$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/e44dfe4f-2667-34d4-bf61-05659f9c77ad.roa File: e44dfe4f-2667-34d4-bf61-05659f9c77ad.roa (raw, json) Hash identifier: V+Z1KRD2mJ1zDvI0MpAfXJVJ/y9qYTiyV+mZ/Qj+BwM= Subject key identifier: 37:AD:43:17:57:86:65:B5:98:C6:30:10:E6:B2:57:56:43:8B:F1:B2 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F432858492E13C82A29CFE1B9BB8B1990 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/e44dfe4f-2667-34d4-bf61-05659f9c77ad.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 4637 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:c8:2a:29:cf:e1:b9:bb:8b:19:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=cb276ce7-6ccc-438d-bc7d-7d6482ff9aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:92:dc:65:47:17:35:10:f4:34:71:14:41: 91:e1:a2:4a:1f:1c:6c:ca:31:ba:40:ca:3b:bd:f7: f8:31:d6:1a:02:95:d8:37:bc:54:56:eb:d3:bf:2e: e2:5a:ec:44:19:57:96:40:37:d9:e4:c0:04:06:b7: af:f3:40:52:5f:55:c5:d3:40:06:48:ea:ad:ca:05: aa:0d:f3:94:dc:00:84:9d:09:82:36:c1:4d:44:3c: a5:8c:54:05:80:46:4f:39:ed:9e:7b:7e:a1:ba:6f: b4:2c:90:e0:79:ca:b4:7e:ab:6e:96:13:5d:a1:86: d6:6b:1d:8d:7f:3d:ce:21:a7:d1:79:43:1f:39:8d: fa:41:d2:c5:4a:2e:42:1a:b8:3f:f6:87:e4:ba:af: 98:ac:03:dc:63:d9:8b:c2:82:a2:90:d9:75:8a:f1: f7:e3:11:84:cd:3f:9c:4d:e5:7d:56:b2:37:4c:8c: 21:3b:6f:6d:69:07:de:ba:55:8d:78:17:14:4d:d1: 03:a2:a0:15:b1:da:60:59:b7:87:39:de:66:32:d6: 35:35:f5:7a:4c:6e:5e:10:9f:d9:17:9b:57:9a:b5: 46:ea:ef:e7:8a:0c:92:98:81:87:63:0b:bf:16:aa: b5:33:dc:68:29:92:7e:fb:44:c6:c8:fb:07:75:55: 0e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AD:43:17:57:86:65:B5:98:C6:30:10:E6:B2:57:56:43:8B:F1:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/e44dfe4f-2667-34d4-bf61-05659f9c77ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:cb:ce:32:ac:c4:90:b3:a3:e0:9e:fb:b1:a9:f3:e5:ed:94: b7:80:aa:2b:65:06:69:e5:3d:6d:a5:eb:f3:10:b9:52:19:32: 41:6e:56:6f:ff:2e:d1:12:f7:93:f0:36:6a:d7:58:33:9c:5c: 04:91:1b:d3:9d:ed:24:9e:1f:05:84:1f:33:86:9c:aa:2e:68: a0:fa:ff:74:ff:f2:81:2e:00:15:93:09:96:18:32:f5:9d:10: 5e:51:87:b2:56:58:ce:1a:79:45:c0:be:2d:ff:b4:2b:8b:db: 90:b5:a5:a4:8a:36:78:9e:10:c7:3b:2a:f2:49:f8:b7:98:75: c7:1f:a6:73:11:a5:db:19:98:28:8f:13:62:a8:63:45:b3:13: 62:a9:ee:c4:3d:5d:31:1b:c0:f8:dc:d3:0d:b3:6d:11:86:20: 84:61:1b:45:a4:5d:e4:2b:5c:33:70:d5:b7:77:91:ff:e3:d5: 7b:16:41:81:91:40:e3:ef:55:78:a5:f9:87:82:27:f7:20:e8: e8:a4:26:af:8b:a1:bc:b4:af:ec:96:bc:15:4e:e7:66:33:30: 88:10:5f:46:b1:34:83:a4:24:64:12:1b:50:ee:fe:9d:23:57: 9b:e7:5a:60:9e:bb:24:fd:bd:7b:26:e7:59:5d:ee:30:c4:89: 33:8f:3a:f2 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEkuE8gqKc/hubuLGZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk Y2IyNzZjZTctNmNjYy00MzhkLWJjN2QtN2Q2NDgyZmY5YWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0aS3GVHFzUQ9DRxFEGR4aJKHxxsyjG6QMo7 vff4MdYaApXYN7xUVuvTvy7iWuxEGVeWQDfZ5MAEBrev80BSX1XF00AGSOqtygWq DfOU3ACEnQmCNsFNRDyljFQFgEZPOe2ee36hum+0LJDgecq0fqtulhNdoYbWax2N fz3OIafReUMfOY36QdLFSi5CGrg/9ofkuq+YrAPcY9mLwoKikNl1ivH34xGEzT+c TeV9VrI3TIwhO29taQfeulWNeBcUTdEDoqAVsdpgWbeHOd5mMtY1NfV6TG5eEJ/Z F5tXmrVG6u/nigySmIGHYwu/Fqq1M9xoKZJ++0TGyPsHdVUO8wIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFDetQxdXhmW1mMYwEOayV1ZDi/GyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvZTQ0ZGZlNGYtMjY2Ny0z NGQ0LWJmNjEtMDU2NTlmOWM3N2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBGy84yrMSQs6PgnvuxqfPl7ZS3gKorZQZp5T1tpevzELlS GTJBblZv/y7REveT8DZq11gznFwEkRvTne0knh8FhB8zhpyqLmig+v90//KBLgAV kwmWGDL1nRBeUYeyVljOGnlFwL4t/7Qri9uQtaWkijZ4nhDHOyrySfi3mHXHH6Zz EaXbGZgojxNiqGNFsxNiqe7EPV0xG8D43NMNs20RhiCEYRtFpF3kK1wzcNW3d5H/ 49V7FkGBkUDj71V4pfmHgif3IOjopCavi6G8tK/slrwVTudmMzCIEF9GsTSDpCRk EhtQ7v6dI1eb51pgnrsk/b17JudZXe4wxIkzjzry -----END CERTIFICATE-----Generated at Sun May 11 18:01:40 2025 by rpki-client