$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/2fef3d37-e795-39f5-b53a-c7e420227567.roa File: 2fef3d37-e795-39f5-b53a-c7e420227567.roa (raw, json) Hash identifier: GEYlUOft1tqbyzDzdPAdlhBp/yXR71ucqlDSZePqtwQ= Subject key identifier: 14:E8:3B:FC:41:A2:93:AB:C9:02:D5:C6:6B:D6:D4:0A:06:71:41:0C Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584AECC14A8DAB70DE7F8B79C900 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/2fef3d37-e795-39f5-b53a-c7e420227567.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 7018 IP address blocks: 81.199.64.0/20 maxlen: 24 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:4a:8d:ab:70:de:7f:8b:79:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=7c3cb602-c256-4648-9253-9b6f2e0229bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8f:c2:99:63:8a:5d:cf:41:fd:b7:c4:59:0b: 29:6e:e4:33:09:19:36:ea:c3:b6:86:21:39:b3:a3: bd:66:d0:4c:8c:20:e8:15:5b:15:3a:8e:0f:24:86: 6f:b6:f8:cc:7b:3f:86:80:90:fe:db:7b:d9:20:54: 58:42:82:e3:f5:83:c4:11:66:c1:49:1c:62:fc:4e: 9a:e5:cb:1c:5a:3e:a9:42:bb:a1:6e:c1:d5:60:e1: aa:9c:c6:92:b7:9c:88:ae:55:d9:43:8c:47:1b:b3: 1d:86:74:92:63:60:ff:6b:48:08:c5:3e:88:e9:ff: 96:70:89:0f:67:1a:65:ff:f1:f2:38:b4:47:4c:70: 57:54:95:31:dc:5a:cc:63:8b:3f:82:2b:6d:35:b9: 0f:39:ae:0a:41:44:2b:2f:19:6a:da:0b:38:44:4a: 89:6c:83:5b:05:e2:ca:5b:8a:69:cb:72:72:28:59: a6:c4:0a:89:1e:27:38:5e:cb:3a:69:20:95:ad:d0: f1:ca:93:c0:17:a3:32:44:20:0b:7b:17:89:33:99: 8b:e8:aa:aa:c1:f3:64:5d:10:1b:37:03:e1:a7:0d: 6d:ca:b4:7a:76:1c:06:79:5f:71:7c:3c:9c:0e:90: 06:4d:fe:7c:a0:1a:30:58:fa:e6:4b:05:d8:5d:d1: b6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E8:3B:FC:41:A2:93:AB:C9:02:D5:C6:6B:D6:D4:0A:06:71:41:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/2fef3d37-e795-39f5-b53a-c7e420227567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 81.199.64.0/20 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b0:e5:29:2e:3b:47:5b:57:8b:76:90:01:c3:cb:52:3e:f9: 05:7c:eb:59:bc:35:14:92:c6:b0:ec:b9:20:03:8c:0e:3b:10: e9:2b:07:1e:91:7b:5c:0e:18:5a:69:bc:96:e3:5b:ff:5d:3e: ab:9a:e6:0e:72:56:4f:8c:ca:c5:e9:a1:57:c8:aa:46:95:68: 58:7d:eb:2a:a8:2d:84:cb:8f:5a:32:31:f1:a9:9c:9e:af:df: b5:b9:78:f1:8d:d2:ba:0b:e4:40:77:be:a5:ae:8e:ba:ea:a5: ab:a5:03:30:36:c3:1e:43:b4:b6:46:68:a1:61:01:4d:23:b7: 01:8f:8b:f3:ac:cc:2a:20:41:e2:53:28:ad:39:3c:a8:aa:c9: 50:b1:94:6a:a6:9d:27:12:bf:93:c5:11:f7:81:ed:65:e7:e4: 9b:0c:0b:62:9c:94:1d:cb:ed:1a:38:ec:47:ca:43:3d:b7:91: af:77:b8:40:10:bd:c2:38:89:b1:62:c6:30:3c:5e:bd:7e:84: be:a1:66:09:cb:a4:d8:3a:99:01:4d:c1:2d:2f:0d:32:7c:c4: 65:a9:f9:e6:ea:ba:6e:c5:40:8b:c9:e5:0f:17:18:0f:0d:c1: 37:ea:4b:d3:c0:0f:1f:ca:ed:da:10:25:92:4b:f9:17:5e:0b: 1b:e2:67:0f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErswUqNq3Def4t5yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk N2MzY2I2MDItYzI1Ni00NjQ4LTkyNTMtOWI2ZjJlMDIyOWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI/CmWOKXc9B/bfEWQspbuQzCRk26sO2hiE5 s6O9ZtBMjCDoFVsVOo4PJIZvtvjMez+GgJD+23vZIFRYQoLj9YPEEWbBSRxi/E6a 5cscWj6pQruhbsHVYOGqnMaSt5yIrlXZQ4xHG7MdhnSSY2D/a0gIxT6I6f+WcIkP Zxpl//HyOLRHTHBXVJUx3FrMY4s/gittNbkPOa4KQUQrLxlq2gs4REqJbINbBeLK W4ppy3JyKFmmxAqJHic4Xss6aSCVrdDxypPAF6MyRCALexeJM5mL6KqqwfNkXRAb NwPhpw1tyrR6dhwGeV9xfDycDpAGTf58oBowWPrmSwXYXdG2TQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBToO/xBopOryQLVxmvW1AoGcUEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvMmZlZjNkMzctZTc5NS0z OWY1LWI1M2EtYzdlNDIwMjI3NTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQEUcdAMAsD BAR5W9ADAwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBUsOUpLjtHW1eLdpABw8tSPvkFfOtZvDUUksaw 7LkgA4wOOxDpKwcekXtcDhhaabyW41v/XT6rmuYOclZPjMrF6aFXyKpGlWhYfesq qC2Ey49aMjHxqZyer9+1uXjxjdK6C+RAd76lro666qWrpQMwNsMeQ7S2RmihYQFN I7cBj4vzrMwqIEHiUyitOTyoqslQsZRqpp0nEr+TxRH3ge1l5+SbDAtinJQdy+0a OOxHykM9t5Gvd7hAEL3COImxYsYwPF69foS+oWYJy6TYOpkBTcEtLw0yfMRlqfnm 6rpuxUCLyeUPFxgPDcE36kvTwA8fyu3aECWSS/kXXgsb4mcP -----END CERTIFICATE-----Generated at Sat Aug 23 08:15:57 2025 by rpki-client