$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa File: 0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa (raw, json) Hash identifier: kgHfpoROSO6tFH4VX+i048N4Bqks73cPB1VNx2zGMr4= Subject key identifier: 30:CB:63:FF:95:78:95:DC:B0:AA:D9:A7:31:E4:73:42:BF:7F:ED:39 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584BA9326B60028FB082693568C0 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 11404 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:6b:60:02:8f:b0:82:69:35:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=e8249d71-ffd8-4d61-995a-f94f1df36084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:de:34:97:39:90:af:56:06:21:42:f2:8f:07: fb:2b:e7:2d:72:5e:35:6d:57:c2:bf:8f:00:1f:09: 79:ff:04:ae:90:35:8a:9a:fa:21:f3:00:22:bf:f1: 05:87:28:55:4a:03:5a:f7:a3:e6:b6:ea:ef:54:86: 05:f3:85:85:95:b2:04:d5:0b:c2:2c:15:a5:ab:6b: 3e:3f:93:75:d7:2e:70:24:46:35:53:28:6b:12:ff: 31:85:f2:75:60:ef:90:ac:76:f0:b9:61:26:4c:8b: 2c:a9:60:ca:c1:df:91:e4:4d:b9:98:5a:52:69:e7: f1:ca:cf:7a:6c:f0:83:52:51:29:f0:48:64:94:6b: 08:3f:56:7b:85:f0:5d:ff:bb:e1:dc:e9:be:9b:23: f1:df:40:d1:fa:88:e7:b6:b8:b1:ee:02:95:df:ea: e7:fd:77:df:3f:87:24:01:05:4b:9f:da:5d:82:a5: 3e:17:16:68:86:59:b8:bc:c5:86:0e:e4:37:7d:be: 59:9e:39:d3:fa:b3:7c:cd:f7:5f:a6:17:4d:33:20: 49:bc:08:a6:0f:2b:bd:25:b9:3c:1b:ea:d0:f4:a5: ca:e7:b4:07:c0:28:a2:67:e9:ed:09:d8:61:b3:3a: fa:15:ef:87:e7:88:17:29:1b:bc:12:2f:b0:8c:b2: f0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CB:63:FF:95:78:95:DC:B0:AA:D9:A7:31:E4:73:42:BF:7F:ED:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:8e:3a:c1:c1:d4:a5:d9:88:91:16:ab:14:10:18:89:e0:17: 0f:d0:cb:9b:24:c3:55:02:57:53:38:71:d6:63:40:f7:27:e8: 2c:99:27:6e:12:64:f9:37:58:22:17:4e:18:86:45:af:6e:11: ff:c5:8c:0d:8d:db:65:80:95:a9:7c:c1:c9:b1:39:db:05:34: a9:29:2a:47:b9:a8:49:d1:60:3f:b8:d8:82:a7:45:35:e7:4a: 9f:a8:47:b1:f9:b6:69:68:f7:2d:ff:ad:77:28:6b:5e:cc:30: 29:c0:d3:16:27:b8:8d:e2:94:84:dd:ce:0d:a5:66:4a:01:9f: 79:6f:06:50:16:55:44:6d:f2:f6:f9:84:51:5d:e6:a0:ae:c6: 6f:fe:2b:f6:6a:c6:73:c1:7c:bc:fe:3e:30:6a:b5:6c:b4:41: e6:71:5f:2f:5e:f6:6e:e5:61:3b:07:ac:a2:45:db:99:51:0b: 43:f8:55:8a:f5:08:dc:96:b8:0b:73:9b:92:e8:7a:1a:95:b0: a9:f4:b0:52:1d:c2:be:96:ef:7d:c3:72:cc:ef:28:56:a9:62: 84:c6:51:ba:be:a0:24:94:28:4c:ed:2e:1f:59:fb:80:ef:ba: c0:f3:e2:08:87:7a:a3:98:2f:ef:62:46:e4:8d:26:9c:5e:c1: 52:9b:b6:78 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEupMmtgAo+wgmk1aMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZTgyNDlkNzEtZmZkOC00ZDYxLTk5NWEtZjk0ZjFkZjM2MDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq940lzmQr1YGIULyjwf7K+ctcl41bVfCv48A Hwl5/wSukDWKmvoh8wAiv/EFhyhVSgNa96PmturvVIYF84WFlbIE1QvCLBWlq2s+ P5N11y5wJEY1UyhrEv8xhfJ1YO+QrHbwuWEmTIssqWDKwd+R5E25mFpSaefxys96 bPCDUlEp8EhklGsIP1Z7hfBd/7vh3Om+myPx30DR+ojntrix7gKV3+rn/XffP4ck AQVLn9pdgqU+FxZohlm4vMWGDuQ3fb5ZnjnT+rN8zfdfphdNMyBJvAimDyu9Jbk8 G+rQ9KXK57QHwCiiZ+ntCdhhszr6Fe+H54gXKRu8Ei+wjLLwEQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFDDLY/+VeJXcsKrZpzHkc0K/f+05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvMGI1NDE0ZmItZGMyYi0z ZGFhLWFmOWMtNjc3YWI4ZjEwYmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQA/jjrBwdSl2YiRFqsUEBiJ4BcP0MubJMNVAldTOHHWY0D3 J+gsmSduEmT5N1giF04YhkWvbhH/xYwNjdtlgJWpfMHJsTnbBTSpKSpHuahJ0WA/ uNiCp0U150qfqEex+bZpaPct/613KGtezDApwNMWJ7iN4pSE3c4NpWZKAZ95bwZQ FlVEbfL2+YRRXeagrsZv/iv2asZzwXy8/j4warVstEHmcV8vXvZu5WE7B6yiRduZ UQtD+FWK9QjclrgLc5uS6HoalbCp9LBSHcK+lu99w3LM7yhWqWKExlG6vqAklChM 7S4fWfuA77rA8+IIh3qjmC/vYkbkjSacXsFSm7Z4 -----END CERTIFICATE-----Generated at Wed Nov 5 08:36:12 2025 by rpki-client