$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/8bbc9270-30d4-36fe-9e02-85fa14d37aba.roa File: 8bbc9270-30d4-36fe-9e02-85fa14d37aba.roa (raw, json) Hash identifier: hvPTkMy/IXKrHe1bDuApQdH7LJP5by4WhnzTlEYA2wg= Subject key identifier: 72:21:BD:59:C9:F3:E0:00:9C:A5:AB:CF:8A:9B:19:97:4C:76:3B:96 Certificate issuer: /CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad Certificate serial: 010D0C9F4328584A23C00729D48E9AF480E70D60 Authority key identifier: 1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/8bbc9270-30d4-36fe-9e02-85fa14d37aba.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 394298 IP address blocks: 203.89.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:07:29:d4:8e:9a:f4:80:e7:0d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45c6211-1717-4a75-a82a-1d7a7abac2ad Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=fe342b94-451e-4ef9-8897-a2c60cb210ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:56:d6:51:03:ea:53:c1:d7:d4:df:54:3b:6a: d7:82:e9:b8:97:c9:49:61:39:76:22:95:af:c3:8d: 9a:df:f9:9f:a1:7c:0e:20:07:ed:7a:f6:17:ba:a2: a7:89:7c:3b:0d:51:66:e6:88:61:cc:77:34:98:a7: 15:c4:20:3d:56:e4:54:16:9e:00:9d:c6:bd:bd:55: d9:e3:88:ec:a7:06:34:0d:06:3e:96:ce:c3:62:e2: d1:bc:50:ed:99:47:43:48:10:ef:a1:39:e1:20:52: 5d:68:cf:94:f2:95:b3:61:2b:ec:0c:e9:a2:8c:a9: de:eb:dd:5b:5d:ec:57:d4:89:b1:d7:85:9e:d2:88: 7e:63:a1:ad:dc:1e:80:d0:38:40:0b:e4:f0:3e:84: ad:be:74:68:a2:c8:b7:e1:74:26:18:1d:d1:9a:6a: d7:2c:12:64:a1:33:ef:ba:77:dc:e2:93:73:47:71: 52:5a:4b:54:32:b5:8c:5d:76:5b:54:a6:30:18:cc: 2b:e7:2c:27:d6:af:68:25:18:91:67:60:c5:c2:2b: 2e:fb:d8:fc:8d:f2:f0:07:64:41:49:6c:c3:0b:ef: 5a:ab:68:60:42:6b:bf:3e:a9:ed:58:42:8d:93:bf: d6:93:12:90:f9:1c:dd:2d:cd:60:25:29:c3:5a:44: 0b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:21:BD:59:C9:F3:E0:00:9C:A5:AB:CF:8A:9B:19:97:4C:76:3B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/8bbc9270-30d4-36fe-9e02-85fa14d37aba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad/d45c6211-1717-4a75-a82a-1d7a7abac2ad.crl X509v3 Authority Key Identifier: keyid:1D:1D:FD:B4:09:17:3A:BD:FE:2F:A0:23:2B:4C:2A:A3:7A:FA:01:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45c6211-1717-4a75-a82a-1d7a7abac2ad.cer sbgp-ipAddrBlock: critical IPv4: 203.89.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b1:7c:3f:7b:d6:c1:81:f4:0e:28:79:04:b9:b6:ec:53:c4: 58:ec:85:62:26:e0:16:c7:d8:d6:84:b3:8b:06:bc:49:2e:1a: 80:d7:aa:3d:99:b9:30:92:27:53:f3:49:67:7f:ca:c1:3d:1e: 97:0a:b1:e4:3d:11:bf:f2:45:a0:16:4e:fe:37:3a:e8:9e:47: 6a:5a:c1:ac:30:1c:cf:a5:26:05:17:78:be:e0:08:07:0e:65: b4:25:6b:54:68:63:14:43:1e:0f:b6:cd:73:6c:93:ba:79:69: 81:09:17:52:56:39:17:cf:a0:86:95:50:b4:cc:5a:ea:4d:81: 9a:30:88:99:28:31:67:1d:bd:30:86:a7:4b:cf:96:4e:e3:06: ab:b8:10:a7:69:73:52:5d:b2:00:c8:a2:b2:e0:96:31:21:a1: 30:16:85:0c:47:a2:2b:ac:ce:1b:97:06:0d:25:34:24:09:ac: 52:a0:e5:19:c4:c4:d9:c7:04:b4:4d:eb:66:e0:05:28:57:66: 2e:55:4d:f0:f7:ca:eb:f7:36:3c:31:3a:00:26:0a:6d:d4:a5: 42:27:70:02:e8:48:76:73:bb:a1:92:8e:bd:73:54:bf:da:86: d2:41:05:e3:e1:0c:99:79:63:4d:73:04:b3:81:86:92:2b:0a: c4:fe:ff:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwAcp1I6a9IDnDWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1YzYyMTEtMTcxNy00YTc1LWE4MmEtMWQ3YTdhYmFj MmFkMB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk ZmUzNDJiOTQtNDUxZS00ZWY5LTg4OTctYTJjNjBjYjIxMGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVbWUQPqU8HX1N9UO2rXgum4l8lJYTl2IpWv w42a3/mfoXwOIAftevYXuqKniXw7DVFm5ohhzHc0mKcVxCA9VuRUFp4Anca9vVXZ 44jspwY0DQY+ls7DYuLRvFDtmUdDSBDvoTnhIFJdaM+U8pWzYSvsDOmijKne691b XexX1Imx14We0oh+Y6Gt3B6A0DhAC+TwPoStvnRoosi34XQmGB3RmmrXLBJkoTPv unfc4pNzR3FSWktUMrWMXXZbVKYwGMwr5ywn1q9oJRiRZ2DFwisu+9j8jfLwB2RB SWzDC+9aq2hgQmu/PqntWEKNk7/WkxKQ+RzdLc1gJSnDWkQLmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIhvVnJ8+AAnKWrz4qbGZdMdjuWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDVj NjIxMS0xNzE3LTRhNzUtYTgyYS0xZDdhN2FiYWMyYWQvOGJiYzkyNzAtMzBkNC0z NmZlLTllMDItODVmYTE0ZDM3YWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1YzYyMTEtMTcxNy00YTc1LWE4 MmEtMWQ3YTdhYmFjMmFkL2Q0NWM2MjExLTE3MTctNGE3NS1hODJhLTFkN2E3YWJh YzJhZC5jcmwwHwYDVR0jBBgwFoAUHR39tAkXOr3+L6AjK0wqo3r6AdkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDVjNjIxMS0xNzE3LTRhNzUtYTgyYS0xZDdh N2FiYWMyYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy1lrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaxfD971sGB9A4oeQS5tuxTxFjshWIm4BbH2NaEs4sGvEkuGoDXqj2Z uTCSJ1PzSWd/ysE9HpcKseQ9Eb/yRaAWTv43OuieR2pawawwHM+lJgUXeL7gCAcO ZbQla1RoYxRDHg+2zXNsk7p5aYEJF1JWORfPoIaVULTMWupNgZowiJkoMWcdvTCG p0vPlk7jBqu4EKdpc1JdsgDIorLgljEhoTAWhQxHoiuszhuXBg0lNCQJrFKg5RnE xNnHBLRN62bgBShXZi5VTfD3yuv3NjwxOgAmCm3UpUIncALoSHZzu6GSjr1zVL/a htJBBePhDJl5Y01zBLOBhpIrCsT+/30= -----END CERTIFICATE-----Generated at Sun Jun 15 23:31:58 2025 by rpki-client