$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/78e1a8de-e628-3875-8faa-140c188a17e8.roa File: 78e1a8de-e628-3875-8faa-140c188a17e8.roa (raw, json) Hash identifier: rjqia7dn3Wn0AuVsW7vrMLgsZauMU4zVrMe0YkX2sw4= Subject key identifier: 1A:29:D8:AA:A6:31:33:A6:24:70:C3:49:9C:EB:F5:90:3F:6B:8B:4B Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F43285849B14A0D48569D3DDCBE5D5700 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/78e1a8de-e628-3875-8faa-140c188a17e8.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 150452 IP address blocks: 103.28.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:0d:48:56:9d:3d:dc:be:5d:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=977f60e4-2bd1-4927-823c-fcd4c010bb66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:61:19:c2:dc:f4:66:a7:0d:bd:6e:d0:4e:96: 06:02:cb:c9:72:f0:15:1e:b2:d6:c5:db:eb:22:d6: 9e:6f:60:ef:b0:0b:06:8d:d1:90:fd:ec:be:50:2d: 5f:3b:6b:65:9a:6b:19:9c:c0:3d:dc:6d:ef:20:5f: 23:f4:71:68:06:c3:09:60:c7:f6:9b:66:d3:35:75: 85:2c:e4:ad:9a:cd:7c:ca:c7:93:7e:1c:d6:45:de: e9:38:95:2c:2d:35:45:ee:cb:87:3a:58:26:4b:9e: 9d:a4:dc:d0:5e:22:4b:46:0b:40:93:48:f5:c6:2f: c9:f5:cb:08:61:93:cc:20:4f:61:cf:12:36:69:68: 91:e8:6c:32:4b:bb:bf:26:3c:c6:a4:4a:cc:00:b3: d5:8b:a2:48:b6:11:67:0c:52:11:cd:c6:b2:07:85: c6:da:1e:04:c1:ce:e4:bf:5d:51:1e:3b:35:aa:85: 44:95:15:bc:87:9c:fe:bd:38:54:cb:82:f5:3d:fb: b8:a4:49:e9:40:3e:4e:df:e5:0e:83:c3:0a:1e:5f: 1b:e6:7b:90:8d:4b:56:77:fb:f5:c7:30:56:4c:28: a8:20:93:88:31:96:0e:80:50:37:28:8f:b4:ff:61: 9f:7d:18:96:d6:2c:97:3c:81:97:4f:53:75:2c:d9: 9b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:29:D8:AA:A6:31:33:A6:24:70:C3:49:9C:EB:F5:90:3F:6B:8B:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/78e1a8de-e628-3875-8faa-140c188a17e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 103.28.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:b1:52:2f:40:98:38:d2:b5:d1:ee:73:e5:93:56:33:9e:43: aa:01:3e:be:c1:a2:1e:7e:6c:bd:3e:94:0f:a8:46:13:4f:f7: 3d:f9:44:93:f4:08:d8:1b:10:54:75:a3:70:f7:e0:9f:b3:b4: e8:7d:07:ff:5f:c5:4b:32:4f:fa:a0:bd:e2:17:ae:3e:71:3f: 3c:33:8c:64:7c:df:91:fd:80:d6:b6:93:80:9b:50:5d:a7:2f: f4:e5:91:8d:6c:d1:d3:38:78:38:34:c6:14:9a:2e:3c:8c:c1: a4:6f:75:9b:df:09:43:f7:f2:1d:2e:a9:19:af:98:e1:10:21: ec:2a:74:30:ea:ec:af:42:96:94:d3:69:f8:58:5d:10:d9:62: bd:40:60:cc:cb:53:cd:c9:d4:7c:7f:b5:85:d9:1c:3a:8c:cc: b3:b6:6f:6e:57:1d:ef:dd:54:31:d6:f7:42:3e:46:28:22:13: dd:f7:27:d7:0d:c2:cd:b6:ce:58:02:93:a0:f9:26:8b:60:d9: 9d:24:3d:30:67:d4:b8:c4:7a:16:b0:09:9b:e5:e5:b7:3b:c4: a0:10:a7:17:b8:3a:6d:f3:b3:67:7a:9f:1a:ab:30:8b:fe:b8: 6a:b7:9d:1c:26:de:38:cb:74:28:2b:96:b5:e3:9d:41:a9:23: 96:8b:fa:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSg1IVp093L5dVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OTc3ZjYwZTQtMmJkMS00OTI3LTgyM2MtZmNkNGMwMTBiYjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32EZwtz0ZqcNvW7QTpYGAsvJcvAVHrLWxdvr Itaeb2DvsAsGjdGQ/ey+UC1fO2tlmmsZnMA93G3vIF8j9HFoBsMJYMf2m2bTNXWF LOStms18yseTfhzWRd7pOJUsLTVF7suHOlgmS56dpNzQXiJLRgtAk0j1xi/J9csI YZPMIE9hzxI2aWiR6GwyS7u/JjzGpErMALPVi6JIthFnDFIRzcayB4XG2h4Ewc7k v11RHjs1qoVElRW8h5z+vThUy4L1Pfu4pEnpQD5O3+UOg8MKHl8b5nuQjUtWd/v1 xzBWTCioIJOIMZYOgFA3KI+0/2GffRiW1iyXPIGXT1N1LNmb+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBop2KqmMTOmJHDDSZzr9ZA/a4tLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvNzhlMWE4ZGUtZTYyOC0z ODc1LThmYWEtMTQwYzE4OGExN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJexUi9AmDjStdHuc+WTVjOeQ6oBPr7Boh5+bL0+lA+oRhNP9z35RJP0 CNgbEFR1o3D34J+ztOh9B/9fxUsyT/qgveIXrj5xPzwzjGR835H9gNa2k4CbUF2n L/TlkY1s0dM4eDg0xhSaLjyMwaRvdZvfCUP38h0uqRmvmOEQIewqdDDq7K9ClpTT afhYXRDZYr1AYMzLU83J1Hx/tYXZHDqMzLO2b25XHe/dVDHW90I+RigiE933J9cN ws22zlgCk6D5Jotg2Z0kPTBn1LjEehawCZvl5bc7xKAQpxe4Om3zs2d6nxqrMIv+ uGq3nRwm3jjLdCgrlrXjnUGpI5aL+vM= -----END CERTIFICATE-----Generated at Wed May 14 04:43:14 2025 by rpki-client