$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/0205037e-c076-3912-81ad-0a7baa3802d8.roa File: 0205037e-c076-3912-81ad-0a7baa3802d8.roa (raw, json) Hash identifier: rYMfC5t47A+8NsxiG3U+zjP42F0cR3lvTwohE+PqiGU= Subject key identifier: 87:F9:FE:E9:EE:E5:9D:AA:67:7C:AD:85:E5:04:1B:54:04:21:A0:93 Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Certificate serial: 010D0C9F432858491246CC85BBF59E0DBEBC4140 Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/0205037e-c076-3912-81ad-0a7baa3802d8.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 38047 IP address blocks: 103.106.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:cc:85:bb:f5:9e:0d:be:bc:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=e54e5074-0dd4-4a1b-80da-d17f6bd6ef8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0a:21:e0:a1:83:14:83:8a:ef:69:79:46:f7: 4b:1d:78:94:b2:bc:fe:eb:7a:1f:ed:47:05:16:2b: 10:8a:d5:d2:89:cd:33:f5:a0:81:75:4c:14:ea:34: 96:fb:4d:48:9b:2a:35:53:7d:b2:f8:46:00:c0:ae: 7e:25:6f:e1:86:5b:35:64:2e:26:ca:7b:b4:5b:91: a3:39:b3:4d:6b:24:a0:34:6d:ae:a7:b6:00:bd:8c: 51:14:cc:29:97:55:6b:fb:46:ad:75:0f:d4:84:7f: f1:bd:a1:25:4c:ed:9a:88:60:0e:37:bc:22:57:5b: c6:32:05:fa:dd:0d:42:09:19:b8:e2:9c:6e:e4:72: f8:3c:97:f6:f4:23:81:1e:7d:7b:84:91:f4:d5:f0: 82:a7:9f:23:33:aa:56:ca:9b:dc:32:81:59:c0:d6: 6b:43:3c:9e:54:75:7b:4f:91:3a:89:2b:09:f7:e4: c3:a7:76:2f:e7:a4:0b:e8:84:b6:a1:85:5b:4e:c2: e5:12:7f:15:9e:09:32:7a:db:39:b1:69:cd:6e:e1: 8b:1e:83:f4:8e:80:56:8c:14:25:92:90:24:3f:d1: 56:50:97:70:dc:40:73:27:0b:b2:11:bf:bc:68:32: 1b:2a:74:d9:a2:51:ea:04:de:71:f4:f1:09:42:c2: 32:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F9:FE:E9:EE:E5:9D:AA:67:7C:AD:85:E5:04:1B:54:04:21:A0:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/0205037e-c076-3912-81ad-0a7baa3802d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl X509v3 Authority Key Identifier: keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer sbgp-ipAddrBlock: critical IPv4: 103.106.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:fc:79:ee:06:86:f9:37:70:ae:10:12:aa:17:99:e2:36:4e: 02:48:83:69:f0:29:3b:e9:2c:24:2e:18:db:cd:5f:e1:04:03: 49:c0:0e:11:f5:15:21:fb:c2:9f:78:f4:db:e3:e3:f6:08:12: bc:f0:41:68:be:8d:da:e2:c5:7f:27:2a:31:8c:2f:b1:7b:8e: 57:85:1e:98:ee:86:c0:3c:0d:78:0a:f6:58:26:22:09:50:10: 28:2e:05:7a:3e:21:f2:60:1c:cf:ad:46:08:d8:22:f1:8e:1b: 50:2a:a4:f1:f9:73:b9:77:e8:b9:35:ce:d2:29:ea:df:42:58: 37:b6:7e:45:a3:78:93:de:b1:82:1c:0e:f9:2f:89:46:c5:f5: ce:6f:74:96:48:be:e9:b6:60:91:55:1b:55:c4:bb:ee:cd:39: 95:f9:05:f5:43:59:ee:3e:e4:98:a7:c6:eb:a6:33:85:c8:c1: 5e:68:68:22:9a:a7:bd:be:ab:29:20:e2:05:8c:26:7b:03:e3: 8b:df:f7:61:4d:c6:10:16:e0:76:14:81:89:a2:20:71:d5:16: bb:ab:07:e5:ed:4c:63:bb:46:f2:51:06:da:b7:c4:20:1c:e0: fc:12:be:99:1e:c2:b3:4d:fe:db:4c:f4:8f:45:87:82:15:e7: 13:28:5f:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsyFu/WeDb68QUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk MjYxMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZTU0ZTUwNzQtMGRkNC00YTFiLTgwZGEtZDE3ZjZiZDZlZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwoh4KGDFIOK72l5RvdLHXiUsrz+63of7UcF FisQitXSic0z9aCBdUwU6jSW+01Imyo1U32y+EYAwK5+JW/hhls1ZC4mynu0W5Gj ObNNaySgNG2up7YAvYxRFMwpl1Vr+0atdQ/UhH/xvaElTO2aiGAON7wiV1vGMgX6 3Q1CCRm44pxu5HL4PJf29COBHn17hJH01fCCp58jM6pWypvcMoFZwNZrQzyeVHV7 T5E6iSsJ9+TDp3Yv56QL6IS2oYVbTsLlEn8Vngkyets5sWnNbuGLHoP0joBWjBQl kpAkP9FWUJdw3EBzJwuyEb+8aDIbKnTZolHqBN5x9PEJQsIygwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIf5/unu5Z2qZ3ytheUEG1QEIaCTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4 YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvMDIwNTAzN2UtYzA3Ni0z OTEyLTgxYWQtMGE3YmFhMzgwMmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1 YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm MjVmZGQyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2o0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb8ee4Ghvk3cK4QEqoXmeI2TgJIg2nwKTvpLCQuGNvNX+EEA0nADhH1 FSH7wp949Nvj4/YIErzwQWi+jdrixX8nKjGML7F7jleFHpjuhsA8DXgK9lgmIglQ ECguBXo+IfJgHM+tRgjYIvGOG1AqpPH5c7l36Lk1ztIp6t9CWDe2fkWjeJPesYIc DvkviUbF9c5vdJZIvum2YJFVG1XEu+7NOZX5BfVDWe4+5JinxuumM4XIwV5oaCKa p72+qykg4gWMJnsD44vf92FNxhAW4HYUgYmiIHHVFrurB+XtTGO7RvJRBtq3xCAc 4PwSvpkewrNN/ttM9I9Fh4IV5xMoX9k= -----END CERTIFICATE-----Generated at Wed Apr 9 23:16:35 2025 by rpki-client