$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2088ad0e-df10-303d-a609-0636c73f7c1d.roa File: 2088ad0e-df10-303d-a609-0636c73f7c1d.roa (raw, json) Hash identifier: ulhp6ypxXmrzkZ91VTIniG7CUIHitSfxluSGWQRtjl4= Subject key identifier: E4:2D:FF:2D:80:4C:BA:A3:F5:FD:65:1C:87:89:07:37:83:F9:7D:8F Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Certificate serial: 010D0C9F4328584B76F2571771378B5127D23F80 Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2088ad0e-df10-303d-a609-0636c73f7c1d.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 38047 IP address blocks: 103.123.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:57:17:71:37:8b:51:27:d2:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=4f913a2a-a98b-4c6a-9ae4-aa0d5b7c5862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f0:b7:ea:81:9b:5e:d5:b4:2d:48:2b:03:88: 86:82:ed:51:dc:a6:e8:9f:80:e3:18:10:a6:d0:48: 9a:63:34:05:85:43:ed:89:be:ce:f5:b9:52:c5:17: b8:d1:31:b1:0a:7d:00:4b:6d:db:b5:d6:0b:78:97: f1:8c:87:bc:95:c6:83:81:f8:36:fe:88:0e:73:df: 08:71:16:d1:fd:3b:13:30:ec:83:fa:99:9d:01:59: f8:18:62:69:fc:65:f3:0b:b3:9e:2c:b8:bd:56:57: eb:9c:ca:bd:e0:79:0f:13:bf:d1:e6:7b:cf:dd:5b: 36:b9:f4:9a:86:27:4b:6b:6b:9b:7d:b0:8c:f2:ef: 4c:67:92:b8:5b:f6:37:c3:98:42:77:b9:38:52:29: 5d:42:b3:a1:03:2d:46:dd:16:7e:1b:78:99:b5:9d: 5c:f6:8a:45:4b:e1:3c:52:45:e2:b0:e4:f7:a6:6b: b9:c0:95:46:56:10:d0:9c:25:ff:59:34:31:c6:23: c2:3d:86:42:a9:0d:43:ea:56:a5:7e:8d:f0:e1:1b: 87:ca:5f:46:76:30:53:c2:e4:18:ef:3e:53:73:dc: a9:a5:29:78:e3:2f:98:2d:45:ea:e8:75:4f:16:7a: 35:d4:34:c1:cb:37:e5:af:d8:47:ae:60:df:2a:e0: 66:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2D:FF:2D:80:4C:BA:A3:F5:FD:65:1C:87:89:07:37:83:F9:7D:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2088ad0e-df10-303d-a609-0636c73f7c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl X509v3 Authority Key Identifier: keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer sbgp-ipAddrBlock: critical IPv4: 103.123.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:fb:66:4b:6c:b8:ce:ce:c3:e4:98:e3:3a:31:83:f5:ca:04: f7:51:7f:e4:a4:02:a4:c6:c4:ea:ea:dd:8d:43:d1:a9:52:2f: e2:fe:f2:a9:15:ec:b9:f8:33:db:f4:0c:d5:04:49:64:57:87: eb:db:e5:e1:e3:46:d8:f3:b9:57:b5:0d:fa:86:3f:6e:aa:ee: 82:11:a2:8b:eb:39:67:9b:57:c6:4f:8d:5d:18:00:f8:70:0f: d0:7f:94:9e:44:af:7e:99:62:62:fa:9d:ce:78:f0:31:99:b0: aa:b5:08:26:9c:80:9b:7a:c5:d5:0c:dd:de:87:86:10:56:e1: 2d:df:17:f4:44:35:a3:a6:5a:f8:e9:38:1e:d2:28:20:0c:21: 30:74:ea:26:44:2d:a3:28:6c:02:69:df:6d:87:58:53:39:84: 9a:eb:e3:35:b6:67:da:38:4c:8c:d8:70:56:f7:e7:3c:95:c4: 7a:05:7e:5d:d9:3d:4e:be:9b:c3:18:19:db:09:a6:60:32:75: 81:59:7b:7c:f2:63:3f:8a:a6:14:35:ba:5c:dc:21:b4:cb:aa: 73:79:c4:bc:9a:32:d4:29:7e:9f:06:52:15:89:11:67:4a:3e: 7b:e8:fc:68:1c:f5:1d:82:7a:74:4c:0d:2d:8f:99:4f:c6:01: 2a:e6:43:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28lcXcTeLUSfSP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk MjYxMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NGY5MTNhMmEtYTk4Yi00YzZhLTlhZTQtYWEwZDViN2M1ODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/C36oGbXtW0LUgrA4iGgu1R3Kbon4DjGBCm 0EiaYzQFhUPtib7O9blSxRe40TGxCn0AS23btdYLeJfxjIe8lcaDgfg2/ogOc98I cRbR/TsTMOyD+pmdAVn4GGJp/GXzC7OeLLi9VlfrnMq94HkPE7/R5nvP3Vs2ufSa hidLa2ubfbCM8u9MZ5K4W/Y3w5hCd7k4UildQrOhAy1G3RZ+G3iZtZ1c9opFS+E8 UkXisOT3pmu5wJVGVhDQnCX/WTQxxiPCPYZCqQ1D6lalfo3w4RuHyl9GdjBTwuQY 7z5Tc9yppSl44y+YLUXq6HVPFno11DTByzflr9hHrmDfKuBm6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQt/y2ATLqj9f1lHIeJBzeD+X2PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4 YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvMjA4OGFkMGUtZGYxMC0z MDNkLWE2MDktMDYzNmM3M2Y3YzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1 YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm MjVmZGQyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3tkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED7ZktsuM7Ow+SY4zoxg/XKBPdRf+SkAqTGxOrq3Y1D0alSL+L+8qkV 7Ln4M9v0DNUESWRXh+vb5eHjRtjzuVe1DfqGP26q7oIRoovrOWebV8ZPjV0YAPhw D9B/lJ5Er36ZYmL6nc548DGZsKq1CCacgJt6xdUM3d6HhhBW4S3fF/RENaOmWvjp OB7SKCAMITB06iZELaMobAJp322HWFM5hJrr4zW2Z9o4TIzYcFb35zyVxHoFfl3Z PU6+m8MYGdsJpmAydYFZe3zyYz+KphQ1ulzcIbTLqnN5xLyaMtQpfp8GUhWJEWdK Pnvo/Ggc9R2CenRMDS2PmU/GASrmQ9k= -----END CERTIFICATE-----Generated at Mon Oct 20 21:15:16 2025 by rpki-client