$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2ac55f39-0179-3626-9f0f-32171775be3e.roa File: 2ac55f39-0179-3626-9f0f-32171775be3e.roa (raw, json) Hash identifier: dF30VKC8zRasnytbBOLyCDmSH/5dv6kIbxRyX+FYGwY= Subject key identifier: 8C:1C:CD:A2:9C:3C:CF:C5:A2:44:C9:59:BD:7F:69:E4:D8:EF:61:B5 Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F43285847CA3F7B8CFB69355816252240 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2ac55f39-0179-3626-9f0f-32171775be3e.roa Signing time: Wed 06 Nov 2024 14:00:41 +0000 ROA not before: Wed 06 Nov 2024 14:00:41 +0000 ROA not after: Tue 04 Feb 2025 14:00:41 +0000 asID: 396949 IP address blocks: 103.101.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:ca:3f:7b:8c:fb:69:35:58:16:25:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: Nov 6 14:00:41 2024 GMT Not After : Feb 4 14:00:41 2025 GMT Subject: CN=0b9fe34b-651f-4cf2-af00-481988ec2a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:22:0c:cb:92:db:7f:ef:f7:d0:99:05:94:64: 80:02:10:12:95:46:bd:4c:cd:ae:7d:c4:7f:b6:3f: 64:cc:0f:95:1e:0c:a8:5d:f7:ca:e5:b6:57:fc:b0: 69:a6:2c:0f:8f:dc:3a:a1:32:a3:1e:0a:45:7a:c7: f9:42:bc:8c:08:75:35:18:eb:d7:a7:6b:8b:be:9c: 30:28:bc:e6:60:a0:cc:7e:0c:c0:fc:c1:0a:d5:94: bb:3e:ee:04:a6:47:70:ca:bb:fe:b4:97:83:0c:6d: b4:48:27:67:df:08:b1:03:48:f1:95:85:a7:62:fd: 86:ad:b0:ac:b5:e2:42:2a:4a:b9:ce:fd:3e:76:2c: eb:a3:a5:49:46:7e:83:8d:ae:12:2f:d5:48:b8:46: f6:58:91:08:f9:a2:58:69:f0:88:f6:1a:8f:66:f9: 47:06:8e:49:56:40:34:36:87:78:e9:5d:ea:8a:d4: 7a:ce:28:fd:d0:20:31:c9:4d:ca:66:78:e2:95:05: a6:f2:99:85:6c:b8:66:66:a7:19:24:bd:2b:2e:fc: 25:83:cb:62:c5:02:08:8c:0b:06:38:82:4e:5e:b0: 64:b5:31:0b:45:b0:ea:86:c2:e7:bb:ac:d7:a0:07: e2:ba:61:32:29:61:8a:1e:25:df:34:61:f2:8c:ce: 88:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1C:CD:A2:9C:3C:CF:C5:A2:44:C9:59:BD:7F:69:E4:D8:EF:61:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2ac55f39-0179-3626-9f0f-32171775be3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv4: 103.101.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:1e:66:6c:66:c1:26:21:4c:00:df:ed:91:79:8b:c3:39:c7: 2b:b1:a7:3c:2f:72:5b:9c:66:5f:7d:95:2b:95:97:a2:67:62: 7f:82:b2:a8:e3:b9:4a:fb:80:4a:ce:e3:0c:93:8e:f5:c9:8b: 9a:b1:83:eb:b4:4d:98:17:ec:3f:67:91:bb:25:8e:7a:cc:a5: 0f:9f:cf:53:8a:36:13:ed:56:33:0e:bb:62:81:27:34:28:23: 90:ce:27:87:a6:a2:f7:50:6b:dc:f2:bc:fe:03:6b:ec:e4:82: 45:15:0c:6b:eb:bd:04:6b:18:c9:33:43:c2:5a:1d:c3:53:43: a4:c1:ba:3d:74:31:49:bb:52:93:0d:7a:06:b6:5b:5c:23:a0: 63:d2:3f:8a:b9:2d:66:8e:ed:a3:ed:1d:4a:21:90:fe:33:69: 5c:f6:14:d2:5f:cf:43:5b:9a:0a:2c:e2:4b:74:46:52:34:43: 55:c6:94:08:1b:4a:92:69:ce:b8:19:40:0a:0e:91:29:20:da: 80:22:77:bc:5a:08:cc:55:fa:1e:c7:79:c5:1b:f8:5a:79:59: a5:50:cb:1b:5a:75:06:97:7f:59:b9:08:90:54:7f:0c:3d:b2: 43:49:b8:5e:13:35:c1:a6:45:ea:31:3e:93:21:90:49:73:ce: 62:40:17:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfKP3uM+2k1WBYlIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI0MTEwNjE0MDA0MVoXDTI1MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MGI5ZmUzNGItNjUxZi00Y2YyLWFmMDAtNDgxOTg4ZWMyYTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyIMy5Lbf+/30JkFlGSAAhASlUa9TM2ufcR/ tj9kzA+VHgyoXffK5bZX/LBppiwPj9w6oTKjHgpFesf5QryMCHU1GOvXp2uLvpww KLzmYKDMfgzA/MEK1ZS7Pu4Epkdwyrv+tJeDDG20SCdn3wixA0jxlYWnYv2GrbCs teJCKkq5zv0+dizro6VJRn6Dja4SL9VIuEb2WJEI+aJYafCI9hqPZvlHBo5JVkA0 Nod46V3qitR6zij90CAxyU3KZnjilQWm8pmFbLhmZqcZJL0rLvwlg8tixQIIjAsG OIJOXrBktTELRbDqhsLnu6zXoAfiumEyKWGKHiXfNGHyjM6IgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwczaKcPM/FokTJWb1/aeTY72G1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvMmFjNTVmMzktMDE3OS0z NjI2LTlmMGYtMzIxNzE3NzViZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2XIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIceZmxmwSYhTADf7ZF5i8M5xyuxpzwvclucZl99lSuVl6JnYn+Csqjj uUr7gErO4wyTjvXJi5qxg+u0TZgX7D9nkbsljnrMpQ+fz1OKNhPtVjMOu2KBJzQo I5DOJ4emovdQa9zyvP4Da+zkgkUVDGvrvQRrGMkzQ8JaHcNTQ6TBuj10MUm7UpMN ega2W1wjoGPSP4q5LWaO7aPtHUohkP4zaVz2FNJfz0Nbmgos4kt0RlI0Q1XGlAgb SpJpzrgZQAoOkSkg2oAid7xaCMxV+h7HecUb+Fp5WaVQyxtadQaXf1m5CJBUfww9 skNJuF4TNcGmReoxPpMhkElzzmJAF8A= -----END CERTIFICATE-----Generated at Fri Nov 22 04:07:13 2024 by rpki-client on console-ams.rpki-client.org