$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/0f248272-b773-38cf-a66c-d32be0dff41d.roa File: 0f248272-b773-38cf-a66c-d32be0dff41d.roa (raw, json) Hash identifier: Ln0Tx6ljyXgFlybOWQDnSLxLlyEBE1Wcn+GWDfgNZdM= Subject key identifier: 3C:B8:3A:BE:D6:E1:BF:7B:16:5F:6C:7F:C3:36:69:79:3A:29:4E:F3 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584718DAF80FC60F6C954D6725C0 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/0f248272-b773-38cf-a66c-d32be0dff41d.roa Signing time: Wed 04 Sep 2024 01:00:32 +0000 ROA not before: Wed 04 Sep 2024 01:00:32 +0000 ROA not after: Tue 03 Dec 2024 02:00:32 +0000 asID: 400097 IP address blocks: 103.123.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:18:da:f8:0f:c6:0f:6c:95:4d:67:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Sep 4 01:00:32 2024 GMT Not After : Dec 3 02:00:32 2024 GMT Subject: CN=b3fb208b-cab4-486b-ae81-c473a42517b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d8:e7:74:b7:79:28:57:b5:90:84:5e:0c:07: cd:c6:fa:ee:9e:86:96:ad:5a:26:bf:47:90:58:1f: 54:7d:65:a9:34:87:de:7e:b9:c9:82:cd:e3:64:f8: 31:79:62:82:13:fb:8f:7c:e6:c0:c2:ff:3f:1b:2b: db:a4:22:10:d2:6f:df:9e:49:d9:15:39:88:ce:c4: 9b:7f:86:73:56:98:ca:0e:6c:b4:02:f4:33:5c:f3: 92:5c:f3:e5:10:d8:62:84:d1:0f:48:3f:ae:b2:ce: 3b:38:6d:23:ca:af:ec:0b:86:5a:ff:8b:d7:3e:bb: f5:0c:86:b3:bf:fc:42:6a:5f:0a:e3:d2:61:5e:8a: 7a:db:05:2f:f2:91:6b:ba:1b:f2:90:72:a3:8a:06: a9:4c:ef:91:5f:5a:e8:d8:fc:7f:9a:c7:87:24:03: df:18:c8:9a:cd:4d:fa:57:71:09:08:40:84:84:b8: 98:73:0c:ac:69:a5:36:cc:f2:42:c2:9a:df:49:c3: 3b:80:66:a6:b2:d6:e5:c0:4f:03:4b:a2:0c:e7:57: 3c:24:47:4c:ef:b1:23:38:ba:51:d6:15:82:a6:c3: d1:50:2f:3d:54:6b:9b:e1:62:97:a7:e7:ce:c9:4e: ec:da:9e:d6:76:da:36:3b:c2:cd:26:3b:0a:99:07: ad:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B8:3A:BE:D6:E1:BF:7B:16:5F:6C:7F:C3:36:69:79:3A:29:4E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/0f248272-b773-38cf-a66c-d32be0dff41d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv4: 103.123.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:1b:3f:92:0c:58:30:33:4f:79:ff:24:ff:fd:2e:dd:81:a3: 56:93:56:44:56:2a:83:43:01:93:5a:f0:0a:95:8f:78:19:7d: 47:6f:82:40:ab:f1:85:2f:b4:ac:e8:d4:af:59:e2:5b:25:ea: d2:c3:30:72:5f:23:f4:b8:d0:80:45:f9:a1:4c:bc:83:90:e6: 24:fa:ec:a8:02:7a:d3:83:a7:20:62:db:1c:20:a4:9f:a4:08: 9f:88:14:de:b2:d8:5d:ee:aa:50:b2:e5:f5:a9:67:c5:4a:4b: 16:4d:1d:65:8c:02:a7:e5:d4:be:8f:0e:33:7d:37:f3:07:4c: f2:b0:b8:26:37:eb:c0:cd:84:8e:35:6a:20:ee:7e:aa:94:a5: fe:7c:ca:1b:eb:b8:32:f1:14:21:9e:c6:a6:dd:75:7e:67:d4: a8:0f:bc:de:c2:99:07:cd:d4:c4:3f:15:d4:78:1c:74:9c:a5: fd:c2:10:39:69:01:f4:9d:24:a9:71:1c:f7:6e:d8:7d:60:28: 5d:fe:b2:bb:df:58:e8:1d:10:51:3b:6f:92:02:95:97:c4:4a: ae:3c:cd:80:2c:41:68:21:3d:e8:4b:28:e8:02:22:c4:31:dc: b8:b5:b9:bb:ed:02:07:8e:39:98:f9:4d:a9:e2:2d:b7:e4:1a: 84:1b:18:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcY2vgPxg9slU1nJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI0MDkwNDAxMDAzMloXDTI0MTIwMzAyMDAzMlowLzEtMCsGA1UEAxMk YjNmYjIwOGItY2FiNC00ODZiLWFlODEtYzQ3M2E0MjUxN2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9jndLd5KFe1kIReDAfNxvrunoaWrVomv0eQ WB9UfWWpNIfefrnJgs3jZPgxeWKCE/uPfObAwv8/GyvbpCIQ0m/fnknZFTmIzsSb f4ZzVpjKDmy0AvQzXPOSXPPlENhihNEPSD+uss47OG0jyq/sC4Za/4vXPrv1DIaz v/xCal8K49JhXop62wUv8pFruhvykHKjigapTO+RX1ro2Px/mseHJAPfGMiazU36 V3EJCECEhLiYcwysaaU2zPJCwprfScM7gGamstblwE8DS6IM51c8JEdM77EjOLpR 1hWCpsPRUC89VGub4WKXp+fOyU7s2p7Wdto2O8LNJjsKmQetAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDy4Or7W4b97Fl9sf8M2aXk6KU7zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvMGYyNDgyNzItYjc3My0z OGNmLWE2NmMtZDMyYmUwZGZmNDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3vfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADobP5IMWDAzT3n/JP/9Lt2Bo1aTVkRWKoNDAZNa8AqVj3gZfUdvgkCr 8YUvtKzo1K9Z4lsl6tLDMHJfI/S40IBF+aFMvIOQ5iT67KgCetODpyBi2xwgpJ+k CJ+IFN6y2F3uqlCy5fWpZ8VKSxZNHWWMAqfl1L6PDjN9N/MHTPKwuCY368DNhI41 aiDufqqUpf58yhvruDLxFCGexqbddX5n1KgPvN7CmQfN1MQ/FdR4HHScpf3CEDlp AfSdJKlxHPdu2H1gKF3+srvfWOgdEFE7b5IClZfESq48zYAsQWghPehLKOgCIsQx 3Li1ubvtAgeOOZj5TaniLbfkGoQbGOQ= -----END CERTIFICATE-----Generated at Fri Nov 22 03:54:02 2024 by rpki-client on console-fra.rpki-client.org