$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/df776e4d-7cf7-3f1b-813e-f6d2585d625e.roa File: df776e4d-7cf7-3f1b-813e-f6d2585d625e.roa (raw, json) Hash identifier: rnaTeV7s9fp7WHPplhGbEV1oBvyh8sHk5T83IM1kKI0= Subject key identifier: BD:D3:F0:D3:29:0B:3D:30:DB:DA:9E:71:92:17:B5:83:29:1B:E7:D2 Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F43285849A4BA4D78433906425704BE40 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/df776e4d-7cf7-3f1b-813e-f6d2585d625e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 14315 IP address blocks: 103.28.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:4d:78:43:39:06:42:57:04:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4ad1a3b8-69fd-43a5-a965-ebacca283d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fa:8f:f7:d2:02:71:70:78:9e:c1:a4:32:77: 96:86:68:f2:c2:fa:7a:f0:d5:0c:54:72:9e:18:3d: 91:ef:7d:2c:ee:76:e2:7c:93:b5:35:1e:d2:a9:93: 3b:b0:de:d0:d7:5b:09:14:b3:7a:a3:76:ea:a5:96: f2:d6:b5:bc:f4:96:1a:e4:d5:4d:19:65:49:0d:47: 0d:00:61:75:4d:12:cc:fb:c1:77:4b:da:29:d6:25: ce:2e:3c:46:84:68:4e:cd:30:0a:1e:ef:b0:d2:e0: 21:9a:11:25:a4:42:56:4d:b3:87:5a:b5:dd:08:85: 73:2e:a1:43:e7:44:73:31:cb:03:9c:2f:0a:3d:88: 88:11:a0:63:cf:9f:98:20:0b:29:f3:7d:09:ff:ff: f4:c8:7e:21:6c:61:30:ae:75:74:df:55:13:fb:45: 01:d7:0f:9e:22:5e:61:10:92:69:f3:b3:d8:94:97: c0:6f:d9:b9:a7:86:79:f6:00:d1:18:e9:41:7c:9d: 68:2e:1f:94:de:d3:26:5f:db:a2:83:42:ed:9b:ce: 12:86:ac:33:24:fa:5b:dc:ff:74:06:81:ab:06:ae: bf:0e:e7:4b:5c:3c:be:d8:35:11:20:64:0e:01:99: 0d:bb:d7:49:a6:7f:e1:f7:20:90:79:88:b0:10:97: 0b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D3:F0:D3:29:0B:3D:30:DB:DA:9E:71:92:17:B5:83:29:1B:E7:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/df776e4d-7cf7-3f1b-813e-f6d2585d625e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 103.28.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c6:1c:f1:08:fa:44:46:b3:0a:61:1a:25:9d:15:81:28:76: 8f:08:47:74:31:57:59:a3:a4:c3:54:a2:4a:f3:7f:84:ce:a0: 38:21:a8:00:a3:3e:0c:4d:0d:5a:ab:01:b0:d0:d3:5e:3c:68: 6b:90:65:39:b2:ee:be:9f:58:b2:af:2a:16:9b:a4:60:95:14: 9d:39:ae:ea:0b:7e:ed:ab:4d:31:97:7d:2b:05:a7:30:08:40: 3f:3f:46:37:a6:28:d0:b0:4a:ec:a6:13:cc:38:d1:b9:ee:40: 47:13:74:87:e7:6f:bc:ad:59:c1:0a:13:b8:76:47:b8:87:ac: e8:21:29:4c:ae:4f:9a:ac:51:a2:7b:31:6f:4e:61:f2:b9:5a: a5:da:ee:94:81:3b:57:21:b2:7a:2f:67:4a:d9:21:56:ad:d4: 83:83:c3:f7:f4:b5:6d:ab:25:f9:b0:a3:4c:4b:62:9e:aa:3e: 76:29:43:f4:56:5f:3d:24:8a:d6:ec:9b:48:f7:d4:e7:2c:a2: e8:02:45:b6:fa:d5:37:14:bb:54:31:32:85:60:c8:9e:4d:32: 1a:e7:60:68:ed:d1:45:5b:3e:5e:1f:ca:dd:30:50:d5:34:48: b3:61:65:42:48:35:b3:2e:cc:56:61:3d:eb:ce:bc:69:13:bd: e8:fa:eb:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuk14QzkGQlcEvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NGFkMWEzYjgtNjlmZC00M2E1LWE5NjUtZWJhY2NhMjgzZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfqP99ICcXB4nsGkMneWhmjywvp68NUMVHKe GD2R730s7nbifJO1NR7SqZM7sN7Q11sJFLN6o3bqpZby1rW89JYa5NVNGWVJDUcN AGF1TRLM+8F3S9op1iXOLjxGhGhOzTAKHu+w0uAhmhElpEJWTbOHWrXdCIVzLqFD 50RzMcsDnC8KPYiIEaBjz5+YIAsp830J///0yH4hbGEwrnV031UT+0UB1w+eIl5h EJJp87PYlJfAb9m5p4Z59gDRGOlBfJ1oLh+U3tMmX9uig0Ltm84ShqwzJPpb3P90 BoGrBq6/DudLXDy+2DURIGQOAZkNu9dJpn/h9yCQeYiwEJcL/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3T8NMpCz0w29qecZIXtYMpG+fSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvZGY3NzZlNGQtN2NmNy0z ZjFiLTgxM2UtZjZkMjU4NWQ2MjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjGHPEI+kRGswphGiWdFYEodo8IR3QxV1mjpMNUokrzf4TOoDghqACj PgxNDVqrAbDQ0148aGuQZTmy7r6fWLKvKhabpGCVFJ05ruoLfu2rTTGXfSsFpzAI QD8/RjemKNCwSuymE8w40bnuQEcTdIfnb7ytWcEKE7h2R7iHrOghKUyuT5qsUaJ7 MW9OYfK5WqXa7pSBO1chsnovZ0rZIVat1IODw/f0tW2rJfmwo0xLYp6qPnYpQ/RW Xz0kitbsm0j31OcsougCRbb61TcUu1QxMoVgyJ5NMhrnYGjt0UVbPl4fyt0wUNU0 SLNhZUJINbMuzFZhPevOvGkTvej664I= -----END CERTIFICATE-----Generated at Sat Apr 26 16:06:07 2025 by rpki-client