$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/78e1a8de-e628-3875-8faa-140c188a17e8.roa File: 78e1a8de-e628-3875-8faa-140c188a17e8.roa (raw, json) Hash identifier: pVR5gEOP2LXV02YQbXz9FThbWH5+feok8t/DMPTKdts= Subject key identifier: 25:52:61:B9:5B:99:23:34:D8:F6:1B:53:83:9A:92:94:36:EB:27:49 Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F43285848D210E6CEFB489B0C65D60FC0 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/78e1a8de-e628-3875-8faa-140c188a17e8.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 150452 IP address blocks: 103.28.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:e6:ce:fb:48:9b:0c:65:d6:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=b7357c9c-a5da-48af-8e26-4686dd9b3837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:24:23:6e:69:e8:a9:28:65:65:3f:de:7b:f3: e1:33:fd:bf:b5:0d:bc:96:25:ff:56:21:9a:6d:7f: 2f:62:f8:d7:00:3e:17:d2:0f:81:30:92:a1:8d:61: 0b:10:3f:97:b9:50:22:be:58:ee:84:a3:83:4c:25: 6c:b0:b9:90:54:94:1c:c7:85:35:46:31:85:db:b4: 0d:53:39:d6:4e:45:33:2f:ca:de:aa:57:76:b8:0f: bb:6f:d7:d0:c2:42:4e:56:b7:29:36:c1:81:ac:4a: 94:85:63:e0:65:a1:ba:fc:6b:30:b6:f0:6a:e2:50: fa:dd:8d:7e:d6:10:f8:9b:92:a7:e5:15:21:15:d5: 75:78:fa:67:ae:26:61:dc:63:25:35:f0:33:04:04: 6f:92:01:6c:b6:1b:8e:17:f1:7d:20:20:92:d1:fc: f4:a4:5a:e5:db:ce:9d:a7:22:24:01:81:b7:09:21: 42:59:b2:d1:9a:08:eb:d9:d8:c3:45:9b:99:84:2e: b4:23:43:0f:cd:a3:01:e4:e1:22:44:3d:aa:02:5b: fe:6b:20:2a:fc:5a:da:82:65:82:08:0d:d4:4a:cc: df:15:a1:54:9a:5c:ce:06:dc:3f:e6:c7:a3:4b:24: fb:be:dd:e7:74:7b:84:5a:c9:dd:72:fc:18:8d:3f: 0e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:52:61:B9:5B:99:23:34:D8:F6:1B:53:83:9A:92:94:36:EB:27:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/78e1a8de-e628-3875-8faa-140c188a17e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 103.28.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:2a:8b:0a:3d:cc:b7:05:2f:c3:02:03:ad:6f:8f:10:c1:c2: 02:75:ff:d1:52:11:33:bc:0d:f1:85:51:4f:a8:6d:68:79:5c: 8c:7e:6e:88:25:80:83:be:7c:c4:45:a7:6f:c5:c3:c5:ad:8f: d4:d2:fa:c7:3a:80:74:65:e7:5b:9e:42:26:05:8e:51:13:75: f5:b1:5d:08:9e:95:1c:a6:fd:5d:dd:84:6a:2b:0f:23:ba:cc: 47:d8:d7:91:28:2b:50:15:3c:35:e8:a8:95:59:59:39:22:ec: de:30:2b:a5:bb:c4:f2:8d:a5:55:18:2d:86:8f:13:02:21:38: 84:f4:ce:7c:8c:2c:e8:71:f8:c6:a2:9d:f7:31:e3:6e:8e:f8: 7f:79:39:fc:de:f5:47:59:1a:97:ab:48:5d:c2:dc:4e:45:d6: 9b:e6:6f:c8:34:4c:13:e2:6c:c5:ec:ed:fa:d7:e0:85:df:7a: eb:52:0b:ab:29:b0:e4:f4:0d:3d:14:8d:63:1c:64:56:ff:41: fe:1f:cb:3b:f3:23:57:8e:5c:ff:c5:6c:85:7d:a7:fe:43:72: 21:54:54:20:b6:5a:b0:9c:b5:3d:b1:d5:a9:8a:23:6c:b1:2f: fa:2e:ee:ce:e0:e2:d5:27:49:5f:5e:83:7f:b6:d7:a2:6d:8d: 1f:eb:0e:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEObO+0ibDGXWD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YjczNTdjOWMtYTVkYS00OGFmLThlMjYtNDY4NmRkOWIzODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSQjbmnoqShlZT/ee/PhM/2/tQ28liX/ViGa bX8vYvjXAD4X0g+BMJKhjWELED+XuVAivljuhKODTCVssLmQVJQcx4U1RjGF27QN UznWTkUzL8reqld2uA+7b9fQwkJOVrcpNsGBrEqUhWPgZaG6/GswtvBq4lD63Y1+ 1hD4m5Kn5RUhFdV1ePpnriZh3GMlNfAzBARvkgFsthuOF/F9ICCS0fz0pFrl286d pyIkAYG3CSFCWbLRmgjr2djDRZuZhC60I0MPzaMB5OEiRD2qAlv+ayAq/FragmWC CA3USszfFaFUmlzOBtw/5sejSyT7vt3ndHuEWsndcvwYjT8OmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVSYblbmSM02PYbU4OakpQ26ydJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvNzhlMWE4ZGUtZTYyOC0z ODc1LThmYWEtMTQwYzE4OGExN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkqiwo9zLcFL8MCA61vjxDBwgJ1/9FSETO8DfGFUU+obWh5XIx+bogl gIO+fMRFp2/Fw8Wtj9TS+sc6gHRl51ueQiYFjlETdfWxXQielRym/V3dhGorDyO6 zEfY15EoK1AVPDXoqJVZWTki7N4wK6W7xPKNpVUYLYaPEwIhOIT0znyMLOhx+Mai nfcx426O+H95Ofze9UdZGperSF3C3E5F1pvmb8g0TBPibMXs7frX4IXfeutSC6sp sOT0DT0UjWMcZFb/Qf4fyzvzI1eOXP/FbIV9p/5DciFUVCC2WrCctT2x1amKI2yx L/ou7s7g4tUnSV9eg3+216JtjR/rDoE= -----END CERTIFICATE-----Generated at Sat Apr 5 13:39:40 2025 by rpki-client