$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/41cb8410-408f-34b7-9356-bf990e3ec27c.roa File: 41cb8410-408f-34b7-9356-bf990e3ec27c.roa (raw, json) Hash identifier: 3ZQc3rbhVtjs8Mezad0Se92URzUaj3PRJJ55y2gkCyk= Subject key identifier: 66:73:43:18:F7:FD:17:A7:F0:21:25:A3:51:4A:35:5D:7C:BE:03:48 Certificate issuer: /CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Certificate serial: 010D0C9F4328584B970CCB8945E4C07B095CBF80 Authority key identifier: 86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/41cb8410-408f-34b7-9356-bf990e3ec27c.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 33715 IP address blocks: 103.66.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:cb:89:45:e4:c0:7b:09:5c:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=093977aa-f498-45c9-8066-55255f4489bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:93:b2:d9:e1:a4:0c:4b:43:a5:45:24:02:cb: 6a:dc:ef:1b:a9:86:46:07:1d:c4:7a:80:60:d7:fa: 5e:32:a9:84:5f:77:bd:21:c9:4b:d0:fe:fa:33:29: 6e:52:00:7a:11:0e:3c:71:48:05:fc:63:37:0b:d8: ec:13:0f:02:e2:2a:c0:8b:89:8f:5d:ac:89:7a:48: c1:7f:95:be:a8:90:44:ff:1a:57:35:6c:5e:23:0f: db:0a:40:60:4b:a7:a9:2c:00:b7:4f:34:9c:f7:25: 76:ae:56:00:02:b5:3b:99:61:74:9c:ba:93:bf:9e: 72:b7:15:92:90:23:53:db:a7:01:76:03:9e:b3:8a: 86:5b:29:ae:ca:85:c9:1d:db:be:b8:2b:fe:07:f7: ae:66:65:00:4e:aa:cd:80:ab:d8:b3:91:ff:5a:30: 7c:e3:12:b6:33:0e:2b:a7:b9:34:0f:b6:5d:e2:d8: 7f:af:6b:75:27:f2:c5:85:7f:5d:4d:76:69:ff:62: 0e:58:17:c0:2d:ee:32:63:65:24:02:e6:87:d3:9d: 3b:fa:71:62:9d:b2:e9:a0:b8:b3:8e:65:2d:e3:9b: 69:70:9f:2b:cd:ec:25:c4:01:1e:0d:84:f0:d7:03: 94:78:5e:a2:6c:49:46:be:b1:88:ca:10:9d:50:58: 16:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:73:43:18:F7:FD:17:A7:F0:21:25:A3:51:4A:35:5D:7C:BE:03:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/41cb8410-408f-34b7-9356-bf990e3ec27c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl X509v3 Authority Key Identifier: keyid:86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer sbgp-ipAddrBlock: critical IPv4: 103.66.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:36:ba:91:91:ef:67:4b:1f:f6:c1:5a:3d:8e:86:3a:51:12: 3d:d8:25:c6:bf:c0:9e:22:83:51:e7:5c:d5:ab:82:20:65:c2: 5c:e1:d7:db:68:49:cd:db:09:c3:41:aa:fd:f6:b3:2a:dd:92: 46:3e:40:73:5b:ac:3f:39:49:63:2d:63:0c:53:96:49:2e:bc: 5d:76:52:78:0e:d2:9b:bb:bf:39:59:d8:4d:32:40:6a:72:c4: 46:9c:15:a5:e1:f5:ff:5a:28:89:15:26:03:2b:03:1b:36:32: e3:70:ab:ac:47:f5:b3:bd:e3:37:c8:b6:87:ae:f8:1b:83:7f: c9:3b:fb:5b:f1:a2:e4:7a:ee:cf:92:5a:21:d4:b3:08:23:3a: 01:e3:ee:be:b1:1e:a7:5e:2b:a8:d9:5f:7f:48:2b:83:9e:68: 6a:58:90:8d:0d:29:41:d2:55:c0:3c:6e:83:fa:8f:33:33:50: 40:7e:66:f3:cc:e6:fc:99:1a:99:73:a7:c8:71:7c:53:8e:fd: d0:77:6b:d2:12:e0:22:d8:63:ad:96:ce:1a:f4:74:85:da:27: a2:e0:c7:30:a9:b5:48:49:a0:c0:35:36:5b:c3:47:3e:fe:77: 50:24:23:9b:8f:f6:55:30:84:e4:c5:80:ce:56:5f:93:f6:db: 73:53:cd:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDMuJReTAewlcv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyOGRlNTUtZjU5Ny00MGNmLWI1MDgtMGM1ZDczMThi NWVjMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MDkzOTc3YWEtZjQ5OC00NWM5LTgwNjYtNTUyNTVmNDQ4OWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5Oy2eGkDEtDpUUkAstq3O8bqYZGBx3EeoBg 1/peMqmEX3e9IclL0P76MyluUgB6EQ48cUgF/GM3C9jsEw8C4irAi4mPXayJekjB f5W+qJBE/xpXNWxeIw/bCkBgS6epLAC3TzSc9yV2rlYAArU7mWF0nLqTv55ytxWS kCNT26cBdgOes4qGWymuyoXJHdu+uCv+B/euZmUATqrNgKvYs5H/WjB84xK2Mw4r p7k0D7Zd4th/r2t1J/LFhX9dTXZp/2IOWBfALe4yY2UkAuaH0507+nFinbLpoLiz jmUt45tpcJ8rzewlxAEeDYTw1wOUeF6ibElGvrGIyhCdUFgWhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZzQxj3/Ren8CElo1FKNV18vgNIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4 ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVkNzMxOGI1ZWMvNDFjYjg0MTAtNDA4Zi0z NGI3LTkzNTYtYmY5OTBlM2VjMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmEyOGRlNTUtZjU5Ny00MGNmLWI1 MDgtMGM1ZDczMThiNWVjLzJhMjhkZTU1LWY1OTctNDBjZi1iNTA4LTBjNWQ3MzE4 YjVlYy5jcmwwHwYDVR0jBBgwFoAUhtnzIHbMN/Aa2EgKlFCWFdVY3HswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVk NzMxOGI1ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0IfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK82upGR72dLH/bBWj2OhjpREj3YJca/wJ4ig1HnXNWrgiBlwlzh19to Sc3bCcNBqv32syrdkkY+QHNbrD85SWMtYwxTlkkuvF12UngO0pu7vzlZ2E0yQGpy xEacFaXh9f9aKIkVJgMrAxs2MuNwq6xH9bO94zfItoeu+BuDf8k7+1vxouR67s+S WiHUswgjOgHj7r6xHqdeK6jZX39IK4OeaGpYkI0NKUHSVcA8boP6jzMzUEB+ZvPM 5vyZGplzp8hxfFOO/dB3a9IS4CLYY62Wzhr0dIXaJ6LgxzCptUhJoMA1NlvDRz7+ d1AkI5uP9lUwhOTFgM5WX5P223NTzT0= -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:29 2025 by rpki-client