$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2088ad0e-df10-303d-a609-0636c73f7c1d.roa File: 2088ad0e-df10-303d-a609-0636c73f7c1d.roa (raw, json) Hash identifier: B8Qm5pBefaiB58RGywpqWGeQ7hYR19ydN3IIVKIk6ZQ= Subject key identifier: 02:02:7A:4B:95:5A:A2:51:B7:6C:6E:CE:12:36:43:50:E4:08:C5:9D Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Certificate serial: 010D0C9F4328584D359FD8BDB807140F9B18AA00 Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2088ad0e-df10-303d-a609-0636c73f7c1d.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 38047 IP address blocks: 103.123.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:d8:bd:b8:07:14:0f:9b:18:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=083dd3a7-4ce9-432b-bd97-87a1b0f110e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:5d:a1:1b:0a:6f:b4:55:22:ab:16:9a:09: 83:05:87:8b:89:8f:c6:b9:43:d4:1b:fb:97:a7:cf: b1:74:b0:2d:b7:05:ae:32:f1:c8:dd:73:0a:12:65: 17:28:f4:d3:66:e8:f0:50:e3:52:95:5d:a4:ce:5b: 39:36:b6:81:54:58:7b:a7:ef:5e:48:06:3a:97:ef: b6:07:26:cc:76:fb:db:69:7c:c6:bb:b0:29:31:2b: 1e:1a:f3:8e:aa:f5:7a:c1:0c:79:cb:06:4a:9f:db: 2f:33:44:72:8a:66:18:71:c2:f2:47:7a:70:3a:1a: b2:8c:50:3c:b2:1f:6e:78:62:06:70:df:d1:18:52: f6:ab:8b:e7:d1:d7:0d:f3:b9:55:61:0b:78:45:3d: 11:63:10:21:63:8b:0d:9e:a7:c7:f8:2c:31:07:14: df:6b:4a:a1:2c:71:0c:da:f6:c0:68:b8:82:57:37: d4:1c:a1:aa:a7:2d:8c:12:17:b2:7d:0a:d0:4f:d9: 65:bf:1d:5e:bc:6e:23:29:d9:37:05:20:8f:20:53: 65:1f:4c:83:78:80:6d:96:8c:0b:1e:7c:19:ad:57: 73:23:7c:3d:c4:70:20:d3:ad:89:8d:6c:81:aa:04: 15:dc:f7:c1:d2:cb:da:9d:eb:8c:82:ea:15:a2:1a: 66:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:02:7A:4B:95:5A:A2:51:B7:6C:6E:CE:12:36:43:50:E4:08:C5:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/2088ad0e-df10-303d-a609-0636c73f7c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl X509v3 Authority Key Identifier: keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer sbgp-ipAddrBlock: critical IPv4: 103.123.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ce:ce:f6:d8:81:c9:e7:86:36:45:cb:44:22:1a:c8:9c:cb: c9:0c:e4:19:ca:ce:83:d1:d3:b9:29:9f:04:7e:85:b5:ac:9d: 50:99:0d:16:05:d3:22:40:3f:be:b7:11:94:cf:5e:fe:ec:9f: 58:06:8d:38:08:c0:01:a0:29:4f:38:cf:7e:8d:13:02:0c:bd: 36:5b:de:88:f9:88:5c:3c:15:5c:85:91:3d:90:73:21:44:c0: 05:b9:a6:7f:a1:58:a1:a7:fe:7d:71:a3:8e:95:3f:64:ef:ad: 1b:47:57:61:f8:ce:0e:8d:34:51:65:78:43:db:04:45:17:8c: 11:46:5c:34:5d:84:e2:05:ab:6e:3c:f7:92:43:27:fe:be:0b: 28:be:0c:7b:d1:07:42:74:c5:f8:0e:27:06:03:39:50:79:22: ee:9b:e3:16:eb:31:11:cf:6e:f2:37:63:c2:3d:fc:d8:58:1b: d5:c2:00:3b:36:f7:4b:9d:a5:74:3b:5d:67:5f:96:d6:08:97: a5:82:2a:a5:69:6c:1d:f9:3c:17:80:b2:45:b0:57:37:05:90: 7f:0f:6f:88:28:c0:00:2a:3f:0b:d8:e8:b2:b8:d4:bc:29:88: 89:81:3e:36:bd:14:ed:89:68:81:cc:9c:fd:9d:ac:16:87:fa: 36:72:f8:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n9i9uAcUD5sYqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk MjYxMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MDgzZGQzYTctNGNlOS00MzJiLWJkOTctODdhMWIwZjExMGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt5doRsKb7RVIqsWmgmDBYeLiY/GuUPUG/uX p8+xdLAttwWuMvHI3XMKEmUXKPTTZujwUONSlV2kzls5NraBVFh7p+9eSAY6l++2 BybMdvvbaXzGu7ApMSseGvOOqvV6wQx5ywZKn9svM0RyimYYccLyR3pwOhqyjFA8 sh9ueGIGcN/RGFL2q4vn0dcN87lVYQt4RT0RYxAhY4sNnqfH+CwxBxTfa0qhLHEM 2vbAaLiCVzfUHKGqpy2MEheyfQrQT9llvx1evG4jKdk3BSCPIFNlH0yDeIBtlowL HnwZrVdzI3w9xHAg062JjWyBqgQV3PfB0svaneuMguoVohpmOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAICekuVWqJRt2xuzhI2Q1DkCMWdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4 YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvMjA4OGFkMGUtZGYxMC0z MDNkLWE2MDktMDYzNmM3M2Y3YzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1 YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm MjVmZGQyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3tkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjOzvbYgcnnhjZFy0QiGsicy8kM5BnKzoPR07kpnwR+hbWsnVCZDRYF 0yJAP763EZTPXv7sn1gGjTgIwAGgKU84z36NEwIMvTZb3oj5iFw8FVyFkT2QcyFE wAW5pn+hWKGn/n1xo46VP2TvrRtHV2H4zg6NNFFleEPbBEUXjBFGXDRdhOIFq248 95JDJ/6+Cyi+DHvRB0J0xfgOJwYDOVB5Iu6b4xbrMRHPbvI3Y8I9/NhYG9XCADs2 90udpXQ7XWdfltYIl6WCKqVpbB35PBeAskWwVzcFkH8Pb4gowAAqPwvY6LK41Lwp iImBPja9FO2JaIHMnP2drBaH+jZy+HU= -----END CERTIFICATE-----Generated at Thu Mar 26 15:44:55 2026 by rpki-client