$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8ad7fa7b-73a1-3778-ad79-3d9fec761c8d.roa File: 8ad7fa7b-73a1-3778-ad79-3d9fec761c8d.roa (raw, json) Hash identifier: 8X1mdxW01bpMSygxd/TtIYubooNiFUc6Nh0povbICtE= Subject key identifier: 62:86:C5:4C:F0:4D:84:F3:7B:38:B7:91:B1:87:69:02:93:4C:B1:D4 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584BA39D25CEB9163754D0F3FE80 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8ad7fa7b-73a1-3778-ad79-3d9fec761c8d.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 19905 IP address blocks: 103.204.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:25:ce:b9:16:37:54:d0:f3:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=2fb06139-cb68-40ca-9917-9f5f472a1ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c7:0a:29:29:77:eb:79:95:03:c8:ce:3f:58: bb:08:5f:5f:07:c7:d5:4f:5e:4b:fb:c0:93:45:fb: b3:31:5a:4f:d6:b8:0d:10:34:f8:cc:c4:a6:a0:0e: 7f:0d:b1:f9:11:1a:be:c4:df:c8:03:04:58:0e:78: d0:89:8d:de:12:b0:61:f3:1f:8d:a3:04:50:67:bd: e2:04:f2:28:c4:da:4b:f6:bc:07:2b:eb:50:96:61: 87:e3:55:8b:26:70:92:9e:32:f6:8f:64:84:e7:08: 72:18:60:61:d2:dc:a7:b8:f7:30:5f:e8:54:dd:6c: 19:1d:32:6a:55:fe:56:36:3b:0c:20:32:66:9f:83: 38:a7:c7:bd:b3:e4:82:3f:d7:9d:fd:c4:1e:a1:a3: 63:f8:88:95:78:66:e6:e9:05:ad:1b:08:c5:97:ac: ab:98:ef:ae:a8:7d:cf:69:a9:29:aa:94:7f:1d:83: c9:8a:8e:bd:44:a9:71:b5:42:a0:01:1d:26:d3:22: a7:39:68:e6:e3:34:30:29:c5:88:b4:95:27:c4:1e: 3a:82:a9:db:54:b5:ac:91:50:d1:4a:b0:9e:9b:de: 23:7d:32:90:92:04:a2:c8:f6:5b:8b:a0:30:7e:50: db:9f:0e:c3:18:8a:02:15:c0:9e:f4:70:dc:a6:03: c5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:86:C5:4C:F0:4D:84:F3:7B:38:B7:91:B1:87:69:02:93:4C:B1:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8ad7fa7b-73a1-3778-ad79-3d9fec761c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 103.204.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:61:57:9a:fa:0d:b0:27:8b:4e:3d:94:23:4c:86:0d:25:65: 46:93:c5:be:4d:44:0b:13:92:c2:fb:69:2d:ab:ca:56:85:c2: d9:a6:9b:c2:08:f9:f8:41:fc:17:9d:98:c8:f6:60:63:5e:dd: ae:b6:e0:24:9e:b6:34:92:62:1c:01:e5:c7:10:fe:09:81:91: fc:3f:4d:6c:f3:cb:8a:03:99:ce:70:8e:f1:71:be:f3:0b:22: 4e:f1:ae:0c:32:75:d7:ac:2d:c0:b7:34:9b:e3:7e:cf:6c:85: d2:ad:78:48:77:92:8b:4f:1b:97:98:09:c9:64:59:e4:61:88: ba:b3:69:42:4b:60:c0:d5:a1:1b:89:01:22:fd:4d:e5:aa:80: 04:88:dd:0f:0f:7c:aa:ed:5b:75:1d:4b:ef:56:e7:9b:ca:9a: fd:b7:24:db:36:1b:7b:a3:3e:81:ea:64:ba:48:e5:c1:d2:0c: 7b:8c:a8:3e:88:f7:80:6c:a5:a3:7d:7f:c7:63:61:2a:7d:94: 8d:1d:98:58:c6:8a:19:6e:c1:d8:6c:be:ac:aa:f1:28:b1:e3: ad:bc:ba:6e:c1:39:24:10:89:fb:40:75:37:df:56:a1:01:41: b2:e4:ed:46:6c:6a:ef:7c:53:5c:30:c5:09:57:fc:4d:2a:0d: 0b:08:ba:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSXOuRY3VNDz/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MmZiMDYxMzktY2I2OC00MGNhLTk5MTctOWY1ZjQ3MmExZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkscKKSl363mVA8jOP1i7CF9fB8fVT15L+8CT RfuzMVpP1rgNEDT4zMSmoA5/DbH5ERq+xN/IAwRYDnjQiY3eErBh8x+NowRQZ73i BPIoxNpL9rwHK+tQlmGH41WLJnCSnjL2j2SE5whyGGBh0tynuPcwX+hU3WwZHTJq Vf5WNjsMIDJmn4M4p8e9s+SCP9ed/cQeoaNj+IiVeGbm6QWtGwjFl6yrmO+uqH3P aakpqpR/HYPJio69RKlxtUKgAR0m0yKnOWjm4zQwKcWItJUnxB46gqnbVLWskVDR SrCem94jfTKQkgSiyPZbi6AwflDbnw7DGIoCFcCe9HDcpgPFzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKGxUzwTYTzezi3kbGHaQKTTLHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvOGFkN2ZhN2ItNzNhMS0z Nzc4LWFkNzktM2Q5ZmVjNzYxYzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ8yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJhV5r6DbAni049lCNMhg0lZUaTxb5NRAsTksL7aS2rylaFwtmmm8II +fhB/BedmMj2YGNe3a624CSetjSSYhwB5ccQ/gmBkfw/TWzzy4oDmc5wjvFxvvML Ik7xrgwyddesLcC3NJvjfs9shdKteEh3kotPG5eYCclkWeRhiLqzaUJLYMDVoRuJ ASL9TeWqgASI3Q8PfKrtW3UdS+9W55vKmv23JNs2G3ujPoHqZLpI5cHSDHuMqD6I 94BspaN9f8djYSp9lI0dmFjGihluwdhsvqyq8Six4628um7BOSQQiftAdTffVqEB QbLk7UZsau98U1wwxQlX/E0qDQsIuqk= -----END CERTIFICATE-----Generated at Tue Nov 4 16:57:13 2025 by rpki-client