$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2ac55f39-0179-3626-9f0f-32171775be3e.roa File: 2ac55f39-0179-3626-9f0f-32171775be3e.roa (raw, json) Hash identifier: PoUwT3vlqOC+uyXIPrpBlDg0LRb2CX6SqAoJ/eLtXnE= Subject key identifier: B2:7F:A9:8F:95:84:E7:E4:24:50:CD:8B:08:3B:FB:7E:8F:3A:20:DF Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F4328584B48E1B2783340DB72E3A9ECC0 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2ac55f39-0179-3626-9f0f-32171775be3e.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396949 IP address blocks: 103.101.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b2:78:33:40:db:72:e3:a9:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=73bd5e47-de6d-4c56-ba18-19d5a1fd34c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a9:e2:e8:42:85:e8:5a:7c:4b:9b:d1:fe:f5: d2:9b:4a:d4:f2:2f:2d:95:9a:7b:1f:9e:df:80:40: 46:ea:f5:05:89:96:08:8a:ee:41:e0:e8:c6:1b:92: 83:93:7c:87:5b:a0:14:ed:10:82:47:55:40:1c:1d: 3f:10:19:1d:b3:ba:99:32:1a:d4:37:6b:38:7f:f0: 99:87:4a:ec:1d:c5:3b:e6:c7:c9:1e:89:22:12:db: ec:67:63:2d:c5:07:73:1d:17:44:9b:5a:c4:a8:fa: b0:80:23:f4:05:b4:24:b6:71:db:ca:1a:48:9e:67: e7:e1:e0:c3:f6:19:61:53:b6:4a:ab:96:a0:70:d7: be:b0:84:dc:14:52:55:87:e3:65:8b:4f:31:d1:de: f7:23:d3:f8:00:33:cc:85:7c:fc:04:8f:95:3a:9f: 5f:73:6c:89:1d:d8:da:06:50:04:14:dc:80:4e:fd: ae:00:51:e8:c1:32:09:04:57:cc:d0:c7:1a:bc:50: d4:95:cf:d7:a9:31:47:9f:81:a7:c9:af:0e:0d:e7: b1:c2:2c:c1:02:07:22:9c:26:81:1c:c6:c8:45:cb: a9:aa:e0:04:0b:82:53:8b:ac:9f:ca:02:f7:6d:36: 5b:8b:67:0f:dc:91:69:3f:f0:c3:60:b9:01:6d:f8: 5c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7F:A9:8F:95:84:E7:E4:24:50:CD:8B:08:3B:FB:7E:8F:3A:20:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2ac55f39-0179-3626-9f0f-32171775be3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv4: 103.101.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:aa:50:6e:67:3b:41:9b:48:b6:17:1e:f1:55:1a:6a:85:b2: e0:f2:f9:89:c3:17:17:fa:bd:72:d5:92:fc:78:8e:91:0b:f9: 92:6e:21:7e:6f:b4:31:cc:dd:5b:0a:4b:f7:83:0a:f9:4c:7e: 50:33:15:4a:b3:65:21:90:f9:f2:09:40:ed:05:d1:66:9a:e9: c7:b6:c1:4a:bb:c3:9e:6d:1b:1d:be:cd:f1:68:0a:2a:3d:c0: 40:05:93:e6:4d:7d:3d:80:d3:b4:8b:c5:1a:e1:c6:6f:39:34: d0:d8:18:d0:2b:a7:39:ce:15:95:2d:dc:88:af:0c:af:9a:36: d7:37:97:5d:f6:f1:0b:1f:ef:25:05:a5:ad:c2:85:e6:72:33: 1d:f0:a6:16:d4:c6:b6:53:d5:49:92:08:ab:42:51:18:09:ff: 5b:b9:69:05:9f:16:aa:ca:c0:54:02:4c:a4:40:2b:4d:b4:87: e1:f3:94:1b:15:3f:75:2b:07:57:82:ff:8b:7f:b5:2e:19:f9: dc:b9:cf:3f:af:d6:80:06:76:69:9a:07:b4:00:69:59:0a:2e: 8e:22:bd:bb:f8:79:c9:a1:91:77:e3:a9:c1:fa:f7:41:1a:ed: a0:2e:4f:cc:92:a5:7f:2f:f5:ee:d0:ba:2e:1b:01:a9:53:c2: ba:6e:c7:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bJ4M0DbcuOp7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NzNiZDVlNDctZGU2ZC00YzU2LWJhMTgtMTlkNWExZmQzNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgani6EKF6Fp8S5vR/vXSm0rU8i8tlZp7H57f gEBG6vUFiZYIiu5B4OjGG5KDk3yHW6AU7RCCR1VAHB0/EBkds7qZMhrUN2s4f/CZ h0rsHcU75sfJHokiEtvsZ2MtxQdzHRdEm1rEqPqwgCP0BbQktnHbyhpInmfn4eDD 9hlhU7ZKq5agcNe+sITcFFJVh+Nli08x0d73I9P4ADPMhXz8BI+VOp9fc2yJHdja BlAEFNyATv2uAFHowTIJBFfM0McavFDUlc/XqTFHn4Gnya8ODeexwizBAgcinCaB HMbIRcupquAEC4JTi6yfygL3bTZbi2cP3JFpP/DDYLkBbfhcZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJ/qY+VhOfkJFDNiwg7+36POiDfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvMmFjNTVmMzktMDE3OS0z NjI2LTlmMGYtMzIxNzE3NzViZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2XIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKqUG5nO0GbSLYXHvFVGmqFsuDy+YnDFxf6vXLVkvx4jpEL+ZJuIX5v tDHM3VsKS/eDCvlMflAzFUqzZSGQ+fIJQO0F0Waa6ce2wUq7w55tGx2+zfFoCio9 wEAFk+ZNfT2A07SLxRrhxm85NNDYGNArpznOFZUt3IivDK+aNtc3l1328Qsf7yUF pa3CheZyMx3wphbUxrZT1UmSCKtCURgJ/1u5aQWfFqrKwFQCTKRAK020h+HzlBsV P3UrB1eC/4t/tS4Z+dy5zz+v1oAGdmmaB7QAaVkKLo4ivbv4ecmhkXfjqcH690Ea 7aAuT8ySpX8v9e7Qui4bAalTwrpux8Q= -----END CERTIFICATE-----Generated at Mon Oct 20 10:14:34 2025 by rpki-client