$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/65632e09-01b8-3b15-8d00-9c8029babe5c.roa File: 65632e09-01b8-3b15-8d00-9c8029babe5c.roa (raw, json) Hash identifier: B9WuT3r3AG0dmj69xGH9QPwQapJRlJuJNEUI6PrclrE= Subject key identifier: B0:91:05:5E:1B:29:1D:16:DC:70:90:07:3B:D4:9E:A5:77:BC:F7:35 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F432858489E6B65CD238FF5742C71A3D0 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/65632e09-01b8-3b15-8d00-9c8029babe5c.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 16509 IP address blocks: 103.246.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:65:cd:23:8f:f5:74:2c:71:a3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=04eeff7d-d1db-43f5-ad2d-ea7dd861d744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:1c:70:eb:0e:4e:4e:97:7b:d8:d2:df:43: b8:6b:69:30:4b:1e:68:5b:10:19:8f:fb:3e:35:13: 80:47:f7:1f:79:3f:5c:17:e9:28:cb:f2:e1:d3:2f: 44:33:4e:59:12:16:8f:c1:a3:72:5f:c3:ae:33:25: 7c:51:19:f5:f2:80:86:89:ef:f1:b8:17:2c:30:ed: 62:9c:b9:24:74:34:3c:6b:a1:bd:7e:c1:ab:d8:16: 1c:d6:f0:be:08:d4:d5:97:c1:f3:54:d4:54:6d:27: 3c:22:ed:82:ed:46:f9:60:3d:ee:6e:a3:73:86:42: f4:dd:01:8e:41:f7:cd:7c:91:02:95:2d:1f:08:f7: 18:48:c7:bb:cd:1b:d7:71:95:26:d2:54:97:63:00: c0:8c:5d:27:95:69:82:b5:0a:c2:42:d2:99:11:16: 9e:8b:5d:d1:75:1f:49:dc:01:96:00:5d:33:a2:71: 73:f9:50:7f:98:c1:7b:55:74:7e:1a:25:61:ed:37: b5:38:48:07:c0:15:46:f9:40:80:b4:50:c5:bf:60: 3a:1e:74:9f:1b:ba:50:83:40:18:36:b5:a4:e9:d0: 3e:9e:c6:12:e4:ef:5a:c4:bd:0d:14:f4:ec:13:56: 69:ea:6a:05:44:c6:c0:67:0f:2b:95:18:40:ef:cb: a5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:91:05:5E:1B:29:1D:16:DC:70:90:07:3B:D4:9E:A5:77:BC:F7:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/65632e09-01b8-3b15-8d00-9c8029babe5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 103.246.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:4a:6f:4a:72:2a:12:a5:c9:00:c6:ce:65:f9:39:12:f8:c4: c9:77:6e:36:7b:5e:d5:d5:32:1d:81:ba:2f:02:8c:34:76:dd: 5f:d7:2c:ba:d4:bd:5c:05:dd:4e:a0:0d:ea:85:68:23:63:d3: 80:15:5c:da:63:7b:fa:d4:0b:e5:c3:df:76:c2:f6:c5:e6:45: 13:c8:67:f8:2a:c6:6b:d0:99:b1:32:9a:14:21:4f:c5:34:bc: 2b:35:9b:df:28:29:da:b7:80:60:77:1b:6f:c5:43:be:67:d2: 58:03:8a:b0:5a:bf:7c:1c:05:7a:a2:5c:f2:07:e3:8e:78:a4: 43:23:82:8e:6f:6d:df:50:36:29:c3:03:ed:23:43:15:b6:0b: db:10:c4:a6:8f:28:60:d4:42:94:64:dc:de:91:81:15:83:a5: bf:90:c5:10:70:e2:fc:73:28:2e:3d:f7:a5:a0:d5:9a:a0:a8: c4:66:20:7c:c8:39:ba:49:2c:f9:27:5f:34:c4:b7:bd:4b:0c: cd:e3:cc:47:b4:81:15:f9:9f:c8:39:c1:8e:59:1f:73:9c:53: bd:7a:d0:b3:a9:b0:da:52:8e:9e:0f:38:c1:cd:ec:09:37:00: 79:4d:8c:ec:7c:6c:05:8a:c2:4f:d5:2a:89:1b:29:01:b9:77: 84:56:51:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2XNI4/1dCxxo9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MDRlZWZmN2QtZDFkYi00M2Y1LWFkMmQtZWE3ZGQ4NjFkNzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9gccOsOTk6Xe9jS30O4a2kwSx5oWxAZj/s+ NROAR/cfeT9cF+koy/Lh0y9EM05ZEhaPwaNyX8OuMyV8URn18oCGie/xuBcsMO1i nLkkdDQ8a6G9fsGr2BYc1vC+CNTVl8HzVNRUbSc8Iu2C7Ub5YD3ubqNzhkL03QGO QffNfJEClS0fCPcYSMe7zRvXcZUm0lSXYwDAjF0nlWmCtQrCQtKZERaei13RdR9J 3AGWAF0zonFz+VB/mMF7VXR+GiVh7Te1OEgHwBVG+UCAtFDFv2A6HnSfG7pQg0AY NrWk6dA+nsYS5O9axL0NFPTsE1Zp6moFRMbAZw8rlRhA78ulyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCRBV4bKR0W3HCQBzvUnqV3vPc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNjU2MzJlMDktMDFiOC0z YjE1LThkMDAtOWM4MDI5YmFiZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/b7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFKb0pyKhKlyQDGzmX5ORL4xMl3bjZ7XtXVMh2Bui8CjDR23V/XLLrU vVwF3U6gDeqFaCNj04AVXNpje/rUC+XD33bC9sXmRRPIZ/gqxmvQmbEymhQhT8U0 vCs1m98oKdq3gGB3G2/FQ75n0lgDirBav3wcBXqiXPIH4454pEMjgo5vbd9QNinD A+0jQxW2C9sQxKaPKGDUQpRk3N6RgRWDpb+QxRBw4vxzKC4996Wg1ZqgqMRmIHzI ObpJLPknXzTEt71LDM3jzEe0gRX5n8g5wY5ZH3OcU7160LOpsNpSjp4POMHN7Ak3 AHlNjOx8bAWKwk/VKokbKQG5d4RWUVM= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:13 2025 by rpki-client