$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/df776e4d-7cf7-3f1b-813e-f6d2585d625e.roa File: df776e4d-7cf7-3f1b-813e-f6d2585d625e.roa (raw, json) Hash identifier: +lUf7gwMM4gbyblJiBz0BRAJmQG31C+1kU+PEhPlbqA= Subject key identifier: C4:14:93:23:0C:1B:FE:36:EA:AC:5B:09:7D:25:BE:24:97:88:18:9C Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F43285848C580F5513FEDD48DEBB42E80 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/df776e4d-7cf7-3f1b-813e-f6d2585d625e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 14315 IP address blocks: 103.28.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:f5:51:3f:ed:d4:8d:eb:b4:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=83eb53fc-4454-4e96-bf5f-988db750e839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:e3:1b:d1:09:b1:90:72:eb:22:e3:aa:1e: 2c:51:25:52:66:55:d5:8a:15:bb:bf:e6:d4:f6:fe: a6:28:eb:5b:64:67:24:45:bb:f8:e8:3e:61:b4:51: ba:a2:89:dd:eb:17:7e:cd:18:f1:f2:2c:59:0d:39: 68:48:2e:f1:63:32:b5:bd:7a:6f:87:80:d7:77:86: 6b:f0:5e:72:19:a3:f0:15:03:42:94:23:28:ef:f8: 1c:7e:a2:ec:a4:ca:07:8d:6d:3b:0a:3c:2a:ed:e5: d7:35:80:f8:90:5b:1a:9c:ac:e0:0e:61:fb:4f:ae: d8:ae:9d:43:99:0b:e8:8a:98:d6:c6:85:9a:a1:1c: 04:84:ef:36:e8:76:d7:90:20:09:0c:f5:f5:25:3c: 36:9c:c6:2f:e6:97:ee:db:0d:a5:d7:d6:37:71:d2: fa:e5:b6:9d:9e:39:40:e4:93:7e:7a:5f:fb:d0:d2: b5:da:2d:00:0a:81:db:99:bb:68:7e:3a:35:52:e2: 7e:00:b4:2d:97:44:a0:d4:1c:a2:66:ec:cd:b8:e4: 9a:27:ce:7b:f3:dc:13:ea:05:99:71:77:fb:0a:b6: e7:2d:73:e0:5c:0f:91:54:6b:58:2e:1f:9b:02:21: 7e:05:5b:7d:85:8d:a2:fd:8f:7d:1b:82:96:06:b9: 75:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:14:93:23:0C:1B:FE:36:EA:AC:5B:09:7D:25:BE:24:97:88:18:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/df776e4d-7cf7-3f1b-813e-f6d2585d625e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 103.28.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:98:ae:c4:eb:a5:cd:63:db:ac:c4:73:50:64:88:c9:01:c0: 95:46:23:0d:b3:93:ad:dd:87:ee:bd:c8:f3:b1:fe:02:98:93: 0e:00:a8:1c:0f:6f:e6:5a:50:a4:44:ab:66:10:b8:5e:b6:a0: 3c:0d:a4:4e:20:82:22:79:b4:48:67:38:53:c6:13:f0:67:f1: ec:dd:9c:5d:6a:fd:7c:50:86:be:06:d4:13:3c:c5:8c:cb:d9: 6d:a7:d1:f2:49:f6:4a:eb:bf:52:35:f8:5e:4e:c4:a0:a9:5c: db:c3:f7:52:d0:af:8f:93:03:4b:ca:d2:10:35:03:1a:54:11: 53:87:cf:7e:5f:b9:c7:91:80:21:8a:d3:a1:98:5e:ad:83:2d: 47:79:23:81:c0:84:39:bc:38:8a:25:ee:ba:d4:fd:8a:09:55: 16:ff:f9:2e:9c:8b:ea:6e:74:b6:69:6a:39:43:14:de:6d:bf: ee:96:8c:dc:2a:be:ca:8a:24:09:ef:3b:85:81:cb:4a:35:7f: d1:d1:a7:12:ef:50:01:83:a9:82:42:0a:c1:1d:e6:ee:ec:fb: 14:27:a2:ff:b5:ae:1c:d7:b9:ab:8e:4d:da:b3:2e:0f:cc:0c: 60:56:86:ea:2c:7a:c7:3c:a4:62:44:a5:28:e2:79:88:3d:c7: 7a:c2:d7:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgPVRP+3Ujeu0LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODNlYjUzZmMtNDQ1NC00ZTk2LWJmNWYtOTg4ZGI3NTBlODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuePjG9EJsZBy6yLjqh4sUSVSZlXVihW7v+bU 9v6mKOtbZGckRbv46D5htFG6oond6xd+zRjx8ixZDTloSC7xYzK1vXpvh4DXd4Zr 8F5yGaPwFQNClCMo7/gcfqLspMoHjW07Cjwq7eXXNYD4kFsanKzgDmH7T67Yrp1D mQvoipjWxoWaoRwEhO826HbXkCAJDPX1JTw2nMYv5pfu2w2l19Y3cdL65badnjlA 5JN+el/70NK12i0ACoHbmbtofjo1UuJ+ALQtl0Sg1ByiZuzNuOSaJ85789wT6gWZ cXf7CrbnLXPgXA+RVGtYLh+bAiF+BVt9hY2i/Y99G4KWBrl1iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQUkyMMG/426qxbCX0lviSXiBicMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvZGY3NzZlNGQtN2NmNy0z ZjFiLTgxM2UtZjZkMjU4NWQ2MjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACYrsTrpc1j26zEc1BkiMkBwJVGIw2zk63dh+69yPOx/gKYkw4AqBwP b+ZaUKREq2YQuF62oDwNpE4ggiJ5tEhnOFPGE/Bn8ezdnF1q/XxQhr4G1BM8xYzL 2W2n0fJJ9krrv1I1+F5OxKCpXNvD91LQr4+TA0vK0hA1AxpUEVOHz35fuceRgCGK 06GYXq2DLUd5I4HAhDm8OIol7rrU/YoJVRb/+S6ci+pudLZpajlDFN5tv+6WjNwq vsqKJAnvO4WBy0o1f9HRpxLvUAGDqYJCCsEd5u7s+xQnov+1rhzXuauOTdqzLg/M DGBWhuosesc8pGJEpSjieYg9x3rC19s= -----END CERTIFICATE-----Generated at Sun Apr 6 07:17:53 2025 by rpki-client