$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa File: 0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa (raw, json) Hash identifier: uP1nHkuvdjyitQZ2DkL1G7Lu0srE27OVYezNlbHHwTY= Subject key identifier: A3:46:FC:CB:BF:B1:3C:86:43:9E:9A:3C:D6:FD:8E:AF:30:A8:15:E5 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F43285849E7BA80C3A8B39BADDBABE350 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 11404 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:80:c3:a8:b3:9b:ad:db:ab:e3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=1dc2bd67-bf1f-48dc-8b39-c854b99d4996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:20:bb:fd:f2:63:00:6f:c3:14:54:0a:31:44: 13:b2:af:ea:51:a4:28:2a:60:20:31:70:a3:a1:77: bf:8b:67:1e:1d:f2:22:a5:a1:77:db:cb:70:57:44: f6:93:68:63:53:75:04:75:81:bb:d5:8e:c4:e6:10: 75:bd:00:df:d1:a2:31:93:f8:bc:28:be:a7:a4:c1: bd:9a:d9:a6:0d:c1:2d:80:0a:9c:bd:2a:de:68:74: 95:4a:2f:b0:b5:e6:63:10:77:64:d8:73:f6:ed:9f: 81:15:b0:94:14:89:b2:5e:63:51:72:89:a6:69:06: 09:93:54:24:8a:db:b3:95:41:cb:ee:51:db:98:65: 4c:6d:04:93:57:6b:3e:92:0f:b8:6e:4c:f4:b4:07: 54:9c:5f:ea:83:d9:24:f7:25:22:ac:7c:63:82:e7: 18:3d:de:cb:ba:53:e8:fc:94:6c:c1:6b:cb:49:ef: e6:01:d7:48:a8:5b:49:78:76:7a:74:e8:eb:d2:c1: 32:d7:91:ff:29:76:78:c8:0c:21:03:85:9a:bd:7c: 8b:d8:df:83:b2:85:ed:96:84:cb:43:91:79:dc:12: ea:c8:46:56:1c:dd:c1:64:34:5b:5c:0f:f1:f5:a7: dd:0f:71:54:95:ac:7e:76:1a:1e:24:37:e8:60:c1: 94:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:46:FC:CB:BF:B1:3C:86:43:9E:9A:3C:D6:FD:8E:AF:30:A8:15:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:cf:80:31:dd:f7:aa:3c:31:5c:46:46:2d:af:75:19:c9:6a: 56:90:d6:97:3d:ec:4c:a6:c4:2d:de:70:5e:ce:6a:d7:dc:95: 45:c3:d4:39:f1:84:b6:e2:eb:77:e5:2c:d0:14:1d:e5:86:ed: 08:18:22:a2:f5:3f:a4:81:23:57:59:72:4f:bc:4c:f4:4d:03: 25:c6:e6:72:ca:99:05:e1:9f:f3:44:ef:10:c1:72:05:41:df: ba:db:36:c2:48:f9:ec:2d:c4:56:f6:2b:2a:87:52:84:3b:59: 43:1b:83:31:6e:30:ea:da:72:7f:ea:57:32:ac:a2:7a:36:86: 97:5f:2a:24:3e:b2:67:f9:1e:58:c3:0c:6f:99:a6:c7:56:28: 83:38:46:34:ee:47:10:05:1f:f2:60:d0:11:74:4a:f1:be:14: b3:cc:99:c2:fb:0a:e9:f0:60:0c:06:be:fa:10:31:42:6a:52: 34:4f:44:5e:41:0f:e3:d2:cc:df:7b:69:f9:20:26:26:24:ab: 6b:9f:80:aa:cc:8a:3d:b6:f5:77:2c:01:6f:ef:5a:8b:91:31: 1f:39:69:c3:29:51:33:73:49:99:ce:9d:af:7b:2d:f5:6b:e0: 25:d5:3a:e7:b6:a5:fa:f6:42:09:57:19:7d:2c:90:ce:67:34: ee:ee:35:b8 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEnnuoDDqLObrdur41AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk MWRjMmJkNjctYmYxZi00OGRjLThiMzktYzg1NGI5OWQ0OTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iC7/fJjAG/DFFQKMUQTsq/qUaQoKmAgMXCj oXe/i2ceHfIipaF328twV0T2k2hjU3UEdYG71Y7E5hB1vQDf0aIxk/i8KL6npMG9 mtmmDcEtgAqcvSreaHSVSi+wteZjEHdk2HP27Z+BFbCUFImyXmNRcommaQYJk1Qk ituzlUHL7lHbmGVMbQSTV2s+kg+4bkz0tAdUnF/qg9kk9yUirHxjgucYPd7LulPo /JRswWvLSe/mAddIqFtJeHZ6dOjr0sEy15H/KXZ4yAwhA4WavXyL2N+DsoXtloTL Q5F53BLqyEZWHN3BZDRbXA/x9afdD3FUlax+dhoeJDfoYMGUvQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFKNG/Mu/sTyGQ56aPNb9jq8wqBXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvMGI1NDE0ZmItZGMyYi0z ZGFhLWFmOWMtNjc3YWI4ZjEwYmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAWz4Ax3feqPDFcRkYtr3UZyWpWkNaXPexMpsQt3nBezmrX 3JVFw9Q58YS24ut35SzQFB3lhu0IGCKi9T+kgSNXWXJPvEz0TQMlxuZyypkF4Z/z RO8QwXIFQd+62zbCSPnsLcRW9isqh1KEO1lDG4MxbjDq2nJ/6lcyrKJ6NoaXXyok PrJn+R5YwwxvmabHViiDOEY07kcQBR/yYNARdErxvhSzzJnC+wrp8GAMBr76EDFC alI0T0ReQQ/j0szfe2n5ICYmJKtrn4CqzIo9tvV3LAFv71qLkTEfOWnDKVEzc0mZ zp2vey31a+Al1TrntqX69kIJVxl9LJDOZzTu7jW4 -----END CERTIFICATE-----Generated at Sun Jun 15 18:45:41 2025 by rpki-client