$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1f1f3449-352b-33b4-b2d2-2d8371e938b2.roa File: 1f1f3449-352b-33b4-b2d2-2d8371e938b2.roa (raw, json) Hash identifier: +gEe98m8QOS2THU3k1vVmkkS7b80rqhaLAIIjR4L/hQ= Subject key identifier: 4A:08:B5:6E:2A:3F:8C:41:A7:02:6D:BC:37:A4:72:58:41:DA:66:70 Certificate issuer: /CN=0c82e125-4df5-4912-a714-101a1caa5b99 Certificate serial: 010D0C9F4328584B76F22A43AEC709DDB22FBC80 Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1f1f3449-352b-33b4-b2d2-2d8371e938b2.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 54054 IP address blocks: 103.219.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:2a:43:ae:c7:09:dd:b2:2f:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=7b459200-502b-4a0a-8b7f-3ff06d3f58bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:4d:5f:94:f6:82:79:77:d8:55:15:ca:5e: 33:df:35:b6:84:c5:c1:a4:b2:45:2c:67:23:55:3a: 0d:8d:64:71:92:99:9a:b8:e3:70:1f:89:1b:d2:e3: a4:a6:6c:97:d5:15:ba:3d:83:22:23:6c:85:fe:41: 70:4d:f4:35:7b:15:9f:5c:67:b0:99:00:ce:f3:60: c7:5d:f7:58:ca:4d:60:fe:e7:f7:41:69:00:28:86: 34:ff:37:20:e6:4e:54:76:90:10:49:34:8d:71:a5: 43:99:c1:f6:d3:0c:9d:67:7d:8f:60:eb:38:69:2b: 0c:e4:74:fe:6d:59:55:d3:e3:11:51:77:1a:7b:17: 1c:96:b0:4a:94:6d:b4:2c:f3:9e:d0:39:4d:df:ef: 5b:4a:b1:62:71:ee:b2:ab:3f:2e:95:b2:50:6d:3a: 50:a7:f0:e2:f1:2d:16:99:c9:49:d4:c6:09:7b:18: 9a:49:21:d9:86:82:17:f3:be:c2:6b:7f:42:0c:fe: 10:0f:bb:e2:1d:55:ad:af:47:cc:f0:5a:58:e1:59: 37:8f:b3:88:de:ec:a0:7d:c8:83:e4:83:45:88:9b: 6a:d9:f4:58:d9:d2:80:b5:d9:3c:e0:fc:0d:18:09: 79:de:2b:8a:4d:17:08:0c:80:d8:4d:d4:f9:12:f6: af:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:08:B5:6E:2A:3F:8C:41:A7:02:6D:BC:37:A4:72:58:41:DA:66:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1f1f3449-352b-33b4-b2d2-2d8371e938b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl X509v3 Authority Key Identifier: keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer sbgp-ipAddrBlock: critical IPv4: 103.219.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f6:16:38:f7:35:82:7d:25:50:ac:df:1a:a8:d5:50:4f:37: 33:09:22:58:80:14:28:8b:d1:66:f7:9a:d2:21:6c:b1:3b:73: fb:cb:a6:4f:b9:88:29:0c:f2:ce:91:0d:0e:38:52:53:95:a2: 6a:99:ef:89:b9:53:2e:7b:df:68:e2:b7:a7:ab:eb:a5:96:e2: ca:b3:47:9b:3c:b7:71:a3:47:52:62:89:bb:48:4c:3b:bc:28: 06:71:2a:7f:ed:d0:7a:59:2b:41:cd:28:8a:50:48:bf:cd:22: 4a:11:88:52:40:48:56:c3:76:91:2e:d7:59:d6:c1:a6:39:8d: c0:f4:86:80:1d:74:09:56:b3:bc:87:b9:64:bb:96:8e:4f:5f: 86:49:21:84:00:8b:aa:e0:a5:d5:31:e5:fc:94:6c:4b:c0:0f: 58:8f:79:b5:d5:f2:36:33:cb:da:40:f0:dc:86:e8:f5:08:66: 93:cb:7b:2e:e6:b9:04:f6:7d:f6:a7:6b:55:9d:cb:a2:13:e7: 7b:70:4c:82:6d:7b:d0:8f:7e:76:e1:a5:14:c0:52:71:6c:e0: be:11:e6:e8:d0:51:cc:03:04:c5:a3:2f:19:d0:3c:de:e8:76: 99:78:77:98:ae:74:ca:6e:94:ac:e9:88:75:3e:c2:e2:06:82: c7:e3:dc:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28ipDrscJ3bIvvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM4MmUxMjUtNGRmNS00OTEyLWE3MTQtMTAxYTFjYWE1 Yjk5MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk N2I0NTkyMDAtNTAyYi00YTBhLThiN2YtM2ZmMDZkM2Y1OGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7dNX5T2gnl32FUVyl4z3zW2hMXBpLJFLGcj VToNjWRxkpmauONwH4kb0uOkpmyX1RW6PYMiI2yF/kFwTfQ1exWfXGewmQDO82DH XfdYyk1g/uf3QWkAKIY0/zcg5k5UdpAQSTSNcaVDmcH20wydZ32PYOs4aSsM5HT+ bVlV0+MRUXcaexcclrBKlG20LPOe0DlN3+9bSrFice6yqz8ulbJQbTpQp/Di8S0W mclJ1MYJexiaSSHZhoIX877Ca39CDP4QD7viHVWtr0fM8FpY4Vk3j7OI3uygfciD 5INFiJtq2fRY2dKAtdk84PwNGAl53iuKTRcIDIDYTdT5EvavlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoItW4qP4xBpwJtvDekclhB2mZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzgy ZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNhYTViOTkvMWYxZjM0NDktMzUyYi0z M2I0LWIyZDItMmQ4MzcxZTkzOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGM4MmUxMjUtNGRmNS00OTEyLWE3 MTQtMTAxYTFjYWE1Yjk5LzBjODJlMTI1LTRkZjUtNDkxMi1hNzE0LTEwMWExY2Fh NWI5OS5jcmwwHwYDVR0jBBgwFoAUyDy4ggA7MgjtxRD3UBDgaNSWRPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFh MWNhYTViOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ9s4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP2Fjj3NYJ9JVCs3xqo1VBPNzMJIliAFCiL0Wb3mtIhbLE7c/vLpk+5 iCkM8s6RDQ44UlOVomqZ74m5Uy5732jit6er66WW4sqzR5s8t3GjR1JiibtITDu8 KAZxKn/t0HpZK0HNKIpQSL/NIkoRiFJASFbDdpEu11nWwaY5jcD0hoAddAlWs7yH uWS7lo5PX4ZJIYQAi6rgpdUx5fyUbEvAD1iPebXV8jYzy9pA8NyG6PUIZpPLey7m uQT2ffana1Wdy6IT53twTIJte9CPfnbhpRTAUnFs4L4R5ujQUcwDBMWjLxnQPN7o dpl4d5iudMpulKzpiHU+wuIGgsfj3L8= -----END CERTIFICATE-----Generated at Tue Oct 21 00:12:42 2025 by rpki-client