$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa File: 80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa (raw, json) Hash identifier: yvC5FjeFdJnUGGv64BdVExQdJbSzJQfHhI2BjL0FGfo= Subject key identifier: A0:41:DA:48:14:09:14:29:FE:22:EA:DA:E4:C5:E6:1A:64:19:C5:69 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584ADA9BCC00BCF70185F51023C0 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 6079 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:cc:00:bc:f7:01:85:f5:10:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=428be8c2-6845-459f-b886-8dd96ca365f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:4e:ae:65:e5:36:2f:ec:a5:0a:47:42:a2: 25:44:b5:3f:36:4f:62:55:d6:6d:60:70:59:70:34: 0a:e5:dc:a7:89:a9:24:d4:e4:bf:10:3d:22:90:c3: 78:11:06:d8:21:70:53:19:f1:64:7d:8d:dc:09:28: 01:2e:19:65:c2:9e:29:f9:e1:bf:ec:df:0d:40:dc: bd:60:c2:67:1a:3d:75:93:9e:e8:05:4b:1d:0e:f8: 25:80:70:29:7f:70:7a:65:74:96:dc:3e:87:11:cb: 92:e9:a4:de:79:9d:c0:5f:bf:26:18:b4:e5:75:e4: d5:d7:80:9a:f5:fe:87:98:c6:2c:75:04:3a:93:35: d7:cd:31:3c:3b:2c:0c:29:8f:5f:e6:6e:3b:1e:c0: 45:bf:4f:af:25:0f:c6:e3:97:91:e6:33:b7:b7:cf: 15:b9:01:81:10:28:1f:15:aa:33:1b:25:4f:a0:40: 36:09:45:53:a9:fe:b3:29:af:8e:d1:e8:68:93:96: d6:21:c6:f5:3d:2f:d4:ce:f5:b1:bc:33:07:1f:3f: 17:9d:aa:59:f3:78:ff:ce:c2:f6:1b:92:bb:af:f6: b1:78:d8:e4:62:90:cf:d1:d1:8a:9a:83:a9:19:9e: 88:3b:5b:09:00:3b:b1:41:56:41:f3:ab:fb:1d:c5: cf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:41:DA:48:14:09:14:29:FE:22:EA:DA:E4:C5:E6:1A:64:19:C5:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:52:c8:c5:f2:98:39:a5:d3:90:b3:f8:3c:7f:eb:12:af:8a: d2:a7:ae:23:71:48:c7:ac:58:b8:99:d3:2e:ea:5c:b0:f9:5a: 75:13:3d:7b:02:1f:46:60:ce:31:e6:0e:79:b8:21:81:98:12: bd:f3:76:b7:39:c5:92:32:59:63:79:a2:eb:68:eb:45:05:0b: e4:19:cc:a1:e2:7b:c4:c5:bd:8a:8c:61:98:dc:13:3d:08:f1: f1:5d:09:1d:31:37:03:c3:cd:4f:96:29:f9:a9:27:ef:90:2b: a5:3e:08:7f:01:1a:1b:15:8a:59:02:15:e9:58:86:86:32:c3: 63:a1:73:87:b4:9b:b5:a2:8d:ad:ea:3f:d2:6a:a2:04:a2:de: 60:51:a2:76:2c:4d:21:e6:b6:b5:fe:60:8c:56:56:40:d5:85: 59:09:5f:a8:da:26:e7:2c:66:0f:ec:0c:0b:59:c6:de:d8:8a: 6b:01:31:92:76:f7:3e:84:30:32:69:13:96:51:90:4c:30:22: f6:c6:39:e1:2c:52:6f:97:4e:48:33:39:15:fb:25:f5:b3:89: 39:37:fc:86:5a:ef:99:26:de:cd:1d:54:fc:d8:5b:cf:cd:a2: 80:0e:f1:7b:6f:c7:5a:f0:f3:ac:1b:4e:78:f5:5d:1e:32:93: af:18:9a:1a -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEram8wAvPcBhfUQI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk NDI4YmU4YzItNjg0NS00NTlmLWI4ODYtOGRkOTZjYTM2NWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1dOrmXlNi/spQpHQqIlRLU/Nk9iVdZtYHBZ cDQK5dyniakk1OS/ED0ikMN4EQbYIXBTGfFkfY3cCSgBLhllwp4p+eG/7N8NQNy9 YMJnGj11k57oBUsdDvglgHApf3B6ZXSW3D6HEcuS6aTeeZ3AX78mGLTldeTV14Ca 9f6HmMYsdQQ6kzXXzTE8OywMKY9f5m47HsBFv0+vJQ/G45eR5jO3t88VuQGBECgf FaozGyVPoEA2CUVTqf6zKa+O0ehok5bWIcb1PS/UzvWxvDMHHz8XnapZ83j/zsL2 G5K7r/axeNjkYpDP0dGKmoOpGZ6IO1sJADuxQVZB86v7HcXPlQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFKBB2kgUCRQp/iLq2uTF5hpkGcVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvODBmODA2NzMtODJiMC0z ODgwLThiZmUtMWY3Y2Q2ZDAyNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQA3UsjF8pg5pdOQs/g8f+sSr4rSp64jcUjHrFi4mdMu6lyw +Vp1Ez17Ah9GYM4x5g55uCGBmBK983a3OcWSMlljeaLraOtFBQvkGcyh4nvExb2K jGGY3BM9CPHxXQkdMTcDw81Plin5qSfvkCulPgh/ARobFYpZAhXpWIaGMsNjoXOH tJu1oo2t6j/SaqIEot5gUaJ2LE0h5ra1/mCMVlZA1YVZCV+o2ibnLGYP7AwLWcbe 2IprATGSdvc+hDAyaROWUZBMMCL2xjnhLFJvl05IMzkV+yX1s4k5N/yGWu+ZJt7N HVT82FvPzaKADvF7b8da8POsG0549V0eMpOvGJoa -----END CERTIFICATE-----Generated at Sat Aug 23 19:52:46 2025 by rpki-client