$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/0205037e-c076-3912-81ad-0a7baa3802d8.roa File: 0205037e-c076-3912-81ad-0a7baa3802d8.roa (raw, json) Hash identifier: wSxEsxJNoaazebIp5yEL8jclt3gzkUSx1a7tYsZN420= Subject key identifier: 7D:C4:05:9C:E4:32:FC:4E:D2:F1:63:24:0C:36:51:76:36:22:F8:F9 Certificate issuer: /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Certificate serial: 010D0C9F4328584752F92AB09F75862C6C1D7760 Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/0205037e-c076-3912-81ad-0a7baa3802d8.roa Signing time: Tue 24 Sep 2024 20:38:16 +0000 ROA not before: Tue 24 Sep 2024 20:38:16 +0000 ROA not after: Mon 23 Dec 2024 21:38:16 +0000 asID: 38047 IP address blocks: 103.106.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:52:f9:2a:b0:9f:75:86:2c:6c:1d:77:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261 Validity Not Before: Sep 24 20:38:16 2024 GMT Not After : Dec 23 21:38:16 2024 GMT Subject: CN=ba8c3c8d-6d90-4b4e-bc03-12a4ab8ba3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:58:29:ab:93:c8:44:ef:0d:57:99:2f:2a:2e: c4:4d:16:98:2d:54:4c:e9:28:b9:0c:75:89:a1:a5: 86:f3:e4:bf:14:66:e7:a6:8b:31:9a:d3:d7:26:a9: f6:5c:f9:f6:06:36:73:f7:45:5c:a9:4d:9f:86:8d: 4a:8e:26:71:b5:5a:53:1b:27:82:52:bb:f0:7d:0f: 08:6a:f9:aa:0b:45:14:50:44:06:27:97:b8:fb:d5: eb:de:99:72:f1:b7:9b:48:99:72:21:ef:4c:74:41: 93:01:f0:a8:bc:1d:51:11:ab:d1:ab:3a:62:f1:17: 51:c6:5d:f8:6d:94:a0:e2:27:f5:60:89:4f:70:98: 5e:48:97:9a:db:51:47:1c:5e:77:18:41:3a:9c:c6: c7:dc:7b:1e:a0:86:0c:23:ae:6a:82:29:ce:c4:b8: 4b:c2:1a:de:f9:c8:fb:78:bf:86:d0:2a:df:f6:d3: 3c:3c:a7:de:ac:f7:d3:c3:99:c0:5f:d4:30:0b:c1: 33:28:35:c9:c3:3b:4d:b8:7f:ae:24:df:3e:c1:62: da:78:b5:9b:ec:55:38:bf:c0:8d:77:31:5a:75:e9: 47:28:35:46:4b:56:3b:51:c4:42:b3:c6:ee:d8:43: a2:b9:ec:70:13:d4:ac:86:75:26:6a:bb:eb:6d:37: 63:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C4:05:9C:E4:32:FC:4E:D2:F1:63:24:0C:36:51:76:36:22:F8:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/0205037e-c076-3912-81ad-0a7baa3802d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl X509v3 Authority Key Identifier: keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer sbgp-ipAddrBlock: critical IPv4: 103.106.