$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/87fd7cb7-f9a7-3cdd-bfc8-cbf96d732a8b.roa File: 87fd7cb7-f9a7-3cdd-bfc8-cbf96d732a8b.roa (raw, json) Hash identifier: BJDfEC6Uwh2ka30GtYy/jdgytL+cA4qSA6Tk0bcRKew= Subject key identifier: 00:2B:3F:69:FD:2A:14:ED:8F:78:88:F6:CB:3C:7A:0C:D7:64:7D:7D Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F43285849002149F35E91249B019CC800 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/87fd7cb7-f9a7-3cdd-bfc8-cbf96d732a8b.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 213122 IP address blocks: 103.28.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:49:f3:5e:91:24:9b:01:9c:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=3043e243-7410-4490-b6a7-4d1879c26e3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3a:7b:4d:78:d1:4d:6a:85:cb:24:2a:e2:e5: b6:cb:fe:de:e9:bb:96:57:33:4e:33:2a:4f:ad:c1: 32:15:cb:60:cb:5f:6c:f3:85:44:42:10:94:0d:f9: 1a:a2:d8:44:c2:b0:14:45:e5:7a:85:99:01:9b:8f: e2:d2:06:6a:b5:e2:e4:76:e6:b0:d2:ee:e1:70:9a: 31:e3:cd:df:52:7a:65:ae:13:c0:96:1b:4e:f3:c4: 9e:67:a9:3f:6c:23:81:69:d6:bc:d7:4d:7c:6e:ff: 89:14:9d:f2:c9:8a:db:e5:1f:bb:64:38:23:07:4c: 0b:91:93:da:50:b7:9c:1b:34:3c:eb:be:12:e2:46: e0:f5:13:7d:a9:d4:a9:42:82:67:0b:ed:9e:ff:d9: ec:87:a3:8e:e3:b4:f7:b5:6a:05:08:e5:cb:b4:12: f7:43:b3:95:28:ae:eb:e1:1b:b9:9e:47:6a:d6:dc: 4f:ef:db:f0:ef:cd:17:b7:5f:5f:e6:cc:67:e1:65: 01:b1:f6:2c:b1:48:29:d7:1e:9f:ff:fd:70:7d:1d: 4d:95:bb:c9:01:c1:0d:5c:70:33:c1:07:ad:3a:16: b6:56:66:7a:c8:bf:99:c1:b1:14:fe:65:a5:3d:8d: 98:b4:2e:c6:35:a9:03:bd:4a:72:cb:c1:6d:24:3d: 10:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2B:3F:69:FD:2A:14:ED:8F:78:88:F6:CB:3C:7A:0C:D7:64:7D:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/87fd7cb7-f9a7-3cdd-bfc8-cbf96d732a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 103.28.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e0:cd:aa:43:0b:90:a7:a3:d8:09:4f:91:a1:da:27:4c:3f: 96:2f:ff:f0:ed:36:36:59:04:99:9b:9c:72:b1:6a:81:0d:4c: b4:0f:79:a0:a2:c4:6e:dc:48:67:a8:6d:43:3b:04:06:44:4e: 91:99:4d:59:8d:a8:60:b4:d7:84:58:10:b1:38:16:c9:3f:2d: 7a:14:94:be:ff:a7:f6:4c:48:9e:3d:d2:e2:68:26:d2:2f:88: 91:11:d6:12:88:c8:44:4e:d3:8c:60:73:fb:bb:3f:d8:4d:f1: ee:be:18:82:7c:4f:ed:83:57:bb:29:fe:d8:11:cc:63:92:66: f0:73:19:cb:1f:82:14:bd:42:3c:3d:18:07:ae:2a:11:fe:13: 60:63:cc:f4:40:36:fa:a1:fb:eb:99:06:6f:87:93:a9:b0:b6: 41:70:3e:13:de:e7:9e:54:6f:15:0b:d5:33:ef:6d:2e:f7:95: ec:ba:e7:51:35:d2:a5:8f:2a:98:16:2c:f4:cc:f5:56:7d:fd: 2e:8f:72:f8:93:29:5e:0e:1e:1f:a7:ca:29:3b:ed:71:0a:74: 2e:b5:e1:b9:bb:01:67:97:02:d5:07:73:7f:9e:07:ee:f4:3d: 7a:84:4f:c4:83:16:39:8f:89:89:aa:15:0f:b8:56:e3:09:0d: 17:88:ef:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIUnzXpEkmwGcyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MzA0M2UyNDMtNzQxMC00NDkwLWI2YTctNGQxODc5YzI2ZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjp7TXjRTWqFyyQq4uW2y/7e6buWVzNOMypP rcEyFctgy19s84VEQhCUDfkaothEwrAUReV6hZkBm4/i0gZqteLkduaw0u7hcJox 483fUnplrhPAlhtO88SeZ6k/bCOBada81018bv+JFJ3yyYrb5R+7ZDgjB0wLkZPa ULecGzQ8674S4kbg9RN9qdSpQoJnC+2e/9nsh6OO47T3tWoFCOXLtBL3Q7OVKK7r 4Ru5nkdq1txP79vw780Xt19f5sxn4WUBsfYssUgp1x6f//1wfR1NlbvJAcENXHAz wQetOha2VmZ6yL+ZwbEU/mWlPY2YtC7GNakDvUpyy8FtJD0QVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAArP2n9KhTtj3iI9ss8egzXZH19MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvODdmZDdjYjctZjlhNy0z Y2RkLWJmYzgtY2JmOTZkNzMyYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxxGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3gzapDC5Cno9gJT5Gh2idMP5Yv//DtNjZZBJmbnHKxaoENTLQPeaCi xG7cSGeobUM7BAZETpGZTVmNqGC014RYELE4Fsk/LXoUlL7/p/ZMSJ490uJoJtIv iJER1hKIyERO04xgc/u7P9hN8e6+GIJ8T+2DV7sp/tgRzGOSZvBzGcsfghS9Qjw9 GAeuKhH+E2BjzPRANvqh++uZBm+Hk6mwtkFwPhPe555UbxUL1TPvbS73ley651E1 0qWPKpgWLPTM9VZ9/S6PcviTKV4OHh+nyik77XEKdC614bm7AWeXAtUHc3+eB+70 PXqET8SDFjmPiYmqFQ+4VuMJDReI7/Q= -----END CERTIFICATE-----Generated at Sat Apr 5 13:02:33 2025 by rpki-client