$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa File: 3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa (raw, json) Hash identifier: FB4WIYxvFq0RWssua4Qu/x/Q5f64BacqU2JNDvzyKWU= Subject key identifier: 61:28:78:4F:9E:B6:FD:F9:83:03:ED:26:72:76:3D:F3:7F:88:7B:58 Certificate issuer: /CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Certificate serial: 010D0C9F4328584CF587B279E2D3A22DEBB86B80 Authority key identifier: 86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 396982 IP address blocks: 103.66.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:b2:79:e2:d3:a2:2d:eb:b8:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=ddc85cec-ab2d-43a6-9608-18e7a08f6962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a4:e7:94:5f:56:50:73:cb:a5:7b:74:43:1d: 24:98:5a:c9:58:02:3d:a7:62:64:b8:73:20:6e:46: 89:ba:3f:07:80:b3:34:ac:7f:ff:43:de:e5:d0:e0: 6d:c7:f1:7a:26:5e:3a:6e:45:8f:f0:88:b0:03:17: b1:59:5f:a2:76:59:c9:fa:82:38:7e:6e:0f:94:17: 9d:cc:8a:aa:f7:96:0c:08:50:21:69:c0:d4:7d:51: 3c:b4:ce:b3:4b:6d:2a:9b:13:af:df:aa:a1:3d:62: ae:ea:87:22:05:26:da:cd:6b:4b:ac:5b:67:87:48: bc:c3:69:a4:bc:e9:3b:98:4c:16:67:6e:77:5e:0c: fe:06:ab:e9:bc:1a:17:1d:49:bd:bf:e8:1e:ac:08: f1:e5:7c:47:49:f1:1f:0d:63:b7:42:e4:11:35:a3: 61:d4:b0:3e:b5:a3:d4:22:51:89:a8:2b:04:2a:0b: 87:2a:f9:34:3d:ab:f0:55:39:81:a4:65:ad:ba:15: 5d:90:a8:8a:06:93:d6:28:9d:5e:19:9d:75:89:b5: 9f:d2:57:e8:0b:21:7a:45:48:75:0b:ce:9b:86:be: dc:70:cf:72:49:ad:9e:1d:37:83:a4:5b:14:25:d6: 83:b7:b2:66:25:e9:37:89:de:c1:0a:d3:50:37:b3: e3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:28:78:4F:9E:B6:FD:F9:83:03:ED:26:72:76:3D:F3:7F:88:7B:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl X509v3 Authority Key Identifier: keyid:86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer sbgp-ipAddrBlock: critical IPv4: 103.66.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d6:50:43:18:d9:e4:bb:6a:1c:86:9e:6b:69:de:8d:9d:8a: 6d:79:89:73:94:84:81:11:0d:cd:ae:84:11:4d:49:4e:4b:f9: 75:e0:1b:c3:ed:88:bf:7c:52:93:5d:83:ce:29:fa:d8:e3:64: 3f:17:13:35:e1:20:6f:bc:30:cd:34:ef:b9:22:75:63:e1:f6: d1:32:82:71:86:8d:17:1d:a3:53:0c:71:ce:eb:0e:ec:82:18: c7:59:88:b6:95:40:18:36:bf:58:39:a9:7d:12:eb:93:fe:80: 35:65:af:a8:62:f9:f8:63:ee:59:a2:09:61:57:2b:6e:02:49: 37:3c:f6:b5:59:d5:38:ce:d1:a1:a8:64:e8:e7:67:42:89:a0: 7d:af:ba:fe:a5:70:4c:4e:68:2b:38:3e:4f:6e:58:9f:e8:5e: 43:9b:8e:eb:f2:29:a3:74:27:71:18:2d:14:df:e2:e2:a4:b6: 7f:0c:6e:00:ec:f8:21:81:73:b2:18:5f:3b:6c:de:5e:f1:47: 2f:57:b4:82:94:b6:9c:d0:f5:ec:a2:a9:7e:e8:12:92:36:36: cd:cd:f7:b6:07:53:86:3d:28:51:de:c3:0e:0b:7d:a4:b8:5b: 2f:5f:54:e5:31:08:36:ae:f2:ed:06:42:e1:fb:10:42:73:cf: 32:d3:c6:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h7J54tOiLeu4a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyOGRlNTUtZjU5Ny00MGNmLWI1MDgtMGM1ZDczMThi NWVjMB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk ZGRjODVjZWMtYWIyZC00M2E2LTk2MDgtMThlN2EwOGY2OTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6TnlF9WUHPLpXt0Qx0kmFrJWAI9p2JkuHMg bkaJuj8HgLM0rH//Q97l0OBtx/F6Jl46bkWP8IiwAxexWV+idlnJ+oI4fm4PlBed zIqq95YMCFAhacDUfVE8tM6zS20qmxOv36qhPWKu6ociBSbazWtLrFtnh0i8w2mk vOk7mEwWZ253Xgz+BqvpvBoXHUm9v+gerAjx5XxHSfEfDWO3QuQRNaNh1LA+taPU IlGJqCsEKguHKvk0PavwVTmBpGWtuhVdkKiKBpPWKJ1eGZ11ibWf0lfoCyF6RUh1 C86bhr7ccM9ySa2eHTeDpFsUJdaDt7JmJek3id7BCtNQN7Pj6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEoeE+etv35gwPtJnJ2PfN/iHtYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4 ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVkNzMxOGI1ZWMvMzM1OGRkN2EtZWE1NS0z MTA3LWI3ZjctZWQyM2UyNzI5YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmEyOGRlNTUtZjU5Ny00MGNmLWI1 MDgtMGM1ZDczMThiNWVjLzJhMjhkZTU1LWY1OTctNDBjZi1iNTA4LTBjNWQ3MzE4 YjVlYy5jcmwwHwYDVR0jBBgwFoAUhtnzIHbMN/Aa2EgKlFCWFdVY3HswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVk NzMxOGI1ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ0IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfWUEMY2eS7ahyGnmtp3o2dim15iXOUhIERDc2uhBFNSU5L+XXgG8Pt iL98UpNdg84p+tjjZD8XEzXhIG+8MM0077kidWPh9tEygnGGjRcdo1MMcc7rDuyC GMdZiLaVQBg2v1g5qX0S65P+gDVlr6hi+fhj7lmiCWFXK24CSTc89rVZ1TjO0aGo ZOjnZ0KJoH2vuv6lcExOaCs4Pk9uWJ/oXkObjuvyKaN0J3EYLRTf4uKktn8MbgDs +CGBc7IYXzts3l7xRy9XtIKUtpzQ9eyiqX7oEpI2Ns3N97YHU4Y9KFHeww4LfaS4 Wy9fVOUxCDau8u0GQuH7EEJzzzLTxnc= -----END CERTIFICATE-----Generated at Mon Mar 2 04:36:00 2026 by rpki-client