$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/1cc0d284-01c5-349a-bb5e-bfbfdae46623.roa File: 1cc0d284-01c5-349a-bb5e-bfbfdae46623.roa (raw, json) Hash identifier: mcrX8+vngkoR8a0IQnSl+a5gNIPYL4mA/R7oz53ykPM= Subject key identifier: E7:99:A5:F8:7B:27:47:2A:AB:70:CE:67:33:C1:83:F6:9D:4B:16:72 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584B5DD207F535FE441B87FD5600 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/1cc0d284-01c5-349a-bb5e-bfbfdae46623.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 9304 IP address blocks: 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:07:f5:35:fe:44:1b:87:fd:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=d4824288-7948-4357-824a-e703285e26b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:36:ad:5b:8c:79:9c:86:f4:ff:97:2a:75:22: 3b:e2:36:81:4e:a0:eb:da:b6:95:50:e9:3c:e5:64: 52:ab:96:35:32:d5:6a:c5:7f:98:d0:fb:95:46:6f: b4:f1:59:1f:9b:5f:6c:06:4f:76:65:63:24:f5:2e: ac:e0:07:9d:1e:bc:00:ef:01:50:49:4e:40:9a:9c: e0:85:76:f4:84:c6:f7:85:62:df:96:01:ab:58:5a: d4:a2:46:54:82:24:0d:47:54:7f:7c:e5:f6:ad:33: 0b:b4:ad:98:0d:9e:a7:72:b7:06:c3:5a:bb:10:0d: b2:34:17:87:99:6d:0f:b3:ad:6c:b7:f2:a0:69:e5: 5f:c0:67:53:b5:50:ee:b2:3c:d4:b8:1a:6f:74:93: 19:08:bd:30:b6:f1:43:72:47:ab:ae:f6:17:35:24: 71:44:81:92:72:48:cb:56:8b:55:70:4f:4d:4d:e5: bb:94:9c:8f:db:e6:85:10:8f:c2:c0:e5:ef:bb:fa: 14:d6:53:2a:e5:b4:5d:e9:98:a6:3b:e5:0f:c5:ef: 9e:06:3e:5a:17:e0:d4:52:93:9d:30:ef:af:86:5d: 40:3e:57:51:87:c2:5a:c0:3b:47:df:5f:9a:78:78: d9:44:87:d5:eb:40:4c:8d:98:56:0d:ed:6f:0b:cc: 31:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:99:A5:F8:7B:27:47:2A:AB:70:CE:67:33:C1:83:F6:9D:4B:16:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/1cc0d284-01c5-349a-bb5e-bfbfdae46623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:46:a7:92:b5:21:10:19:b0:18:ce:1f:25:fd:6d:4b:59:f7: 9f:5e:b8:be:55:77:ef:7e:25:a4:17:9c:47:b4:33:da:1e:5a: 39:9c:3a:28:af:0b:bf:84:e1:01:1c:0d:06:5c:d6:76:6c:f3: 72:4c:70:dc:c2:e1:1b:cd:1b:56:62:4e:7f:a0:cc:b9:c7:a5: 44:c6:9c:16:4c:2c:0b:91:dd:58:25:70:3c:f4:a7:3a:b7:9c: 90:a7:9d:81:1f:ab:2c:93:e8:ba:16:f0:9f:be:dc:03:2b:7c: f3:fd:4e:81:15:82:79:5e:44:99:fe:9d:0b:be:2a:5c:8b:ff: d1:cd:2b:1f:82:51:67:96:93:9d:8c:0f:e6:7d:f7:ab:1d:34: 25:cf:7f:dd:8f:a8:66:26:23:76:11:8f:93:52:e0:b0:9d:34: 41:75:0d:e6:8e:2a:03:fc:96:5d:ee:3d:1d:a4:9e:82:95:0e: 7a:3a:28:5f:e3:39:be:ea:54:33:2b:44:f6:c9:7b:8c:54:5a: 46:c1:40:dd:7d:f9:0f:98:14:09:95:10:15:f9:f5:09:32:9a: 9e:03:2d:0e:14:34:57:38:90:d3:88:b2:97:0f:96:a4:02:8b: 0e:e0:8d:53:b5:35:11:d1:d0:04:37:47:df:e5:55:22:ca:89: ef:c9:b2:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gf1Nf5EG4f9VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk ZDQ4MjQyODgtNzk0OC00MzU3LTgyNGEtZTcwMzI4NWUyNmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDatW4x5nIb0/5cqdSI74jaBTqDr2raVUOk8 5WRSq5Y1MtVqxX+Y0PuVRm+08Vkfm19sBk92ZWMk9S6s4AedHrwA7wFQSU5Ampzg hXb0hMb3hWLflgGrWFrUokZUgiQNR1R/fOX2rTMLtK2YDZ6ncrcGw1q7EA2yNBeH mW0Ps61st/KgaeVfwGdTtVDusjzUuBpvdJMZCL0wtvFDckerrvYXNSRxRIGSckjL VotVcE9NTeW7lJyP2+aFEI/CwOXvu/oU1lMq5bRd6ZimO+UPxe+eBj5aF+DUUpOd MO+vhl1APldRh8JawDtH31+aeHjZRIfV60BMjZhWDe1vC8wxBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeZpfh7J0cqq3DOZzPBg/adSxZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvMWNjMGQyODQtMDFjNS0z NDlhLWJiNWUtYmZiZmRhZTQ2NjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFeVvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpGp5K1IRAZsBjOHyX9bUtZ959euL5Vd+9+JaQXnEe0M9oeWjmcOiiv C7+E4QEcDQZc1nZs83JMcNzC4RvNG1ZiTn+gzLnHpUTGnBZMLAuR3VglcDz0pzq3 nJCnnYEfqyyT6LoW8J++3AMrfPP9ToEVgnleRJn+nQu+KlyL/9HNKx+CUWeWk52M D+Z996sdNCXPf92PqGYmI3YRj5NS4LCdNEF1DeaOKgP8ll3uPR2knoKVDno6KF/j Ob7qVDMrRPbJe4xUWkbBQN19+Q+YFAmVEBX59Qkymp4DLQ4UNFc4kNOIspcPlqQC iw7gjVO1NRHR0AQ3R9/lVSLKie/Jsso= -----END CERTIFICATE-----Generated at Mon Oct 20 02:17:28 2025 by rpki-client