$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/df776e4d-7cf7-3f1b-813e-f6d2585d625e.roa File: df776e4d-7cf7-3f1b-813e-f6d2585d625e.roa (raw, json) Hash identifier: /0TOH2SakBC95WfIRgKnv09TwYqT0abT7WxCAQGJ4oE= Subject key identifier: 34:CC:BF:D2:2F:CA:46:09:41:68:08:5E:DE:4E:66:A2:0D:97:E6:C6 Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F4328584D24DFA2A45EF2A380A217C600 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/df776e4d-7cf7-3f1b-813e-f6d2585d625e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 14315 IP address blocks: 103.28.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:a2:a4:5e:f2:a3:80:a2:17:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=76da9ab5-4849-4de9-a8b7-eafaee8ca076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:fa:d0:47:ff:d5:25:48:57:8c:3d:7f:cc: 20:08:92:73:de:40:2a:74:b7:e3:83:2d:10:3e:3a: ef:2b:f3:2e:61:4f:36:1b:cd:d8:21:a0:da:15:36: 4b:be:eb:18:5a:56:2b:aa:8e:37:3a:43:26:37:15: 55:17:c6:04:bb:03:ee:90:1c:1b:f5:dd:ea:29:8b: 84:62:15:2d:ae:f2:e6:15:b5:4f:51:bf:29:a2:8d: e8:9c:7a:68:53:35:0a:d0:f8:39:bb:7d:47:ed:32: 66:7d:cc:b6:68:07:a1:4b:7a:c5:91:e1:63:4e:5f: ca:06:37:1a:ea:25:11:3e:3f:d2:43:d8:e7:b3:89: 00:27:56:f7:c9:f9:db:55:b5:d5:fa:ea:72:80:62: 99:3f:01:7a:9d:56:43:0a:82:24:2a:34:54:33:ee: 2e:80:94:b2:e9:95:f5:41:1a:1c:59:7a:6f:80:c2: 15:db:56:c8:29:7b:19:a7:cc:00:fd:79:20:21:98: 6c:7e:52:5e:90:a4:97:48:f8:17:2c:2b:25:40:b2: 6e:11:d7:b5:7c:77:f4:e7:d0:0c:f2:5c:03:64:37: 8f:92:b0:27:61:a1:c1:a1:04:e6:04:c6:72:13:ed: 92:89:cb:de:d4:b4:34:a6:01:25:b0:d1:62:60:e5: 79:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CC:BF:D2:2F:CA:46:09:41:68:08:5E:DE:4E:66:A2:0D:97:E6:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/df776e4d-7cf7-3f1b-813e-f6d2585d625e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 103.28.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:8a:51:bc:2d:24:39:f6:c3:df:ef:20:02:20:8f:9d:3a:d4: 5f:55:cc:67:8e:36:f4:19:2d:f4:2b:9f:a4:d7:25:b6:06:09: a2:88:5f:12:c1:a1:fa:2e:c2:fc:1a:d8:0c:f2:66:ac:bb:e4: e8:a9:86:99:44:e1:76:ff:0a:b8:2e:f2:35:58:fd:bf:93:ef: 8d:c5:77:53:ac:d9:b6:75:25:05:cb:62:6f:b2:25:70:23:27: ec:95:95:8d:62:b5:c8:ce:bb:99:b2:7e:b4:3f:e3:1a:0b:b6: b7:a7:2f:6d:b4:fb:99:92:c8:4a:cf:fd:bf:24:c2:aa:62:b3: 38:35:02:58:f6:8e:c9:3a:16:0b:63:32:cf:67:b6:39:eb:73: 46:fb:6c:e9:d9:53:8d:12:6d:8c:3e:ba:63:c1:05:f5:41:49: 44:34:79:f9:b1:54:8f:f4:fa:52:55:72:38:2c:e8:53:56:f0: a8:d1:30:59:97:66:0a:22:65:06:06:37:82:ba:b5:68:68:a8: 9b:d7:c6:46:2f:cd:b3:f0:bb:6d:00:ef:94:13:8e:36:ff:b1: a8:25:58:09:cc:d0:83:13:69:ea:66:d0:3c:e9:94:06:3b:1a: 52:e6:36:7f:e3:91:02:1e:1c:6f:be:d7:59:3a:a0:7e:39:fd: f4:5a:c5:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k36KkXvKjgKIXxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NzZkYTlhYjUtNDg0OS00ZGU5LWE4YjctZWFmYWVlOGNhMDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5v60Ef/1SVIV4w9f8wgCJJz3kAqdLfjgy0Q PjrvK/MuYU82G83YIaDaFTZLvusYWlYrqo43OkMmNxVVF8YEuwPukBwb9d3qKYuE YhUtrvLmFbVPUb8poo3onHpoUzUK0Pg5u31H7TJmfcy2aAehS3rFkeFjTl/KBjca 6iURPj/SQ9jns4kAJ1b3yfnbVbXV+upygGKZPwF6nVZDCoIkKjRUM+4ugJSy6ZX1 QRocWXpvgMIV21bIKXsZp8wA/XkgIZhsflJekKSXSPgXLCslQLJuEde1fHf059AM 8lwDZDePkrAnYaHBoQTmBMZyE+2Sicve1LQ0pgElsNFiYOV5NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTMv9IvykYJQWgIXt5OZqINl+bGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvZGY3NzZlNGQtN2NmNy0z ZjFiLTgxM2UtZjZkMjU4NWQ2MjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiKUbwtJDn2w9/vIAIgj5061F9VzGeONvQZLfQrn6TXJbYGCaKIXxLB ofouwvwa2AzyZqy75OiphplE4Xb/Crgu8jVY/b+T743Fd1Os2bZ1JQXLYm+yJXAj J+yVlY1itcjOu5myfrQ/4xoLtrenL220+5mSyErP/b8kwqpiszg1Alj2jsk6Fgtj Ms9ntjnrc0b7bOnZU40SbYw+umPBBfVBSUQ0efmxVI/0+lJVcjgs6FNW8KjRMFmX ZgoiZQYGN4K6tWhoqJvXxkYvzbPwu20A75QTjjb/saglWAnM0IMTaepm0DzplAY7 GlLmNn/jkQIeHG++11k6oH45/fRaxXU= -----END CERTIFICATE-----Generated at Thu Mar 26 03:58:59 2026 by rpki-client