$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3cd115c8-3c6e-3d24-a93c-ec589ec9b7c8.roa File: 3cd115c8-3c6e-3d24-a93c-ec589ec9b7c8.roa (raw, json) Hash identifier: Tq3/BWXFzm+vs+LqzCKVqrhfCGF1icSpn0Sb86tHrTg= Subject key identifier: DB:38:DD:60:1E:2E:41:8F:0C:39:4E:EF:74:C6:50:A7:ED:E6:EA:CC Certificate issuer: /CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Certificate serial: 010D0C9F4328584F4987C49B2963622878DD5100 Authority key identifier: 86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3cd115c8-3c6e-3d24-a93c-ec589ec9b7c8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33715 IP address blocks: 103.66.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:c4:9b:29:63:62:28:78:dd:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d4822044-dd99-4b66-ad04-c86b2c0b7f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d5:85:15:fb:df:ba:c6:31:d1:e5:ea:ad:97: d5:ad:7d:99:8b:84:bd:1b:98:11:ce:e2:35:21:6a: 8a:b4:af:7d:a8:c8:05:1c:9e:73:c0:51:c8:95:7a: a7:47:b2:0a:e7:f5:53:77:86:5e:79:6e:14:23:5d: 84:23:a7:1c:ed:49:82:26:3d:78:9c:cf:64:16:42: 4c:6b:47:23:ba:e7:c2:b8:f5:b6:f5:ab:ff:d2:5a: 45:c2:54:e8:8f:e3:28:02:a7:8d:23:90:5f:46:f5: a6:4e:52:64:45:cc:c6:69:6d:2e:47:31:51:1a:cd: c7:db:f1:bd:8a:73:18:c4:7e:f7:b9:8a:9c:21:0f: bb:ca:e7:bc:66:ed:5a:cd:08:9e:92:16:2f:87:6a: 47:16:78:5f:9e:04:bb:27:63:07:6f:37:26:67:02: ea:d5:6f:a4:c1:64:57:42:a3:87:d8:a9:8b:33:55: 8d:f8:27:4c:3e:f5:97:3b:1b:57:f9:24:b5:c0:5a: b0:ac:38:80:0a:63:56:0b:26:38:0b:60:ee:33:08: fc:ba:25:66:1f:aa:b7:f1:bb:d1:40:af:2b:c8:be: bf:d0:ff:a5:71:83:18:73:36:9c:af:fa:9e:28:a2: 61:c2:47:3f:d6:c9:d9:fb:2d:6b:45:08:7a:c7:ca: 53:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:38:DD:60:1E:2E:41:8F:0C:39:4E:EF:74:C6:50:A7:ED:E6:EA:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3cd115c8-3c6e-3d24-a93c-ec589ec9b7c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl X509v3 Authority Key Identifier: keyid:86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer sbgp-ipAddrBlock: critical IPv4: 103.66.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:72:da:c7:da:19:6b:ef:ca:16:a3:05:e0:f6:f6:22:b2:32: 56:3e:df:a6:a5:c3:4d:aa:5c:47:d1:bb:e1:6e:fe:0d:b6:8b: 56:2c:5c:49:6c:63:b7:81:07:e4:a7:71:b8:87:85:3a:b4:cc: 9d:88:4e:57:1f:16:aa:69:42:26:96:e9:ae:02:b9:54:93:1b: 40:e7:63:1e:7d:9c:47:f2:b6:9c:c0:36:17:29:e2:e1:b8:1d: ba:6f:0c:d3:8d:8a:eb:a1:66:4a:4e:c6:c1:74:af:4b:3d:f9: da:d2:bf:83:0d:ae:a7:67:2e:91:0a:5c:71:74:e7:f8:d3:ea: 15:61:d9:5b:a6:96:45:fb:5e:68:6d:68:47:2f:c5:40:b3:a3: 6a:17:75:5f:a2:4d:74:2c:f4:d5:06:2a:e7:2b:fb:92:25:9d: 94:04:1f:f2:ed:92:83:cc:3c:e0:b9:25:ed:09:4b:37:f9:43: 9c:a4:24:66:44:a2:1d:74:8d:c6:02:e4:e6:82:4d:1d:39:fa: d0:0e:94:c9:34:9c:3b:61:49:16:90:f9:b0:2b:b4:81:e3:24: c4:b6:fa:37:f7:f5:45:3c:39:ef:61:7a:86:03:9d:8e:f7:79: e7:6d:46:da:ea:28:a1:ce:5e:d0:a2:4c:16:e1:ca:e3:20:58: 79:14:9d:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh8SbKWNiKHjdUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyOGRlNTUtZjU5Ny00MGNmLWI1MDgtMGM1ZDczMThi NWVjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDQ4MjIwNDQtZGQ5OS00YjY2LWFkMDQtYzg2YjJjMGI3ZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9WFFfvfusYx0eXqrZfVrX2Zi4S9G5gRzuI1 IWqKtK99qMgFHJ5zwFHIlXqnR7IK5/VTd4ZeeW4UI12EI6cc7UmCJj14nM9kFkJM a0cjuufCuPW29av/0lpFwlToj+MoAqeNI5BfRvWmTlJkRczGaW0uRzFRGs3H2/G9 inMYxH73uYqcIQ+7yue8Zu1azQiekhYvh2pHFnhfngS7J2MHbzcmZwLq1W+kwWRX QqOH2KmLM1WN+CdMPvWXOxtX+SS1wFqwrDiACmNWCyY4C2DuMwj8uiVmH6q38bvR QK8ryL6/0P+lcYMYczacr/qeKKJhwkc/1snZ+y1rRQh6x8pTMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNs43WAeLkGPDDlO73TGUKft5urMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4 ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVkNzMxOGI1ZWMvM2NkMTE1YzgtM2M2ZS0z ZDI0LWE5M2MtZWM1ODllYzliN2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmEyOGRlNTUtZjU5Ny00MGNmLWI1 MDgtMGM1ZDczMThiNWVjLzJhMjhkZTU1LWY1OTctNDBjZi1iNTA4LTBjNWQ3MzE4 YjVlYy5jcmwwHwYDVR0jBBgwFoAUhtnzIHbMN/Aa2EgKlFCWFdVY3HswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVk NzMxOGI1ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ0IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZy2sfaGWvvyhajBeD29iKyMlY+36alw02qXEfRu+Fu/g22i1YsXEls Y7eBB+SncbiHhTq0zJ2ITlcfFqppQiaW6a4CuVSTG0DnYx59nEfytpzANhcp4uG4 HbpvDNONiuuhZkpOxsF0r0s9+drSv4MNrqdnLpEKXHF05/jT6hVh2VumlkX7Xmht aEcvxUCzo2oXdV+iTXQs9NUGKucr+5IlnZQEH/LtkoPMPOC5Je0JSzf5Q5ykJGZE oh10jcYC5OaCTR05+tAOlMk0nDthSRaQ+bArtIHjJMS2+jf39UU8Oe9heoYDnY73 eedtRtrqKKHOXtCiTBbhyuMgWHkUnXw= -----END CERTIFICATE-----Generated at Tue Sep 29 04:52:48 2026 by rpki-client