$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8ad7fa7b-73a1-3778-ad79-3d9fec761c8d.roa File: 8ad7fa7b-73a1-3778-ad79-3d9fec761c8d.roa (raw, json) Hash identifier: fe7s2cXaIkJONMCjD510cHHENJz3yKOWktdeV69PKVY= Subject key identifier: 16:C8:F3:4D:99:D7:92:4B:66:D4:B6:D7:20:22:28:22:2F:90:B1:F7 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584D65152D6F746DAFB97DC88540 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8ad7fa7b-73a1-3778-ad79-3d9fec761c8d.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 19905 IP address blocks: 103.204.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:2d:6f:74:6d:af:b9:7d:c8:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=2a259ab8-13c3-49d7-b8f0-4b79dfa36ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:36:ff:8e:22:ee:ad:b6:e6:6b:a7:fe:33: e8:94:c9:f1:92:9a:d6:28:ea:d3:ab:f2:c9:74:93: ca:af:e7:13:fc:5a:d1:35:69:1a:ea:6b:1d:b0:f9: 22:7a:a3:cf:85:c4:68:d2:05:b7:43:9a:fa:85:29: f2:80:c9:c4:43:48:6b:84:dd:30:a5:8b:07:c9:c1: ae:68:54:73:6a:be:dc:1f:12:74:8e:46:bc:65:3f: c2:a5:ea:9b:11:e1:9a:ab:40:bc:13:da:ae:43:4b: 06:7d:59:65:ed:40:b5:25:16:7c:eb:76:25:cb:d4: 2d:7c:45:7b:69:5e:36:74:56:14:5a:a8:ad:07:ff: a8:72:d4:3a:32:d3:3a:b1:32:b6:65:14:6e:a6:06: a0:fe:e8:39:9f:f5:22:b2:4f:0f:74:1a:d2:32:07: 61:92:1e:25:43:01:17:d4:13:23:a7:2e:d1:c1:3c: ca:d2:d8:39:22:2d:65:28:09:ae:a8:3a:55:cc:5a: 08:e2:25:f3:64:9f:ee:94:61:80:67:0b:01:62:c6: b2:6d:90:be:6f:b5:03:36:2d:8b:c7:6a:fe:df:2d: 6b:b3:8a:ca:30:55:32:ab:c5:64:8b:ab:b2:f0:1e: 7d:53:57:df:cf:c1:55:1e:9a:ac:8e:6d:cd:3b:c8: 45:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C8:F3:4D:99:D7:92:4B:66:D4:B6:D7:20:22:28:22:2F:90:B1:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8ad7fa7b-73a1-3778-ad79-3d9fec761c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 103.204.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:94:4e:94:2e:85:c9:d8:a9:5e:5f:74:10:37:ba:36:a9:b1: e8:be:88:b9:2b:e6:6a:d6:53:61:e6:86:1c:a0:e7:49:e2:cf: ef:8f:18:8c:fa:1f:df:f0:5b:f1:15:ee:5c:17:e1:7b:bf:6f: dc:53:fc:49:7b:ab:1d:3a:90:7f:60:65:11:9d:35:09:c6:8d: 7c:77:b8:b9:4b:92:86:34:f3:f7:21:a8:b5:8a:a6:d8:86:95: 9b:d8:1f:eb:3d:34:86:53:f4:63:d9:0d:fa:1e:06:ea:c7:46: bb:44:33:3c:11:f1:cc:79:c7:1b:59:3b:eb:44:4c:5a:21:3a: 85:31:b4:45:41:08:17:68:dd:4b:ad:73:07:f7:b3:d0:23:f3: 56:e7:35:fe:e6:ee:e3:97:f5:91:b4:06:87:b9:24:f5:57:2d: df:b0:ef:d0:9f:49:e1:b4:b2:50:4a:8b:c4:57:8b:d5:2b:a3: 2a:6b:f4:dc:0c:2a:f7:59:0e:07:f3:02:07:6b:5d:d5:1d:e5: 69:48:63:d5:69:30:34:0f:da:24:f7:ef:3c:b2:aa:5f:44:bd: ad:7f:4e:67:17:80:c6:08:a5:99:54:89:3d:fb:0a:de:31:54: f2:a0:bc:73:05:bd:da:d7:19:20:3e:be:c7:4a:ce:f1:37:3a: 58:5c:69:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFS1vdG2vuX3IhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk MmEyNTlhYjgtMTNjMy00OWQ3LWI4ZjAtNGI3OWRmYTM2YWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7k2/44i7q225mun/jPolMnxkprWKOrTq/LJ dJPKr+cT/FrRNWka6msdsPkieqPPhcRo0gW3Q5r6hSnygMnEQ0hrhN0wpYsHycGu aFRzar7cHxJ0jka8ZT/CpeqbEeGaq0C8E9quQ0sGfVll7UC1JRZ863Yly9QtfEV7 aV42dFYUWqitB/+octQ6MtM6sTK2ZRRupgag/ug5n/Uisk8PdBrSMgdhkh4lQwEX 1BMjpy7RwTzK0tg5Ii1lKAmuqDpVzFoI4iXzZJ/ulGGAZwsBYsaybZC+b7UDNi2L x2r+3y1rs4rKMFUyq8Vki6uy8B59U1ffz8FVHpqsjm3NO8hF7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbI802Z15JLZtS21yAiKCIvkLH3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvOGFkN2ZhN2ItNzNhMS0z Nzc4LWFkNzktM2Q5ZmVjNzYxYzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ8yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCUTpQuhcnYqV5fdBA3ujapsei+iLkr5mrWU2Hmhhyg50niz++PGIz6 H9/wW/EV7lwX4Xu/b9xT/El7qx06kH9gZRGdNQnGjXx3uLlLkoY08/chqLWKptiG lZvYH+s9NIZT9GPZDfoeBurHRrtEMzwR8cx5xxtZO+tETFohOoUxtEVBCBdo3Uut cwf3s9Aj81bnNf7m7uOX9ZG0Boe5JPVXLd+w79CfSeG0slBKi8RXi9Uroypr9NwM KvdZDgfzAgdrXdUd5WlIY9VpMDQP2iT37zyyql9Eva1/TmcXgMYIpZlUiT37Ct4x VPKgvHMFvdrXGSA+vsdKzvE3OlhcaW0= -----END CERTIFICATE-----Generated at Fri Apr 17 05:09:01 2026 by rpki-client