$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa File: 0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa (raw, json) Hash identifier: 8YJPi+B5MlmSjDjbP2YgeVSnsq4TYkbEa1NGTSzBymo= Subject key identifier: BD:CD:2E:B0:34:D1:74:60:98:FD:80:40:73:26:5F:70:C8:AA:5E:A6 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584AC8765152C0665272D4AA0290 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 11404 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:51:52:c0:66:52:72:d4:aa:02:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=8e694181-6bfa-4c7e-94ea-f6208462b9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9e:22:0a:f2:6b:ff:b0:f3:d9:1b:f5:22:ca: 00:c4:1c:e9:c6:65:6b:d3:18:20:b5:1d:5d:d0:2d: 3e:dc:f4:78:85:0b:58:06:dd:2b:26:2f:3e:92:fc: 7f:0a:dc:a8:08:ef:56:06:4d:94:1e:00:16:99:d7: 45:56:9c:84:44:1f:17:76:8a:25:ff:35:0b:7a:3e: 01:f8:47:42:7b:08:ed:0d:4b:17:7c:86:8d:78:74: 0f:f9:34:a6:26:49:73:18:dd:16:0c:b8:0a:be:48: 49:72:f1:7b:d7:6e:4e:13:11:7c:0b:a8:84:28:35: e9:84:2a:c4:91:6b:d2:21:26:05:ba:d1:09:44:42: 09:3e:91:84:9d:5e:79:59:00:3b:1f:ef:39:34:85: a5:09:af:ea:f5:e3:2b:02:60:0e:1d:ef:c5:2d:f6: e1:15:c0:f2:8d:28:cb:77:d4:1f:b1:99:12:fa:5b: 9c:bf:53:7e:ea:9b:06:5e:c6:9c:25:e3:70:6e:a9: 48:40:34:7b:83:cd:21:c9:9f:6c:9a:8b:c3:97:75: 14:22:20:a4:b8:0d:95:c4:ba:90:f3:19:27:ed:fd: 83:27:d4:6a:d9:bf:3a:b5:b1:4d:c4:68:b4:41:19: d0:3b:80:b9:44:3c:33:ce:74:57:ad:7d:cc:f2:d1: 44:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:CD:2E:B0:34:D1:74:60:98:FD:80:40:73:26:5F:70:C8:AA:5E:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:79:22:6f:82:20:54:83:c3:b0:1f:5b:2c:eb:ed:a5:fe:16: 49:b4:42:1b:ce:b3:72:ed:77:6f:6a:c8:cc:8a:af:6c:ac:f5: 96:c4:39:cb:90:55:f3:8b:f2:cb:28:35:88:0c:a5:e1:4c:bc: a2:54:8c:3b:9d:9c:0e:45:1c:46:92:4b:98:3f:e1:e0:6f:cd: 43:50:68:1c:ee:cb:c4:ca:c1:9b:19:d1:14:18:e4:e3:5c:54: 91:6b:6a:83:51:ce:b7:51:72:94:8e:3a:63:86:8a:00:62:a4: cf:d9:b4:06:ad:a7:62:1e:ed:97:9b:af:b7:bd:d5:c2:82:2e: ee:da:c7:3d:7c:46:a3:09:d3:86:42:eb:25:e8:c7:74:98:d1: ff:2b:19:76:12:36:cc:15:08:e0:bc:12:40:5f:be:fa:93:29: 5f:e6:c0:aa:03:ba:ff:73:05:9c:c5:29:12:6b:44:8b:7c:f4: 6f:13:97:4d:6a:77:30:ed:a0:13:62:59:1b:b4:67:ae:e7:5f: 40:6e:28:f3:b4:b5:9a:e2:25:64:94:36:90:94:3f:bc:fc:02: 35:9c:74:1e:1e:c2:8a:f8:81:c3:54:71:b6:68:67:a0:b7:ad: 09:db:34:44:4d:fd:8e:4c:ca:ed:29:f5:d3:a6:44:ac:ca:dc: 78:02:63:7a -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWErIdlFSwGZSctSqApAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk OGU2OTQxODEtNmJmYS00YzdlLTk0ZWEtZjYyMDg0NjJiOWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk54iCvJr/7Dz2Rv1IsoAxBzpxmVr0xggtR1d 0C0+3PR4hQtYBt0rJi8+kvx/CtyoCO9WBk2UHgAWmddFVpyERB8Xdool/zULej4B +EdCewjtDUsXfIaNeHQP+TSmJklzGN0WDLgKvkhJcvF7125OExF8C6iEKDXphCrE kWvSISYFutEJREIJPpGEnV55WQA7H+85NIWlCa/q9eMrAmAOHe/FLfbhFcDyjSjL d9QfsZkS+lucv1N+6psGXsacJeNwbqlIQDR7g80hyZ9smovDl3UUIiCkuA2VxLqQ 8xkn7f2DJ9Rq2b86tbFNxGi0QRnQO4C5RDwzznRXrX3M8tFEgQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFL3NLrA00XRgmP2AQHMmX3DIql6mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvMGI1NDE0ZmItZGMyYi0z ZGFhLWFmOWMtNjc3YWI4ZjEwYmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAyeSJvgiBUg8OwH1ss6+2l/hZJtEIbzrNy7XdvasjMiq9s rPWWxDnLkFXzi/LLKDWIDKXhTLyiVIw7nZwORRxGkkuYP+Hgb81DUGgc7svEysGb GdEUGOTjXFSRa2qDUc63UXKUjjpjhooAYqTP2bQGradiHu2Xm6+3vdXCgi7u2sc9 fEajCdOGQusl6Md0mNH/Kxl2EjbMFQjgvBJAX776kylf5sCqA7r/cwWcxSkSa0SL fPRvE5dNancw7aATYlkbtGeu519AbijztLWa4iVklDaQlD+8/AI1nHQeHsKK+IHD VHG2aGegt60J2zRETf2OTMrtKfXTpkSsytx4AmN6 -----END CERTIFICATE-----Generated at Sat Aug 23 16:51:56 2025 by rpki-client