$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5ca73738-9870-3cd2-90f5-fc006e9d1db6.roa File: 5ca73738-9870-3cd2-90f5-fc006e9d1db6.roa (raw, json) Hash identifier: RjBZylMtNi/+mTcBcZdEe3MTpnIaw/LEbjA9GScLY2A= Subject key identifier: 90:49:C6:7F:9E:EC:E1:1D:95:E0:66:15:F0:7E:43:9E:67:20:BB:38 Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Certificate serial: 010D0C9F4328584D746FDDDC927128FA918E8C00 Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5ca73738-9870-3cd2-90f5-fc006e9d1db6.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 38047 IP address blocks: 103.133.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:dd:dc:92:71:28:fa:91:8e:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=062332f0-515a-459f-9f53-8932282ba439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1c:23:a5:40:71:fe:f2:92:95:1d:3c:61:f4: a9:6a:65:8e:2f:c3:02:22:26:08:8d:1f:9e:1f:fa: c0:33:32:15:43:90:c1:d5:31:2f:3e:42:b5:49:29: 10:ef:c4:73:a2:66:0a:d7:b9:2f:43:d9:cd:7d:91: 8d:ae:09:ca:4f:1f:df:84:42:20:0a:d1:4b:f5:c1: d7:b1:e6:c3:76:b5:06:c8:9e:98:c5:9e:40:21:ac: 72:93:ad:e6:1c:ae:75:f1:ff:39:a9:e3:29:84:24: f7:5f:31:d1:6a:a3:ec:db:d8:75:32:c6:4c:44:ca: 44:9b:ac:5d:55:dc:e3:7e:ef:4c:35:2d:2e:cc:26: bb:35:d3:19:27:f5:e7:67:07:e8:fb:07:94:76:67: c4:75:67:32:63:35:dd:3b:c2:5f:50:03:f3:39:a0: 85:d4:d4:03:45:c3:8e:65:7d:5d:ea:d2:61:ed:ee: 3a:b8:da:eb:0f:77:bb:d9:9e:13:b0:b9:81:e1:71: 6f:60:21:45:0a:16:8c:c7:f2:90:a5:c2:56:52:0c: 33:9d:c4:f7:e8:e4:8c:5e:d8:c8:0f:08:47:ba:b3: 06:36:01:75:27:ed:a7:76:da:de:db:c6:16:ae:7a: ee:eb:04:33:af:93:23:c5:35:0d:fd:8a:2a:96:2c: aa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:49:C6:7F:9E:EC:E1:1D:95:E0:66:15:F0:7E:43:9E:67:20:BB:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/5ca73738-9870-3cd2-90f5-fc006e9d1db6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl X509v3 Authority Key Identifier: keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer sbgp-ipAddrBlock: critical IPv4: 103.133.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:f0:31:98:2d:a2:d3:59:dc:10:52:da:9e:d0:8c:76:02:8f: 73:f7:60:52:df:8e:e4:c7:50:43:f4:4b:c7:ce:86:fd:5e:70: fc:84:8a:dc:e1:69:c1:0f:c2:0e:8f:29:81:c5:f3:7c:2a:6d: 6e:ba:02:f2:d0:a3:84:6e:84:d3:04:a8:29:09:a6:45:38:91: a4:5e:42:bd:b3:f0:a5:e6:e6:f0:04:36:2b:22:54:b5:c7:96: d8:06:b3:88:b6:58:d1:36:78:fd:4a:2a:63:e1:cf:5f:be:a9: 92:6c:2c:ab:23:1d:fd:44:ad:ae:a3:75:55:1f:c4:b2:db:5e: 23:29:a7:fa:96:83:9f:79:17:78:5a:79:04:0e:62:89:63:74: 93:9c:13:93:b1:41:ac:09:5a:c6:86:b8:9c:21:0e:de:d9:28: 5a:96:a1:28:70:fa:ee:cd:0e:e0:6e:b3:ef:bf:8c:fd:01:bd: 2c:0c:cf:28:b7:3d:b7:20:5d:e9:26:69:9f:6d:89:0b:4b:e5: 51:40:24:9c:a2:90:7d:62:f5:5c:b9:e9:8b:05:0f:85:d5:34: b2:51:e9:e0:1b:fa:cb:89:47:3e:06:ae:05:e4:96:ff:2b:15: f3:dd:13:b4:a8:d6:9a:20:b4:df:45:bc:67:5e:94:4b:fd:4f: bf:1c:91:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b93cknEo+pGOjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk MjYxMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk MDYyMzMyZjAtNTE1YS00NTlmLTlmNTMtODkzMjI4MmJhNDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxwjpUBx/vKSlR08YfSpamWOL8MCIiYIjR+e H/rAMzIVQ5DB1TEvPkK1SSkQ78RzomYK17kvQ9nNfZGNrgnKTx/fhEIgCtFL9cHX sebDdrUGyJ6YxZ5AIaxyk63mHK518f85qeMphCT3XzHRaqPs29h1MsZMRMpEm6xd Vdzjfu9MNS0uzCa7NdMZJ/XnZwfo+weUdmfEdWcyYzXdO8JfUAPzOaCF1NQDRcOO ZX1d6tJh7e46uNrrD3e72Z4TsLmB4XFvYCFFChaMx/KQpcJWUgwzncT36OSMXtjI DwhHurMGNgF1J+2ndtre28YWrnru6wQzr5MjxTUN/YoqliyqfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBJxn+e7OEdleBmFfB+Q55nILs4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4 YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvNWNhNzM3MzgtOTg3MC0z Y2QyLTkwZjUtZmMwMDZlOWQxZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1 YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm MjVmZGQyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4WYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnwMZgtotNZ3BBS2p7QjHYCj3P3YFLfjuTHUEP0S8fOhv1ecPyEitzh acEPwg6PKYHF83wqbW66AvLQo4RuhNMEqCkJpkU4kaReQr2z8KXm5vAENisiVLXH ltgGs4i2WNE2eP1KKmPhz1++qZJsLKsjHf1Era6jdVUfxLLbXiMpp/qWg595F3ha eQQOYoljdJOcE5OxQawJWsaGuJwhDt7ZKFqWoShw+u7NDuBus++/jP0BvSwMzyi3 PbcgXekmaZ9tiQtL5VFAJJyikH1i9Vy56YsFD4XVNLJR6eAb+suJRz4GrgXklv8r FfPdE7So1pogtN9FvGdelEv9T78ckfs= -----END CERTIFICATE-----Generated at Fri Apr 17 21:28:12 2026 by rpki-client