:2c:2c:5e:3c:dc:7e:37:22:0a:5f:d8:28:42:07: d7:e9:6e:71:3f:ed:2c:20:42:66:2a:f2:46:2c:77: 9f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:91:E4:52:F7:06:64:46:B8:5A:59:DE:97:AB:35:35:23:49:BB:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/fc702c1b-6be8-310b-a708-80c533edbd6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv4: 103.123.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:33:8a:1b:61:ad:b4:92:95:b4:f8:10:a1:b9:94:2b:30:92: d4:db:86:14:84:40:e9:6e:15:c4:b8:41:bc:05:29:3e:6f:f1: 99:d7:ee:e1:60:d6:c6:d1:8e:b6:4d:65:5d:0a:33:de:ab:65: 32:bb:59:bb:a8:9d:8f:d3:ba:ac:76:d2:ff:34:b8:47:cf:12: 01:f3:ca:ef:06:6d:e9:06:29:f2:aa:f9:31:28:27:d4:01:b4: e8:ba:41:be:ff:e5:42:2e:a8:a7:64:bf:80:f3:a6:25:c8:ce: ad:e5:3f:d7:7a:55:75:d4:5d:cd:ce:36:fd:9e:27:40:7e:a4: f7:6e:15:6f:07:50:48:72:bb:1e:14:45:68:59:4e:3c:4b:5c: b3:4e:cc:63:58:c7:1d:02:2f:95:16:1d:1f:57:1f:8e:50:0a: a0:ac:2f:1b:ce:a9:f4:c4:4d:50:b3:18:3f:5a:7b:f3:77:1f: dd:3d:69:87:02:bf:1b:a6:f1:1f:ca:06:d5:c4:e0:0a:35:d2: 32:18:68:13:0a:b3:7d:5c:ad:8f:c7:d8:5f:1b:cf:b2:99:32: 44:84:68:87:0a:d1:64:3b:2e:4e:a9:81:7a:84:eb:6b:7d:b2: a3:ff:ce:38:a6:a8:2f:ba:90:0b:6f:dc:15:1f:c5:28:03:9e: 02:85:d4:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqSBjJQWz5gmrFUSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MDcxOTEzMDEwNFoXDTI1MTAxNzEzMDEwNFowLzEtMCsGA1UEAxMk YWZhMWVlYmQtMjlhZC00MjkyLThiM2QtNzA0YWRjYzhjZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs2nuUVrJupJ9JljazZ+uBXEtWJn+UnetAIs gDzGRL06hnETg5VuICB61qSqJ5ymZ41aoS3T3ZnJNjKqgUVnFIL6A1dGuTmXldcN /g0Bg63HIHHKVxoHxGgfHmZ7/zPrvqQCpD2RvcSb3cSQf4JdZFBpIUJYpYh08LqW PNKfFwGatRRswyvEykkMaQ0DcJYV247pfGaWr5hj6HPjoIfG4lkn5/FIoydty2xU bxOHAvdLrNdM8K4NcoFdXSZly/Am+RR36hEyllF3QbZHt+quf8z0/dR5xax82W0k M/BPze95LCxePNx+NyIKX9goQgfX6W5xP+0sIEJmKvJGLHefxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2R5FL3BmRGuFpZ3perNTUjSbtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvZmM3MDJjMWItNmJlOC0z MTBiLWE3MDgtODBjNTMzZWRiZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3vcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8zihthrbSSlbT4EKG5lCswktTbhhSEQOluFcS4QbwFKT5v8ZnX7uFg 1sbRjrZNZV0KM96rZTK7WbuonY/Tuqx20v80uEfPEgHzyu8GbekGKfKq+TEoJ9QB tOi6Qb7/5UIuqKdkv4DzpiXIzq3lP9d6VXXUXc3ONv2eJ0B+pPduFW8HUEhyux4U RWhZTjxLXLNOzGNYxx0CL5UWHR9XH45QCqCsLxvOqfTETVCzGD9ae/N3H909aYcC vxum8R/KBtXE4Ao10jIYaBMKs31crY/H2F8bz7KZMkSEaIcK0WQ7Lk6pgXqE62t9 sqP/zjimqC+6kAtv3BUfxSgDngKF1OA= -----END CERTIFICATE-----Generated at Sun Aug 24 01:24:38 2025 by rpki-client