$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d4a09bdc-1a34-32e9-95c1-afcba7627345.roa File: d4a09bdc-1a34-32e9-95c1-afcba7627345.roa (raw, json) Hash identifier: sXNdjFN2oZ4SzYHC3rRA5lgL4CU/7im6m3NUOQ47qag= Subject key identifier: 5C:09:93:3C:30:E8:15:EE:F6:58:A6:3F:71:83:84:75:CD:CC:82:EA Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F43285849B6DF4C8AB52DD63DD73E1380 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d4a09bdc-1a34-32e9-95c1-afcba7627345.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 701 IP address blocks: 81.199.64.0/20 maxlen: 24 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:4c:8a:b5:2d:d6:3d:d7:3e:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=d62a1226-900a-4b53-b6e9-9659ea77dab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c1:7f:c8:77:4c:c6:a6:32:3d:35:d2:61:14: ea:14:85:f7:f8:4f:0a:0b:04:e4:6e:e7:45:95:8d: d9:55:f3:47:b8:2e:6f:8e:a5:dd:0f:af:f8:e0:45: c7:6e:0b:46:49:ef:2d:72:24:d1:96:e0:9a:78:46: d7:7c:f1:b5:7d:f3:ab:f4:da:2b:63:b5:92:9d:47: b5:b4:16:0c:f7:23:0a:c4:26:69:96:4d:9c:2d:89: 75:71:13:e5:40:21:04:01:5f:69:c3:7d:b1:7d:5d: da:cc:07:7e:a0:0a:c4:41:70:d1:a1:f8:24:c7:bd: 79:48:43:f9:25:f5:6a:4f:6f:e5:70:b9:83:86:f4: 10:5b:5e:6b:1a:51:96:bc:0e:1a:7c:5e:9a:7f:b5: e6:11:67:12:15:33:aa:ff:57:25:60:b7:f2:c6:a1: 7c:3e:df:20:05:7e:2c:25:75:e6:18:bb:e9:2c:0b: ec:f2:51:c0:6a:16:9a:59:c9:13:7b:cb:a1:f9:57: a2:da:4f:0f:70:d5:64:f0:f5:e9:d6:b6:f7:9e:a9: eb:8a:0a:2c:a5:94:cc:0b:5e:80:95:12:71:0a:e3: 24:81:0f:ae:b8:8f:56:d0:ae:76:d3:1a:3d:49:0e: 47:bc:0e:30:fd:b6:ff:9d:ba:40:43:c7:fa:ad:b3: 71:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:09:93:3C:30:E8:15:EE:F6:58:A6:3F:71:83:84:75:CD:CC:82:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d4a09bdc-1a34-32e9-95c1-afcba7627345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 81.199.64.0/20 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ea:64:a0:af:66:34:a7:89:d7:69:b3:b4:3c:33:53:a7:b7: b6:08:fd:79:b4:37:bc:f6:3b:5f:05:ba:21:c0:ac:7b:20:e6: d2:3f:68:8b:c3:87:6b:fc:88:1c:06:7e:fe:b8:f8:be:05:77: da:1f:4d:11:f8:4a:a7:e9:c1:86:b4:79:1f:34:7c:25:86:c5: e6:bd:f3:36:40:e0:ab:cc:fb:74:80:60:4b:f0:a3:20:51:85: 4d:be:5f:97:e3:fa:12:25:01:28:b9:b9:73:a3:c9:78:83:46: a4:32:d7:77:42:57:d3:9e:26:bf:ed:57:e3:1d:0e:c7:d7:c1: 3b:ee:88:87:ff:2d:4c:7c:9e:35:5c:58:01:3d:5d:d3:09:a1: 2e:a4:51:c5:cd:7d:ab:08:a9:f2:1d:71:cb:ab:c2:a2:93:c3: ff:80:e6:fe:31:b5:0d:03:e7:6e:74:37:ab:92:c5:11:64:94: 5f:61:f4:08:b5:97:7c:ce:5c:64:76:27:b6:da:0d:f8:80:b8: 3f:35:dd:ad:16:e2:af:45:49:26:91:f2:ec:8b:89:80:46:9a: 53:e5:a9:41:4d:25:8a:9a:a3:92:16:d1:a5:2b:1a:26:ca:02: e3:79:b9:b7:0b:b2:1a:bd:f7:cd:bd:dc:de:57:d3:78:4b:35: 22:68:4a:7d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEm230yKtS3WPdc+E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk ZDYyYTEyMjYtOTAwYS00YjUzLWI2ZTktOTY1OWVhNzdkYWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8F/yHdMxqYyPTXSYRTqFIX3+E8KCwTkbudF lY3ZVfNHuC5vjqXdD6/44EXHbgtGSe8tciTRluCaeEbXfPG1ffOr9NorY7WSnUe1 tBYM9yMKxCZplk2cLYl1cRPlQCEEAV9pw32xfV3azAd+oArEQXDRofgkx715SEP5 JfVqT2/lcLmDhvQQW15rGlGWvA4afF6af7XmEWcSFTOq/1clYLfyxqF8Pt8gBX4s JXXmGLvpLAvs8lHAahaaWckTe8uh+Vei2k8PcNVk8PXp1rb3nqnrigospZTMC16A lRJxCuMkgQ+uuI9W0K520xo9SQ5HvA4w/bb/nbpAQ8f6rbNx9wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFwJkzww6BXu9limP3GDhHXNzILqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvZDRhMDliZGMtMWEzNC0z MmU5LTk1YzEtYWZjYmE3NjI3MzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQEUcdAMAsD BAR5W9ADAwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAt6mSgr2Y0p4nXabO0PDNTp7e2CP15tDe89jtf BbohwKx7IObSP2iLw4dr/IgcBn7+uPi+BXfaH00R+Eqn6cGGtHkfNHwlhsXmvfM2 QOCrzPt0gGBL8KMgUYVNvl+X4/oSJQEoublzo8l4g0akMtd3QlfTnia/7VfjHQ7H 18E77oiH/y1MfJ41XFgBPV3TCaEupFHFzX2rCKnyHXHLq8Kik8P/gOb+MbUNA+du dDerksURZJRfYfQItZd8zlxkdie22g34gLg/Nd2tFuKvRUkmkfLsi4mARppT5alB TSWKmqOSFtGlKxomygLjebm3C7IavffNvdzeV9N4SzUiaEp9 -----END CERTIFICATE-----Generated at Sat May 10 07:25:17 2025 by rpki-client