$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/87fd7cb7-f9a7-3cdd-bfc8-cbf96d732a8b.roa File: 87fd7cb7-f9a7-3cdd-bfc8-cbf96d732a8b.roa (raw, json) Hash identifier: ZteIrKqAOqurZhZ1uX/DCuQvJmXsEoW2wXD4AjkxyWg= Subject key identifier: F9:BD:D7:94:A9:1F:D4:67:C3:E8:24:82:38:D4:AC:20:4E:9F:D3:82 Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F432858473FF08BFBFA941E8DFE160100 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/87fd7cb7-f9a7-3cdd-bfc8-cbf96d732a8b.roa Signing time: Wed 18 Sep 2024 01:00:30 +0000 ROA not before: Wed 18 Sep 2024 01:00:30 +0000 ROA not after: Tue 17 Dec 2024 02:00:30 +0000 asID: 213122 IP address blocks: 103.28.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3f:f0:8b:fb:fa:94:1e:8d:fe:16:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Sep 18 01:00:30 2024 GMT Not After : Dec 17 02:00:30 2024 GMT Subject: CN=5635ed4f-37f5-4ea9-a289-2713fa60747d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7c:09:e9:42:47:b0:66:5e:34:c1:a6:13:b0: cd:20:48:e8:26:31:37:51:b3:de:29:aa:f5:2f:56: 0f:0f:c0:e6:21:ca:69:57:7b:80:4d:6b:91:1f:51: f0:e5:f2:a5:22:e6:34:70:10:60:2e:cb:27:7c:07: 2c:47:fd:c6:3a:41:4f:fe:78:3b:6b:aa:51:b8:35: c3:6a:ed:ca:bf:f5:28:af:5b:86:b6:79:ad:ce:73: dd:22:88:87:fa:5a:9a:d3:4b:17:b9:d4:d6:db:57: ee:65:a5:ea:36:05:33:00:4f:2d:d4:00:99:a2:83: 68:df:dc:ea:9e:94:83:3e:74:10:59:1c:e8:7a:7c: 47:cf:28:7e:b3:05:9b:68:69:49:d8:e5:9e:41:6a: 1b:6f:de:3c:75:b8:14:9f:49:3f:d8:ae:3b:44:58: f4:9c:70:ff:07:81:c9:58:a1:68:5b:a3:4f:80:ad: bc:9f:b1:19:d5:33:3d:57:3c:9f:ac:6d:0a:17:20: 48:d6:a4:8c:25:63:0d:d8:29:1a:05:2b:12:04:f6: f7:78:da:cd:40:56:0a:4c:a0:68:87:a0:37:bc:45: d3:19:69:c3:2c:87:bf:8b:9a:c5:8d:2b:94:bc:8b: be:6c:ac:f0:a7:89:98:bc:9c:d4:40:83:5e:d8:5c: 52:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BD:D7:94:A9:1F:D4:67:C3:E8:24:82:38:D4:AC:20:4E:9F:D3:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/87fd7cb7-f9a7-3cdd-bfc8-cbf96d732a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 103.28.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:5e:af:a7:40:73:26:95:1f:83:bb:88:ee:98:84:53:dc:4e: 76:6c:ce:e6:b1:9f:36:21:81:02:17:b9:9f:60:f2:9d:72:79: 3a:51:45:cc:a7:2d:3c:d7:68:4a:36:16:a2:09:23:55:67:6c: 84:01:35:0a:1f:d8:05:b2:b7:7d:b5:a1:a4:7e:3c:be:fa:2e: da:2c:21:5c:2f:f0:66:bb:aa:fc:8b:7b:9c:7e:91:33:0b:d2: ae:54:b4:8a:cc:4d:31:de:2f:13:a9:bc:44:a1:69:56:47:4d: 48:ba:e0:3a:64:ed:b7:55:0e:19:3f:26:06:a0:2c:88:c4:48: e7:07:11:06:13:23:e9:82:26:ce:51:42:75:6e:95:b9:b9:c2: 5b:92:1d:1d:cc:81:8a:20:e7:d1:de:17:3c:cd:60:e0:da:c2: 76:30:ed:10:78:83:62:5a:fa:a7:28:19:2d:b9:91:7f:8f:16: 85:da:35:0e:7d:1c:62:4c:fb:26:91:17:28:ce:39:b7:41:3f: 44:fe:a0:ad:88:33:d6:f1:55:a2:4e:6a:c4:9a:61:af:61:21: 51:1a:bb:2e:8a:95:0c:34:ab:49:f9:25:f6:74:bc:f8:20:b2: 82:a7:bd:ac:6f:39:c5:f9:d4:42:a3:6c:86:c9:79:a6:35:59: 7c:9c:5c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc/8Iv7+pQejf4WAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI0MDkxODAxMDAzMFoXDTI0MTIxNzAyMDAzMFowLzEtMCsGA1UEAxMk NTYzNWVkNGYtMzdmNS00ZWE5LWEyODktMjcxM2ZhNjA3NDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXwJ6UJHsGZeNMGmE7DNIEjoJjE3UbPeKar1 L1YPD8DmIcppV3uATWuRH1Hw5fKlIuY0cBBgLssnfAcsR/3GOkFP/ng7a6pRuDXD au3Kv/Uor1uGtnmtznPdIoiH+lqa00sXudTW21fuZaXqNgUzAE8t1ACZooNo39zq npSDPnQQWRzoenxHzyh+swWbaGlJ2OWeQWobb948dbgUn0k/2K47RFj0nHD/B4HJ WKFoW6NPgK28n7EZ1TM9VzyfrG0KFyBI1qSMJWMN2CkaBSsSBPb3eNrNQFYKTKBo h6A3vEXTGWnDLIe/i5rFjSuUvIu+bKzwp4mYvJzUQINe2FxSDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPm915SpH9Rnw+gkgjjUrCBOn9OCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvODdmZDdjYjctZjlhNy0z Y2RkLWJmYzgtY2JmOTZkNzMyYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxxGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVer6dAcyaVH4O7iO6YhFPcTnZszuaxnzYhgQIXuZ9g8p1yeTpRRcyn LTzXaEo2FqIJI1VnbIQBNQof2AWyt321oaR+PL76LtosIVwv8Ga7qvyLe5x+kTML 0q5UtIrMTTHeLxOpvEShaVZHTUi64Dpk7bdVDhk/JgagLIjESOcHEQYTI+mCJs5R QnVulbm5wluSHR3MgYog59HeFzzNYODawnYw7RB4g2Ja+qcoGS25kX+PFoXaNQ59 HGJM+yaRFyjOObdBP0T+oK2IM9bxVaJOasSaYa9hIVEauy6KlQw0q0n5JfZ0vPgg soKnvaxvOcX51EKjbIbJeaY1WXycXLE= -----END CERTIFICATE-----Generated at Fri Nov 22 02:12:49 2024 by rpki-client on console-fra.rpki-client.org