$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa File: 3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa (raw, json) Hash identifier: lRskX/r6m54lAq0dbBBT674Omn1zRSrZwGECMPxSMHg= Subject key identifier: 2F:C0:F4:26:69:71:25:98:8E:BD:8B:F5:5E:8C:CB:F8:F9:02:7F:C2 Certificate issuer: /CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Certificate serial: 010D0C9F4328584DD625C8A529BFAFE79FE1DF00 Authority key identifier: 86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 396982 IP address blocks: 103.66.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:c8:a5:29:bf:af:e7:9f:e1:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=a074de64-fce4-4b29-8859-26feb12bc7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0f:c9:6c:a8:e4:83:34:7c:d6:08:22:d8:c8: 9c:ae:eb:db:76:89:a0:75:b1:1d:e8:46:ed:37:33: b9:4e:88:c1:6a:a4:76:71:7e:e1:73:66:6e:a4:61: 29:fb:3e:19:f5:b5:b1:19:9a:c9:c6:3b:0f:84:41: 22:59:04:32:ee:2c:39:2f:07:46:76:fe:a8:c8:63: 81:27:e8:1f:f8:df:78:21:70:dc:94:ec:37:97:9a: 78:9b:f2:0d:2e:34:4f:ea:d2:9a:27:c7:a1:c5:aa: 89:cf:38:bb:3b:f3:47:c8:6b:59:e3:ea:0b:6e:9e: 78:87:ea:c8:2b:38:d5:e2:20:55:21:2c:9a:a4:ab: 55:64:77:99:dd:9f:61:40:d8:7c:08:29:55:24:bd: a5:93:03:6a:6f:11:99:ee:41:29:92:ae:97:f2:b0: bf:71:fc:32:ed:aa:6c:44:b1:77:7e:5e:66:d0:f8: 37:fd:ec:35:98:b3:14:bb:53:71:e8:d9:8a:ce:1e: dc:d5:7c:c4:a6:27:ba:a2:00:c4:94:f6:91:a9:ee: 2d:b5:06:47:13:01:99:6c:81:2f:45:74:81:3e:88: 3e:bc:b8:b3:7d:74:73:2b:35:c3:37:62:fe:c3:21: e4:43:39:20:81:f0:26:b4:eb:89:ff:34:67:dc:e2: 8f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C0:F4:26:69:71:25:98:8E:BD:8B:F5:5E:8C:CB:F8:F9:02:7F:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl X509v3 Authority Key Identifier: keyid:86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer sbgp-ipAddrBlock: critical IPv4: 103.66.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:8e:41:75:2a:d3:8d:6e:1b:6c:d7:b6:db:92:20:47:d7:68: fc:3f:77:69:f6:b9:01:d0:ec:21:90:3d:e9:30:82:dd:bb:cd: 0f:53:80:7c:e3:d1:a2:cf:1f:13:5e:2c:82:09:f1:b5:2c:19: f8:b7:f1:dd:79:e5:31:1a:f8:1b:a9:c5:57:38:be:21:88:7b: a3:43:74:0b:a3:ad:7d:98:10:50:34:a6:f2:d6:65:7f:6d:35: 2b:84:45:a4:a6:ec:4a:6d:d7:ac:1a:6e:bb:bc:80:51:ba:2a: c4:1f:98:34:d7:d4:27:bd:09:1c:5e:89:6c:c0:5b:d1:c4:d9: c2:b1:68:6c:f3:45:dd:6c:4e:0e:d4:6c:b3:c7:70:12:e0:a9: fc:13:d3:d5:e5:8e:a1:ff:2b:ef:70:e6:fd:22:2c:e7:94:f5: 5e:d6:ce:20:78:27:63:7e:44:24:a1:9d:ae:62:37:7c:a5:38: 24:1e:e7:3f:65:e9:85:97:1c:02:a2:88:61:c0:44:2b:ff:b2: 2a:b4:52:76:ec:af:90:1b:af:b2:31:8c:ae:d6:22:ee:f3:f0: 1a:6f:a3:9f:02:3a:48:b2:4f:84:60:9d:a9:cc:2a:8c:9e:4e: 69:e7:b9:2e:ac:32:24:d0:6e:6d:63:72:c0:99:db:97:92:7f: 71:49:ed:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJcilKb+v55/h3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyOGRlNTUtZjU5Ny00MGNmLWI1MDgtMGM1ZDczMThi NWVjMB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk YTA3NGRlNjQtZmNlNC00YjI5LTg4NTktMjZmZWIxMmJjN2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA/JbKjkgzR81ggi2MicruvbdomgdbEd6Ebt NzO5TojBaqR2cX7hc2ZupGEp+z4Z9bWxGZrJxjsPhEEiWQQy7iw5LwdGdv6oyGOB J+gf+N94IXDclOw3l5p4m/INLjRP6tKaJ8ehxaqJzzi7O/NHyGtZ4+oLbp54h+rI KzjV4iBVISyapKtVZHeZ3Z9hQNh8CClVJL2lkwNqbxGZ7kEpkq6X8rC/cfwy7aps RLF3fl5m0Pg3/ew1mLMUu1Nx6NmKzh7c1XzEpie6ogDElPaRqe4ttQZHEwGZbIEv RXSBPog+vLizfXRzKzXDN2L+wyHkQzkggfAmtOuJ/zRn3OKPPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/A9CZpcSWYjr2L9V6My/j5An/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4 ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVkNzMxOGI1ZWMvMzM1OGRkN2EtZWE1NS0z MTA3LWI3ZjctZWQyM2UyNzI5YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmEyOGRlNTUtZjU5Ny00MGNmLWI1 MDgtMGM1ZDczMThiNWVjLzJhMjhkZTU1LWY1OTctNDBjZi1iNTA4LTBjNWQ3MzE4 YjVlYy5jcmwwHwYDVR0jBBgwFoAUhtnzIHbMN/Aa2EgKlFCWFdVY3HswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVk NzMxOGI1ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ0IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmOQXUq041uG2zXttuSIEfXaPw/d2n2uQHQ7CGQPekwgt27zQ9TgHzj 0aLPHxNeLIIJ8bUsGfi38d155TEa+BupxVc4viGIe6NDdAujrX2YEFA0pvLWZX9t NSuERaSm7Ept16wabru8gFG6KsQfmDTX1Ce9CRxeiWzAW9HE2cKxaGzzRd1sTg7U bLPHcBLgqfwT09XljqH/K+9w5v0iLOeU9V7WziB4J2N+RCShna5iN3ylOCQe5z9l 6YWXHAKiiGHARCv/siq0Unbsr5Abr7IxjK7WIu7z8Bpvo58COkiyT4RgnanMKoye TmnnuS6sMiTQbm1jcsCZ25eSf3FJ7XI= -----END CERTIFICATE-----Generated at Sat Jun 13 09:22:25 2026 by rpki-client