$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa File: 3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa (raw, json) Hash identifier: Dvct2/si/u4PzJzw5U2k4/nmwdqO2l6hRrm0YNyZsN0= Subject key identifier: E6:22:30:67:73:57:5C:A8:9A:1C:BA:5E:CA:19:1C:20:1B:D1:77:AB Certificate issuer: /CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Certificate serial: 010D0C9F4328584F498A374D657EC23F7F16A180 Authority key identifier: 86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 103.66.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:37:4d:65:7e:c2:3f:7f:16:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b0f653fb-57ea-487a-aab3-0e0d4a17520b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:66:aa:e6:f7:60:e0:67:c4:63:2d:cd:af:41: 2d:d4:95:c6:0a:7d:37:b4:a1:e4:85:5f:74:d2:03: 60:8e:78:1f:8d:07:97:e8:f8:51:41:64:65:80:fa: 12:03:b2:00:13:93:3d:c7:cc:77:3b:78:70:4f:85: 48:0a:0d:c3:a7:ef:5e:fe:48:95:d4:d6:bc:f7:c9: 07:86:99:94:cf:76:ae:4b:69:f9:24:9b:49:c3:dc: 47:d6:38:54:44:55:95:7c:37:87:a1:86:4a:70:9c: c9:1a:4d:54:ac:19:11:6a:ef:97:58:a0:01:62:f1: 7e:82:e7:04:5e:ec:e9:61:36:35:c3:c5:66:fa:ff: c0:34:79:2a:df:35:c1:58:aa:48:13:cd:f4:1b:a5: 75:45:1e:0f:b9:27:a1:e8:5a:f6:61:af:63:32:ba: 6e:77:9c:26:5a:9a:24:60:02:3c:74:c7:65:31:97: 11:1a:94:f1:a5:3a:c0:de:bc:c2:7c:95:dd:4e:dd: d6:ca:f0:d3:f2:71:3c:30:44:8d:d2:48:b6:6e:e4: 2f:0f:88:5e:b4:a2:8f:79:5c:e1:fa:17:33:c4:42: 9c:be:b8:a9:2c:ac:52:cb:45:61:74:91:db:74:a6: 19:95:a6:26:e9:05:57:a5:06:e1:36:eb:ab:13:b3: 47:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:22:30:67:73:57:5C:A8:9A:1C:BA:5E:CA:19:1C:20:1B:D1:77:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl X509v3 Authority Key Identifier: keyid:86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer sbgp-ipAddrBlock: critical IPv4: 103.66.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:bb:14:fc:de:b5:d8:aa:7e:72:f9:7f:6a:bd:d4:7f:b6:02: 5f:93:36:60:aa:25:78:71:5a:a1:28:f6:9d:5f:77:1d:f6:bd: 9f:4a:17:dd:45:0e:62:aa:e5:6f:03:fa:e9:8b:e0:a3:67:c5: 52:d0:9b:3b:25:20:ee:4e:58:d3:01:51:cf:9a:f3:34:45:11: 21:c5:83:30:07:54:a5:6f:9c:08:a8:3f:a5:24:ea:b0:0d:79: 12:0a:19:93:4b:fd:a8:3d:7c:c8:e3:df:f1:77:4d:09:f8:75: dd:48:a6:01:e9:96:fe:c4:68:42:c1:a3:61:db:a5:23:29:87: 4b:43:bb:bc:23:44:57:30:a6:10:77:64:c9:a4:15:47:f7:be: c0:eb:35:60:1d:4a:81:6b:11:2e:42:f3:d5:3e:90:b6:29:64: 0a:2e:19:8d:cd:cc:18:ba:e1:2e:36:cd:2b:c2:04:07:f2:be: 48:68:38:5e:7e:26:9f:e5:27:9f:08:96:79:2f:e2:9e:bc:f6: 6c:ee:d9:0e:93:de:dd:b9:24:35:0e:31:8d:c5:db:7c:48:2a: 80:8e:30:0a:36:eb:24:cf:e3:46:9d:4c:b2:93:cc:18:0b:4c: 8c:4e:fc:01:b2:8b:45:5d:28:49:fa:22:57:82:71:e9:e3:0f: b5:96:05:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JijdNZX7CP38WoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyOGRlNTUtZjU5Ny00MGNmLWI1MDgtMGM1ZDczMThi NWVjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjBmNjUzZmItNTdlYS00ODdhLWFhYjMtMGUwZDRhMTc1MjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWaq5vdg4GfEYy3Nr0Et1JXGCn03tKHkhV90 0gNgjngfjQeX6PhRQWRlgPoSA7IAE5M9x8x3O3hwT4VICg3Dp+9e/kiV1Na898kH hpmUz3auS2n5JJtJw9xH1jhURFWVfDeHoYZKcJzJGk1UrBkRau+XWKABYvF+gucE XuzpYTY1w8Vm+v/ANHkq3zXBWKpIE830G6V1RR4PuSeh6Fr2Ya9jMrpud5wmWpok YAI8dMdlMZcRGpTxpTrA3rzCfJXdTt3WyvDT8nE8MESN0ki2buQvD4hetKKPeVzh +hczxEKcvripLKxSy0VhdJHbdKYZlaYm6QVXpQbhNuurE7NHowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYiMGdzV1yomhy6XsoZHCAb0XerMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4 ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVkNzMxOGI1ZWMvMzM1OGRkN2EtZWE1NS0z MTA3LWI3ZjctZWQyM2UyNzI5YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmEyOGRlNTUtZjU5Ny00MGNmLWI1 MDgtMGM1ZDczMThiNWVjLzJhMjhkZTU1LWY1OTctNDBjZi1iNTA4LTBjNWQ3MzE4 YjVlYy5jcmwwHwYDVR0jBBgwFoAUhtnzIHbMN/Aa2EgKlFCWFdVY3HswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVk NzMxOGI1ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ0IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALC7FPzetdiqfnL5f2q91H+2Al+TNmCqJXhxWqEo9p1fdx32vZ9KF91F DmKq5W8D+umL4KNnxVLQmzslIO5OWNMBUc+a8zRFESHFgzAHVKVvnAioP6Uk6rAN eRIKGZNL/ag9fMjj3/F3TQn4dd1IpgHplv7EaELBo2HbpSMph0tDu7wjRFcwphB3 ZMmkFUf3vsDrNWAdSoFrES5C89U+kLYpZAouGY3NzBi64S42zSvCBAfyvkhoOF5+ Jp/lJ58Ilnkv4p689mzu2Q6T3t25JDUOMY3F23xIKoCOMAo26yTP40adTLKTzBgL TIxO/AGyi0VdKEn6IleCcenjD7WWBSo= -----END CERTIFICATE-----Generated at Sat Sep 26 11:13:27 2026 by rpki-client