$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3cd115c8-3c6e-3d24-a93c-ec589ec9b7c8.roa File: 3cd115c8-3c6e-3d24-a93c-ec589ec9b7c8.roa (raw, json) Hash identifier: UKqFGdQfwOGa+2Am5J9E1lVLYawsjr7XkdKMCaz/R9A= Subject key identifier: 59:7B:53:4C:C4:92:66:FB:F0:40:25:31:08:F7:5E:3A:5B:F0:29:B2 Certificate issuer: /CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Certificate serial: 010D0C9F4328584EA7885B4A0A998A5365B29A00 Authority key identifier: 86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3cd115c8-3c6e-3d24-a93c-ec589ec9b7c8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33715 IP address blocks: 103.66.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:5b:4a:0a:99:8a:53:65:b2:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1db0f868-d6a8-4de2-92cb-92321b61728c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:31:64:c7:7f:29:89:cf:5d:2b:c1:b5:d0:43: 4a:c6:d8:59:f4:3f:5f:3a:3b:f5:df:b7:a7:a8:09: 9d:90:0d:04:36:53:be:fc:32:b5:26:1b:c4:a7:5a: af:97:b5:be:30:f7:97:98:05:93:8d:cc:39:95:38: 6e:d0:ff:de:93:6d:1b:fb:8a:03:52:7f:fc:3f:08: 39:c8:c7:d4:8d:c7:bd:57:9d:6d:64:4e:3c:76:3c: b8:c9:0e:9f:c0:c9:c8:e8:02:f6:de:a8:be:da:b7: 0c:5c:20:69:36:1f:65:10:a2:d7:76:85:8d:ba:5f: f6:66:f0:06:0f:61:fd:0c:ca:a4:50:fb:57:f2:89: 0b:c5:24:f9:a6:8c:9a:95:c0:ea:0e:ab:b8:82:65: 26:01:ca:bf:77:f5:5f:23:4c:79:6e:99:93:99:11: 48:23:c7:5f:b3:c9:d3:ca:2a:eb:1a:2b:ff:79:e0: f8:5d:9c:dd:5a:e8:14:ca:9c:41:71:91:a0:94:33: 79:49:91:7d:f1:fa:76:4f:f6:6d:32:d6:c3:b1:fb: 02:c7:40:10:1b:82:92:2d:7b:68:84:7a:de:2a:41: 6c:07:a6:0e:1f:8b:d8:e8:da:b8:af:95:0e:38:76: c8:67:f1:d8:49:92:2c:89:b9:d6:ce:2b:b3:72:08: d1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7B:53:4C:C4:92:66:FB:F0:40:25:31:08:F7:5E:3A:5B:F0:29:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3cd115c8-3c6e-3d24-a93c-ec589ec9b7c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl X509v3 Authority Key Identifier: keyid:86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer sbgp-ipAddrBlock: critical IPv4: 103.66.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c7:2d:6c:4d:fe:6b:06:a8:cc:fb:c9:47:1e:ff:7e:da:93: 24:a7:a9:0c:dc:2a:ff:7c:5e:f0:ac:1b:18:24:0f:12:b3:f2: 13:2a:dc:dc:45:7f:9f:5b:be:fa:91:ba:83:b8:be:9b:2b:f7: 2d:63:7c:62:87:c1:d8:b0:c7:22:a2:8f:84:7f:9e:6f:02:e9: ef:14:41:46:b9:06:45:35:fe:f9:ce:2a:52:cb:9e:15:d7:0c: 1e:fe:83:03:cc:79:a0:be:4a:50:e0:68:4b:d3:69:58:0e:fd: a5:96:d3:40:88:0e:10:4c:7f:6c:8f:b5:b5:9d:81:e0:fa:24: ac:24:5b:29:ba:cc:00:8c:8c:e4:cf:f1:af:93:7a:6e:4f:d1: 25:fb:cd:82:d5:ae:3d:6e:db:b9:cc:05:bd:be:13:fc:0f:4e: 2c:2c:d7:34:9b:87:44:89:74:6d:8a:9f:c3:12:c8:02:c0:2e: 32:46:b8:c8:20:e4:be:38:13:e2:93:fa:b1:82:d2:e9:d0:e8: c1:74:cf:6b:30:fd:37:1d:5c:b7:f3:c9:27:1f:b7:7e:17:aa: 2a:b4:65:76:2a:f8:93:c0:35:5b:97:73:a0:25:06:e5:12:1a: 45:81:73:97:f3:09:7c:80:a9:95:60:6a:8b:32:48:16:ce:85: 92:f5:14:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niFtKCpmKU2WymgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyOGRlNTUtZjU5Ny00MGNmLWI1MDgtMGM1ZDczMThi NWVjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWRiMGY4NjgtZDZhOC00ZGUyLTkyY2ItOTIzMjFiNjE3MjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTFkx38pic9dK8G10ENKxthZ9D9fOjv137en qAmdkA0ENlO+/DK1JhvEp1qvl7W+MPeXmAWTjcw5lThu0P/ek20b+4oDUn/8Pwg5 yMfUjce9V51tZE48djy4yQ6fwMnI6AL23qi+2rcMXCBpNh9lEKLXdoWNul/2ZvAG D2H9DMqkUPtX8okLxST5poyalcDqDqu4gmUmAcq/d/VfI0x5bpmTmRFII8dfs8nT yirrGiv/eeD4XZzdWugUypxBcZGglDN5SZF98fp2T/ZtMtbDsfsCx0AQG4KSLXto hHreKkFsB6YOH4vY6Nq4r5UOOHbIZ/HYSZIsibnWziuzcgjRjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFl7U0zEkmb78EAlMQj3Xjpb8CmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4 ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVkNzMxOGI1ZWMvM2NkMTE1YzgtM2M2ZS0z ZDI0LWE5M2MtZWM1ODllYzliN2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmEyOGRlNTUtZjU5Ny00MGNmLWI1 MDgtMGM1ZDczMThiNWVjLzJhMjhkZTU1LWY1OTctNDBjZi1iNTA4LTBjNWQ3MzE4 YjVlYy5jcmwwHwYDVR0jBBgwFoAUhtnzIHbMN/Aa2EgKlFCWFdVY3HswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVk NzMxOGI1ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ0IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHHLWxN/msGqMz7yUce/37akySnqQzcKv98XvCsGxgkDxKz8hMq3NxF f59bvvqRuoO4vpsr9y1jfGKHwdiwxyKij4R/nm8C6e8UQUa5BkU1/vnOKlLLnhXX DB7+gwPMeaC+SlDgaEvTaVgO/aWW00CIDhBMf2yPtbWdgeD6JKwkWym6zACMjOTP 8a+Tem5P0SX7zYLVrj1u27nMBb2+E/wPTiws1zSbh0SJdG2Kn8MSyALALjJGuMgg 5L44E+KT+rGC0unQ6MF0z2sw/TcdXLfzyScft34Xqiq0ZXYq+JPANVuXc6AlBuUS GkWBc5fzCXyAqZVgaosySBbOhZL1FOQ= -----END CERTIFICATE-----Generated at Wed Jul 29 11:18:38 2026 by rpki-client