$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d9a7402a-c4dd-3778-9808-b7317aeceb81.roa File: d9a7402a-c4dd-3778-9808-b7317aeceb81.roa (raw, json) Hash identifier: h62/Y4KfnesKi8i43sG9YPWkJ4Bu1Vg1x8sNt8xFetY= Subject key identifier: AF:43:1A:38:32:1A:FE:65:44:96:23:8C:5B:48:63:D3:03:29:12:BD Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584AE89145C0A44B68470E9A1240 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d9a7402a-c4dd-3778-9808-b7317aeceb81.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 42689 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:45:c0:a4:4b:68:47:0e:9a:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=54815456-b9c8-4ea9-a9ba-1035e7a18283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:97:4a:30:8c:d7:e1:d0:eb:d7:72:12:ca: 85:ff:3f:c7:cf:e0:e1:0a:71:88:11:50:a7:0b:4a: b0:cb:19:96:cc:85:96:24:83:6e:79:46:07:b2:f4: cc:b6:be:af:76:f7:f2:d5:8d:78:fc:93:3b:85:30: f1:41:25:02:86:41:5b:00:27:23:73:d7:ac:1a:66: f5:7d:6e:40:ab:3a:a5:0d:59:08:77:6b:e8:51:0f: f6:11:e7:0a:e1:18:8d:9e:65:a3:d9:bf:12:93:72: 76:13:a2:23:13:98:8c:ee:cb:e9:68:6f:e2:5d:58: 93:9b:86:5c:02:c4:fe:33:d3:d4:c0:5f:77:b6:94: 6b:21:b3:ab:7c:fd:2c:c0:b5:f0:36:b1:d5:4f:1e: 25:f8:91:35:60:88:e6:00:88:dd:50:a7:0b:24:ab: 25:9e:01:94:f3:33:fa:e3:94:2f:d7:41:94:f1:2e: 41:4c:3f:6d:b1:52:58:35:a3:42:e3:1d:dd:ca:38: 74:1a:43:70:a8:8d:fd:ae:ae:d7:fa:75:55:59:ae: 12:56:de:a8:7e:91:8f:c4:53:d3:86:e5:53:32:a6: e6:c2:cb:dc:e1:0d:27:ef:d1:59:84:a2:81:43:43: 52:00:51:f1:cd:a1:a5:1b:fa:30:a6:c7:0a:0f:25: 09:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:43:1A:38:32:1A:FE:65:44:96:23:8C:5B:48:63:D3:03:29:12:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d9a7402a-c4dd-3778-9808-b7317aeceb81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d6:d5:a5:c8:c9:31:a5:5a:08:de:73:07:09:f1:00:4c:98: 9f:ac:e5:52:b0:0b:02:ac:69:87:91:f1:e6:5d:62:52:ff:cf: 37:57:49:9c:8d:ba:fa:cf:a5:aa:7c:ec:33:64:be:c3:11:77: 0d:02:4b:3b:9a:47:4a:90:13:6c:03:2c:0e:08:69:d4:b8:ee: 2c:88:48:e4:26:b6:64:87:4f:01:d6:36:60:90:cc:09:46:69: 01:78:31:22:f7:f3:e2:8a:12:5c:ba:25:60:54:26:b2:25:9f: 26:11:33:8c:8a:71:35:c7:88:28:58:93:23:63:c9:d8:6e:17: 0a:74:ac:ab:08:7f:2b:41:32:b1:83:27:60:9f:d7:7a:e8:b6: 55:6e:e1:94:f6:af:60:81:a2:df:f7:dc:a5:f9:33:18:48:cb: 65:87:8e:7c:16:17:c2:9c:dc:78:8c:8d:b2:00:b6:e7:f8:1e: b2:ec:31:ae:1d:24:09:a6:26:44:19:38:59:b4:d3:52:28:52: bc:a6:68:dd:bd:8d:01:ab:fd:4f:aa:24:3c:e5:f8:c0:ea:32: 5d:ab:81:ce:8a:0a:87:bb:ce:a2:56:01:91:e0:ba:b0:41:45: da:48:86:93:ae:ae:b4:09:71:c5:fa:7c:ff:0f:89:7e:0f:d5: 06:19:42:13 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWErokUXApEtoRw6aEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NTQ4MTU0NTYtYjljOC00ZWE5LWE5YmEtMTAzNWU3YTE4MjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYqXSjCM1+HQ69dyEsqF/z/Hz+DhCnGIEVCn C0qwyxmWzIWWJINueUYHsvTMtr6vdvfy1Y14/JM7hTDxQSUChkFbACcjc9esGmb1 fW5AqzqlDVkId2voUQ/2EecK4RiNnmWj2b8Sk3J2E6IjE5iM7svpaG/iXViTm4Zc AsT+M9PUwF93tpRrIbOrfP0swLXwNrHVTx4l+JE1YIjmAIjdUKcLJKslngGU8zP6 45Qv10GU8S5BTD9tsVJYNaNC4x3dyjh0GkNwqI39rq7X+nVVWa4SVt6ofpGPxFPT huVTMqbmwsvc4Q0n79FZhKKBQ0NSAFHxzaGlG/owpscKDyUJewIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFK9DGjgyGv5lRJYjjFtIY9MDKRK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvZDlhNzQwMmEtYzRkZC0z Nzc4LTk4MDgtYjczMTdhZWNlYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAZ1tWlyMkxpVoI3nMHCfEATJifrOVSsAsCrGmHkfHmXWJS /883V0mcjbr6z6WqfOwzZL7DEXcNAks7mkdKkBNsAywOCGnUuO4siEjkJrZkh08B 1jZgkMwJRmkBeDEi9/PiihJcuiVgVCayJZ8mETOMinE1x4goWJMjY8nYbhcKdKyr CH8rQTKxgydgn9d66LZVbuGU9q9ggaLf99yl+TMYSMtlh458FhfCnNx4jI2yALbn +B6y7DGuHSQJpiZEGThZtNNSKFK8pmjdvY0Bq/1PqiQ85fjA6jJdq4HOigqHu86i VgGR4LqwQUXaSIaTrq60CXHF+nz/D4l+D9UGGUIT -----END CERTIFICATE-----Generated at Sat Aug 23 18:16:11 2025 by rpki-client