$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/8631b3bd-0b55-3465-bbe8-646adfd8309c.roa File: 8631b3bd-0b55-3465-bbe8-646adfd8309c.roa (raw, json) Hash identifier: YFsZMsn91/k21mvzr0d64kIoPHwHHPCHeyXaR/UZBKE= Subject key identifier: 64:D6:9E:2C:92:30:8B:99:B7:81:9C:9D:08:6C:1F:77:D6:B0:9E:F9 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584F4975DDBB6D09548B1A0C0A00 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/8631b3bd-0b55-3465-bbe8-646adfd8309c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398465 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:dd:bb:6d:09:54:8b:1a:0c:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=21463a29-d64b-47d3-9cba-7435a2cad8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6d:4e:a2:c8:72:9d:86:e4:17:2d:29:7c:b3: 55:e1:89:52:be:c1:fb:9e:da:07:19:54:81:ea:ed: d7:e1:0c:04:dd:d9:55:78:e2:ff:25:2d:50:e8:97: d8:c7:73:46:e5:91:f5:16:55:a5:93:82:9c:9f:48: a4:f5:2d:e3:1c:0f:c3:45:6a:1d:54:da:29:d6:f9: da:3c:02:25:03:5f:3c:04:0b:0e:b0:ff:fe:9a:3c: a8:22:31:a1:f6:f8:0a:82:d3:9b:5d:e4:cf:db:cf: 63:72:a4:f5:f4:29:65:be:ff:25:b9:38:35:d1:55: c9:ec:a5:4b:32:f8:6b:12:48:06:72:4a:36:14:7b: a2:02:57:5f:9b:65:65:43:a0:83:db:d2:c5:ae:d2: f3:04:08:c2:5c:1b:32:df:9b:71:49:01:4b:e7:74: d4:f4:ed:2a:45:6c:73:23:20:71:31:c7:d4:b8:1c: 0c:9a:d5:fd:88:57:3d:47:b9:5d:fd:11:b9:f3:39: 4c:c8:2d:26:a6:05:8e:dc:d9:9b:a0:d2:50:47:d0: 3d:7e:93:52:b8:9a:b5:47:4b:d5:dd:8d:41:15:92: e6:74:06:c2:14:44:ab:33:ab:25:0a:a1:08:b2:79: 24:77:eb:d7:0e:9b:bb:df:81:1c:75:b4:b9:35:d4: 4a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D6:9E:2C:92:30:8B:99:B7:81:9C:9D:08:6C:1F:77:D6:B0:9E:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/8631b3bd-0b55-3465-bbe8-646adfd8309c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:80:12:ef:29:16:54:d1:ca:c8:9a:79:48:bc:5e:0a:dc:d3: b5:64:06:45:0c:38:37:d0:ea:6c:aa:80:ab:6d:3c:c5:5b:ae: aa:6d:55:d2:8e:d2:4e:6c:c7:c1:b5:82:3e:78:cf:26:5a:f6: ab:c2:21:7a:46:c3:e9:04:61:37:68:bc:36:55:50:13:02:c9: 14:21:a2:07:31:6c:78:77:e4:0f:83:6d:a0:fd:0b:6f:45:ec: e7:8f:19:16:fb:06:40:ab:9a:36:a1:43:ff:a1:56:95:f0:cd: 0d:8b:34:04:10:83:0a:f7:b0:a9:dd:c9:d4:64:05:27:39:03: 42:c3:07:35:38:fa:e5:53:69:ba:22:16:b2:99:12:42:5d:ae: ae:b9:5b:49:11:b3:9b:19:24:6b:2b:45:3c:29:b8:a4:fd:0a: 38:b9:d6:93:e1:c8:c4:4c:25:62:33:a1:5b:9d:37:57:3e:f8: e0:94:58:f3:fa:de:81:db:aa:22:e5:e6:77:b3:12:6a:09:73: 7d:5f:45:86:82:b5:1a:b7:f4:8b:88:18:97:dc:11:9a:76:1b: 2f:60:d0:19:c3:15:51:ed:19:92:19:c3:4b:0e:43:60:d7:a0: 7f:85:de:c6:c9:e0:4a:7e:a3:54:72:a6:af:11:04:6a:eb:69: 06:e4:4e:95 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE9Jdd27bQlUixoMCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjE0NjNhMjktZDY0Yi00N2QzLTljYmEtNzQzNWEyY2FkOGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG1OoshynYbkFy0pfLNV4YlSvsH7ntoHGVSB 6u3X4QwE3dlVeOL/JS1Q6JfYx3NG5ZH1FlWlk4Kcn0ik9S3jHA/DRWodVNop1vna PAIlA188BAsOsP/+mjyoIjGh9vgKgtObXeTP289jcqT19Cllvv8luTg10VXJ7KVL MvhrEkgGcko2FHuiAldfm2VlQ6CD29LFrtLzBAjCXBsy35txSQFL53TU9O0qRWxz IyBxMcfUuBwMmtX9iFc9R7ld/RG58zlMyC0mpgWO3NmboNJQR9A9fpNSuJq1R0vV 3Y1BFZLmdAbCFESrM6slCqEIsnkkd+vXDpu734EcdbS5NdRK/QIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFGTWniySMIuZt4GcnQhsH3fWsJ75MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvODYzMWIzYmQtMGI1NS0z NDY1LWJiZTgtNjQ2YWRmZDgzMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAigBLvKRZU0crImnlIvF4K3NO1ZAZFDDg30OpsqoCrbTzF W66qbVXSjtJObMfBtYI+eM8mWvarwiF6RsPpBGE3aLw2VVATAskUIaIHMWx4d+QP g22g/QtvReznjxkW+wZAq5o2oUP/oVaV8M0NizQEEIMK97Cp3cnUZAUnOQNCwwc1 OPrlU2m6IhaymRJCXa6uuVtJEbObGSRrK0U8Kbik/Qo4udaT4cjETCViM6FbnTdX PvjglFjz+t6B26oi5eZ3sxJqCXN9X0WGgrUat/SLiBiX3BGadhsvYNAZwxVR7RmS GcNLDkNg16B/hd7GyeBKfqNUcqavEQRq62kG5E6V -----END CERTIFICATE-----Generated at Sun Sep 27 02:37:01 2026 by rpki-client