$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/78e1a8de-e628-3875-8faa-140c188a17e8.roa File: 78e1a8de-e628-3875-8faa-140c188a17e8.roa (raw, json) Hash identifier: vVAPYxeM2plmXr4nzetLKDBo22rxpK+/8Yvxc+W7slY= Subject key identifier: CC:E7:57:4A:DB:A5:F1:E2:9E:2A:15:D7:A1:C0:44:C4:62:17:07:08 Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F4328584A90A0C2BE89D768D87EFCBF40 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/78e1a8de-e628-3875-8faa-140c188a17e8.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 150452 IP address blocks: 103.28.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:c2:be:89:d7:68:d8:7e:fc:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=d9f5f27f-fa4f-42a8-b381-594f5019055c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:a2:64:cd:6c:8c:44:16:f4:06:f3:1f:ff: 89:6a:86:f4:53:f5:7d:5a:26:74:7a:f5:22:c5:cf: 0f:74:ce:dc:ad:10:f0:c6:a6:0e:b7:98:fe:49:41: b0:87:3c:65:8a:33:cf:51:00:18:78:6b:6d:03:09: bf:3d:e9:3f:a4:c2:db:b1:a4:09:05:9b:c9:e5:f6: 86:4b:86:05:9d:2e:e1:95:3b:0d:a9:0b:4c:af:2a: fe:65:e6:9f:1d:98:a5:ab:e9:fb:19:5b:03:b1:ea: 58:6b:d3:26:d8:b5:e0:a3:61:9c:ce:00:99:e6:24: 80:2a:66:a3:91:c7:d9:0d:4c:ef:e3:65:0a:e0:b7: 31:b6:ba:5a:b8:d8:15:08:49:a1:35:21:9e:d8:4b: 51:a5:7c:72:4b:32:92:40:cf:67:36:d3:f8:96:25: 25:4d:ce:3f:2d:b4:5d:e0:d8:7c:1a:80:38:e7:41: 59:ae:e1:f9:1d:a8:a4:cf:91:43:0e:05:ab:7e:4b: c5:83:4e:2c:6a:8e:c9:08:ee:c0:e9:1c:2d:09:87: 76:c9:80:26:0d:c5:66:5f:6a:b7:55:65:61:d6:02: 88:5e:9d:0b:dc:10:88:62:fb:10:f5:9d:6b:61:64: c0:49:e4:97:92:b8:b2:12:77:56:94:07:58:0c:dc: 04:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E7:57:4A:DB:A5:F1:E2:9E:2A:15:D7:A1:C0:44:C4:62:17:07:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/78e1a8de-e628-3875-8faa-140c188a17e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 103.28.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ba:1e:02:16:c9:2a:c4:c2:54:65:e6:da:74:d5:4d:63:93: 4d:bf:d7:5c:99:7b:af:fc:be:d2:39:b1:6c:3a:0e:ff:8c:18: b6:c1:28:90:22:95:17:41:6e:78:ea:36:bc:43:b3:42:6e:28: d9:f3:26:e0:02:cf:f4:d4:ac:bf:83:84:4c:00:83:b5:10:99: 40:da:1f:89:64:36:c4:b7:58:ba:a9:d0:9f:fb:30:ab:9b:8f: 76:de:1e:c5:65:0c:f0:4e:36:82:34:4b:a8:4d:e0:93:6b:97: 4d:42:91:83:41:59:66:a8:dc:58:80:13:b6:c6:f4:85:55:be: 06:e9:f8:81:f2:8f:89:ec:19:68:ae:db:32:f6:4c:a3:d3:be: a5:78:36:36:e0:9c:eb:cc:15:55:17:b2:57:9a:ff:f8:b3:8c: ed:09:83:21:fd:62:7f:f1:da:59:a5:d9:39:59:49:c0:5a:eb: b3:56:1a:f5:f9:e2:f9:ea:d9:ad:28:16:f3:44:80:02:00:5a: c2:35:6e:57:b7:90:52:03:5f:b1:7a:df:ce:b5:0f:39:76:6c: 5a:bf:ee:1d:bd:c3:b1:d7:3f:b9:e5:3d:39:63:e1:cb:3e:bd: c5:d8:38:fe:fb:79:c2:17:d9:9d:e0:27:00:30:d8:46:53:58: 9f:f9:62:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoMK+iddo2H78v0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ZDlmNWYyN2YtZmE0Zi00MmE4LWIzODEtNTk0ZjUwMTkwNTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskWiZM1sjEQW9AbzH/+Jaob0U/V9WiZ0evUi xc8PdM7crRDwxqYOt5j+SUGwhzxlijPPUQAYeGttAwm/Pek/pMLbsaQJBZvJ5faG S4YFnS7hlTsNqQtMryr+ZeafHZilq+n7GVsDsepYa9Mm2LXgo2GczgCZ5iSAKmaj kcfZDUzv42UK4LcxtrpauNgVCEmhNSGe2EtRpXxySzKSQM9nNtP4liUlTc4/LbRd 4Nh8GoA450FZruH5Haikz5FDDgWrfkvFg04sao7JCO7A6RwtCYd2yYAmDcVmX2q3 VWVh1gKIXp0L3BCIYvsQ9Z1rYWTASeSXkriyEndWlAdYDNwEPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMznV0rbpfHinioV16HARMRiFwcIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvNzhlMWE4ZGUtZTYyOC0z ODc1LThmYWEtMTQwYzE4OGExN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACC6HgIWySrEwlRl5tp01U1jk02/11yZe6/8vtI5sWw6Dv+MGLbBKJAi lRdBbnjqNrxDs0JuKNnzJuACz/TUrL+DhEwAg7UQmUDaH4lkNsS3WLqp0J/7MKub j3beHsVlDPBONoI0S6hN4JNrl01CkYNBWWao3FiAE7bG9IVVvgbp+IHyj4nsGWiu 2zL2TKPTvqV4NjbgnOvMFVUXslea//izjO0JgyH9Yn/x2lml2TlZScBa67NWGvX5 4vnq2a0oFvNEgAIAWsI1ble3kFIDX7F63861Dzl2bFq/7h29w7HXP7nlPTlj4cs+ vcXYOP77ecIX2Z3gJwAw2EZTWJ/5Yss= -----END CERTIFICATE-----Generated at Sun Aug 10 03:53:56 2025 by rpki-client