$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/8631b3bd-0b55-3465-bbe8-646adfd8309c.roa File: 8631b3bd-0b55-3465-bbe8-646adfd8309c.roa (raw, json) Hash identifier: e2/TnYylT7meshJXGRF9pzxOcjALxMhrs+uQskmoQdc= Subject key identifier: 8E:10:CF:93:08:2F:F0:AE:A4:98:26:73:38:6B:DD:92:12:61:4B:67 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584B636740128721CC0BED94CCA0 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/8631b3bd-0b55-3465-bbe8-646adfd8309c.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 398465 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:40:12:87:21:cc:0b:ed:94:cc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=7abe0b34-7589-4fce-8647-f8b8f0ccddbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4b:ba:74:53:41:61:50:b8:50:d7:6e:6b:6f: 4c:2c:22:ad:a5:01:d4:5f:36:62:86:4a:c9:30:80: aa:c1:7e:16:f1:b7:d1:b1:38:26:5a:37:13:93:92: 33:c2:55:62:33:e7:a2:04:5c:f7:b4:24:09:81:4d: 2c:2e:22:f1:81:04:31:8a:c5:cb:21:04:61:97:c5: 34:ea:d0:6c:8d:37:eb:92:28:fb:a0:d9:0f:0a:a2: 7c:9e:9a:19:80:1e:5f:7e:44:ce:3f:ed:25:89:88: 5e:71:a3:96:95:29:ec:6f:a8:ef:86:54:99:a0:41: 2d:2e:ba:bb:4b:eb:65:dc:4b:17:fd:77:16:33:0e: 3f:5b:90:09:89:ae:13:87:29:47:9c:7a:94:68:ca: 57:da:7e:9d:11:f2:82:38:02:a8:6b:54:ce:7c:ab: 00:8b:ff:48:4f:2c:bc:cc:f2:8c:32:d1:87:ae:aa: c8:e9:cf:a7:4f:57:f2:37:db:41:49:76:3c:b4:e3: 5e:53:a2:e7:33:f6:78:16:d4:d0:a1:2b:4d:ca:12: e9:6b:27:fe:97:d9:98:ec:b2:82:f2:04:25:86:a9: b0:77:16:50:ba:28:3e:1a:f6:0a:ba:fe:2d:d0:3b: 83:38:85:eb:80:06:41:74:ef:e6:20:a5:ff:15:20: 92:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:10:CF:93:08:2F:F0:AE:A4:98:26:73:38:6B:DD:92:12:61:4B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/8631b3bd-0b55-3465-bbe8-646adfd8309c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:32:19:18:3d:df:4e:31:b2:70:bb:5d:e0:db:14:0c:b2:c2: e4:b0:37:4d:8a:77:1d:78:f3:a6:bb:c6:64:c8:72:35:1d:20: c3:6f:07:4d:98:04:47:12:fa:0a:c1:0b:9a:ee:9f:06:40:ff: 11:80:79:b6:f5:34:d6:af:1f:3c:17:be:55:f3:b8:2f:df:7b: 90:74:4e:1e:d7:20:9b:e2:da:f1:bf:eb:81:96:0e:7b:11:1a: 1f:bd:9a:84:3a:da:06:48:17:f2:de:bc:39:35:4d:e8:e8:36: bd:97:d7:f1:29:f3:3e:61:25:f3:35:0b:70:31:6f:a3:2c:8d: be:14:a6:b7:ce:84:54:67:a4:ab:70:32:f7:94:5b:87:13:42: 2d:8a:2f:ca:ee:27:bc:ad:d3:98:a1:c7:0a:77:30:96:d5:83: 1e:2d:97:a3:76:49:8f:5e:8a:16:57:86:4c:03:7b:cc:cf:e7: a1:35:80:d8:6e:d1:e5:d9:e0:1e:9a:90:c3:31:6e:49:53:f3: 69:3d:1d:92:63:2e:76:74:b4:f1:0e:0a:08:37:75:37:69:0b: 04:72:27:d4:89:06:76:22:40:3b:a3:7e:e8:cb:3c:3d:8e:bb: 7f:ae:47:f1:78:5e:cc:8a:b8:c4:c4:5d:37:c8:21:a8:f5:6e: 2f:88:88:a9 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEtjZ0AShyHMC+2UzKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk N2FiZTBiMzQtNzU4OS00ZmNlLTg2NDctZjhiOGYwY2NkZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqku6dFNBYVC4UNdua29MLCKtpQHUXzZihkrJ MICqwX4W8bfRsTgmWjcTk5IzwlViM+eiBFz3tCQJgU0sLiLxgQQxisXLIQRhl8U0 6tBsjTfrkij7oNkPCqJ8npoZgB5ffkTOP+0liYhecaOWlSnsb6jvhlSZoEEtLrq7 S+tl3EsX/XcWMw4/W5AJia4ThylHnHqUaMpX2n6dEfKCOAKoa1TOfKsAi/9ITyy8 zPKMMtGHrqrI6c+nT1fyN9tBSXY8tONeU6LnM/Z4FtTQoStNyhLpayf+l9mY7LKC 8gQlhqmwdxZQuig+GvYKuv4t0DuDOIXrgAZBdO/mIKX/FSCSSwIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFI4Qz5MIL/CupJgmczhr3ZISYUtnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvODYzMWIzYmQtMGI1NS0z NDY1LWJiZTgtNjQ2YWRmZDgzMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBVMhkYPd9OMbJwu13g2xQMssLksDdNincdePOmu8ZkyHI1 HSDDbwdNmARHEvoKwQua7p8GQP8RgHm29TTWrx88F75V87gv33uQdE4e1yCb4trx v+uBlg57ERofvZqEOtoGSBfy3rw5NU3o6Da9l9fxKfM+YSXzNQtwMW+jLI2+FKa3 zoRUZ6SrcDL3lFuHE0Itii/K7ie8rdOYoccKdzCW1YMeLZejdkmPXooWV4ZMA3vM z+ehNYDYbtHl2eAempDDMW5JU/NpPR2SYy52dLTxDgoIN3U3aQsEcifUiQZ2IkA7 o37oyzw9jrt/rkfxeF7MirjExF03yCGo9W4viIip -----END CERTIFICATE-----Generated at Mon Oct 20 07:46:20 2025 by rpki-client