$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/87fd7cb7-f9a7-3cdd-bfc8-cbf96d732a8b.roa File: 87fd7cb7-f9a7-3cdd-bfc8-cbf96d732a8b.roa (raw, json) Hash identifier: KjZ4WAHusQguWl7Wh3XGr3K6rdlek3bONG9iUzmh/ms= Subject key identifier: 1A:17:F8:E0:0E:99:A9:D6:67:EA:69:D5:77:FA:20:0D:D9:18:B9:F9 Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F43285849DF5A5BF0EA6AD57823EA7340 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/87fd7cb7-f9a7-3cdd-bfc8-cbf96d732a8b.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 213122 IP address blocks: 103.28.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:5b:f0:ea:6a:d5:78:23:ea:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=ba06c6da-3b12-4cb2-9762-c7b2e2e583a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:b6:05:ad:db:fd:0f:77:ea:fb:41:19:8b: e3:d2:95:7b:ea:6c:dc:3d:a0:0d:12:40:36:70:bd: 1e:7d:92:61:1c:52:32:73:4e:da:1c:d9:6a:14:73: 95:d0:f2:d2:04:10:55:4b:04:86:6c:0a:76:b9:2a: 55:89:08:d1:79:fd:a0:65:64:ab:ee:d9:47:6b:95: 2f:26:e5:ca:06:db:b7:da:cd:e6:0a:64:70:12:5a: ae:e0:5a:4e:d8:13:86:51:dd:da:92:9b:06:21:b6: b2:16:1f:8a:6f:3f:91:1a:f7:d0:3f:a1:e2:68:8d: dd:67:aa:17:0b:38:e8:c2:f3:ae:2f:76:dd:69:9d: 30:54:8c:28:27:c5:2a:c2:9b:18:91:11:33:30:82: be:28:83:74:4a:5c:cb:1f:c0:30:d7:fd:3a:7c:8f: 38:a1:f4:09:44:c8:ad:bb:2c:ba:5b:44:45:6c:e8: 0a:41:42:50:de:dd:94:c5:73:b0:74:09:e3:99:6b: bb:28:76:7e:76:ca:77:9c:c6:7f:eb:bf:04:69:0e: 3c:40:12:35:0f:58:e6:1e:16:e9:0e:bc:20:50:e6: 0a:15:bc:d6:b5:be:fe:67:fc:c3:8d:21:65:84:90: 62:09:be:c7:b4:81:d4:41:08:d9:6f:ca:e5:9f:63: 68:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:17:F8:E0:0E:99:A9:D6:67:EA:69:D5:77:FA:20:0D:D9:18:B9:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/87fd7cb7-f9a7-3cdd-bfc8-cbf96d732a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 103.28.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:8a:4d:9c:94:71:1c:96:73:51:c1:b3:06:17:d5:5d:aa:7d: 06:b2:05:7c:15:e7:7b:f2:21:93:b0:65:86:29:86:51:d4:8e: a3:dc:bf:a8:39:3a:89:a6:65:34:78:3c:18:72:d1:23:8c:ed: b5:8c:5a:1d:b9:0a:67:95:63:e2:eb:57:6c:0b:db:4a:7f:3a: f1:48:33:59:e0:14:e3:32:49:fc:86:ff:d0:aa:11:97:97:ee: 87:0a:0c:53:c7:e2:4a:40:7a:e4:2d:e8:96:99:1a:20:37:02: 84:d6:65:30:3d:c0:81:13:cb:39:6d:c5:68:40:b7:6a:5f:e8: 2a:09:8d:ce:1b:98:0d:59:75:d1:3e:71:37:cd:47:62:ed:a4: 81:da:16:8a:da:7e:d0:16:f5:79:74:37:dc:0a:8b:2b:aa:b3: 7e:e1:6a:80:08:b0:1b:ec:7b:5d:be:91:2a:07:1a:9e:5e:88: b8:d5:cb:ff:ab:ae:70:8d:85:82:4b:5d:be:5a:33:f3:e8:e3: e7:41:a9:5d:6a:54:a6:4b:b3:89:54:03:21:7d:1c:27:83:92: 26:dc:1d:01:de:da:9f:26:95:b1:8a:5f:f0:9f:77:ac:88:eb: ab:e3:2f:3f:94:b2:21:c4:5f:90:fb:cc:9a:de:09:77:53:77: cc:eb:a3:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWlvw6mrVeCPqc0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk YmEwNmM2ZGEtM2IxMi00Y2IyLTk3NjItYzdiMmUyZTU4M2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8y2Ba3b/Q936vtBGYvj0pV76mzcPaANEkA2 cL0efZJhHFIyc07aHNlqFHOV0PLSBBBVSwSGbAp2uSpViQjRef2gZWSr7tlHa5Uv JuXKBtu32s3mCmRwElqu4FpO2BOGUd3akpsGIbayFh+Kbz+RGvfQP6HiaI3dZ6oX CzjowvOuL3bdaZ0wVIwoJ8UqwpsYkREzMIK+KIN0SlzLH8Aw1/06fI84ofQJRMit uyy6W0RFbOgKQUJQ3t2UxXOwdAnjmWu7KHZ+dsp3nMZ/678EaQ48QBI1D1jmHhbp DrwgUOYKFbzWtb7+Z/zDjSFlhJBiCb7HtIHUQQjZb8rln2No0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoX+OAOmanWZ+pp1Xf6IA3ZGLn5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvODdmZDdjYjctZjlhNy0z Y2RkLWJmYzgtY2JmOTZkNzMyYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxxGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOKTZyUcRyWc1HBswYX1V2qfQayBXwV53vyIZOwZYYphlHUjqPcv6g5 OommZTR4PBhy0SOM7bWMWh25CmeVY+LrV2wL20p/OvFIM1ngFOMySfyG/9CqEZeX 7ocKDFPH4kpAeuQt6JaZGiA3AoTWZTA9wIETyzltxWhAt2pf6CoJjc4bmA1ZddE+ cTfNR2LtpIHaForaftAW9Xl0N9wKiyuqs37haoAIsBvse12+kSoHGp5eiLjVy/+r rnCNhYJLXb5aM/Po4+dBqV1qVKZLs4lUAyF9HCeDkibcHQHe2p8mlbGKX/Cfd6yI 66vjLz+UsiHEX5D7zJreCXdTd8zrowc= -----END CERTIFICATE-----Generated at Mon Jun 16 00:45:16 2025 by rpki-client