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:4d:27:de:52:db:47:cf:a4:a0:ea:a9:01:ef:25:f0:43:2e: 24:f4:cd:d1:9a:96:27:a6:f7:1f:b7:81:f8:b8:ef:e2:c0:d6: fb:72:23:67:16:2d:21:50:2d:87:82:cb:9e:f0:3d:cb:c7:03: b0:32:22:51:11:c7:bb:70:86:8a:cd:9c:67:56:ed:57:c9:f6: da:d9:3e:e3:19:52:75:99:28:44:43:25:3c:0d:0d:a0:8c:ec: 03:fb:fa:93:8b:21:b9:d0:e7:33:b4:c7:00:3f:ec:ea:f4:17: 8f:1c:72:cb:86:62:0d:8f:d2:9c:07:69:63:04:63:01:80:c0: cc:04:a0:15:5a:bf:63:50:9e:32:58:95:c6:06:1a:cd:1f:7b: 0a:a2:31:23:3f:d3:87:a7:09:ad:78:db:70:a3:31:4d:15:6e: 99:32:6a:55:07:f0:52:03:3e:a5:6d:5e:15:f3:88:ee:2d:ad: 95:48:c0:40:24:80:81:9d:e2:71:68:30:c5:04:d7:5e:20:07: 2e:c6:05:c9:a0:91:21:be:14:d4:c4:43:91:98:6b:e1:ec:3d: 88:e4:e4:1a:83:fe:f4:d6:48:92:92:32:ea:8c:9d:3e:18:49: 21:d3:61:17:71:e2:f4:f7:0d:b8:e6:22:05:f7:b3:eb:1a:20: 0d:f9:0d:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdS+Sqwn3WGLGwdd2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5OGMxMjItYjk4ZS00Y2U0LTk1YjQtZmU1ZjI1ZmRk MjYxMB4XDTI0MDkyNDIwMzgxNloXDTI0MTIyMzIxMzgxNlowLzEtMCsGA1UEAxMk YmE4YzNjOGQtNmQ5MC00YjRlLWJjMDMtMTJhNGFiOGJhM2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lgpq5PIRO8NV5kvKi7ETRaYLVRM6Si5DHWJ oaWG8+S/FGbnposxmtPXJqn2XPn2BjZz90VcqU2fho1KjiZxtVpTGyeCUrvwfQ8I avmqC0UUUEQGJ5e4+9Xr3ply8bebSJlyIe9MdEGTAfCovB1REavRqzpi8RdRxl34 bZSg4if1YIlPcJheSJea21FHHF53GEE6nMbH3HseoIYMI65qginOxLhLwhre+cj7 eL+G0Crf9tM8PKferPfTw5nAX9QwC8EzKDXJwztNuH+uJN8+wWLaeLWb7FU4v8CN dzFadelHKDVGS1Y7UcRCs8bu2EOiuexwE9SshnUmarvrbTdjUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3EBZzkMvxO0vFjJAw2UXY2Ivj5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4 YzEyMi1iOThlLTRjZTQtOTViNC1mZTVmMjVmZGQyNjEvMDIwNTAzN2UtYzA3Ni0z OTEyLTgxYWQtMGE3YmFhMzgwMmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzg5OGMxMjItYjk4ZS00Y2U0LTk1 YjQtZmU1ZjI1ZmRkMjYxL2M4OThjMTIyLWI5OGUtNGNlNC05NWI0LWZlNWYyNWZk ZDI2MS5jcmwwHwYDVR0jBBgwFoAUv70ixlKUaZvmLUeXzBvNm78uNLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jODk4YzEyMi1iOThlLTRjZTQtOTViNC1mZTVm MjVmZGQyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2o0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABNJ95S20fPpKDqqQHvJfBDLiT0zdGaliem9x+3gfi47+LA1vtyI2cW LSFQLYeCy57wPcvHA7AyIlERx7twhorNnGdW7VfJ9trZPuMZUnWZKERDJTwNDaCM 7AP7+pOLIbnQ5zO0xwA/7Or0F48ccsuGYg2P0pwHaWMEYwGAwMwEoBVav2NQnjJY lcYGGs0fewqiMSM/04enCa1423CjMU0VbpkyalUH8FIDPqVtXhXziO4trZVIwEAk gIGd4nFoMMUE114gBy7GBcmgkSG+FNTEQ5GYa+HsPYjk5BqD/vTWSJKSMuqMnT4Y SSHTYRdx4vT3DbjmIgX3s+saIA35DR4= -----END CERTIFICATE-----Generated at Fri Nov 22 02:37:29 2024 by rpki-client on console-fra.rpki-client.org