$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/1cc0d284-01c5-349a-bb5e-bfbfdae46623.roa File: 1cc0d284-01c5-349a-bb5e-bfbfdae46623.roa (raw, json) Hash identifier: NUP4cnvQo8skInhtjdQUJVGwchyXw28iRLzkRJPuhjc= Subject key identifier: 37:A0:63:9C:B0:8B:E8:A6:86:97:A6:4A:24:99:CD:67:D2:81:65:90 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F432858499CACCB1E651011F2F9E01980 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/1cc0d284-01c5-349a-bb5e-bfbfdae46623.roa Signing time: Tue 22 Apr 2025 15:48:05 +0000 ROA not before: Tue 22 Apr 2025 15:48:05 +0000 ROA not after: Mon 21 Jul 2025 15:48:05 +0000 asID: 9304 IP address blocks: 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:ac:cb:1e:65:10:11:f2:f9:e0:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Apr 22 15:48:05 2025 GMT Not After : Jul 21 15:48:05 2025 GMT Subject: CN=b4d53962-b635-4251-97ba-32ce474b09f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a8:65:88:26:ad:ac:75:a8:3d:99:95:b7:ce: 23:5a:d5:ad:eb:3f:02:cd:00:78:32:a3:09:3c:89: 12:b3:03:31:f5:ef:80:39:5b:cf:43:b4:da:5b:eb: ba:15:19:43:e0:ec:10:1c:a3:5e:77:ab:2e:35:49: b5:8d:e0:11:1a:e4:e7:31:b2:69:25:ba:c8:61:fb: 47:f5:10:57:67:ae:dc:1b:71:61:57:13:fe:9e:57: 0c:2a:f2:f9:ca:dd:7e:3d:0d:55:9a:7e:9d:96:eb: 67:ab:57:5b:d3:17:97:64:f5:38:f9:26:b8:e4:3a: 22:3f:04:b2:9f:1a:6d:23:87:d4:62:d9:63:b8:5b: 61:f2:53:1f:97:27:6a:49:3b:ff:d9:a5:5d:75:e6: c7:6a:82:da:76:6c:5c:3f:67:9c:36:97:92:c5:b1: 59:07:66:00:df:0f:83:98:01:70:73:f8:67:8d:b4: d6:b8:33:af:42:c0:db:71:27:99:88:e1:b1:d2:ff: b9:08:ac:5c:8b:bb:79:e1:42:8e:27:41:75:55:be: 00:a3:db:73:de:5a:03:4a:40:f2:93:7b:c7:81:a0: e6:1b:e0:92:72:9e:3c:2c:41:af:e2:5b:8f:16:4a: e4:de:49:07:21:e1:4c:96:18:30:c9:ab:62:40:99: 0c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A0:63:9C:B0:8B:E8:A6:86:97:A6:4A:24:99:CD:67:D2:81:65:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/1cc0d284-01c5-349a-bb5e-bfbfdae46623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:33:a5:2f:97:9f:56:00:cd:2b:f0:99:41:77:7d:21:51:70: 58:d6:b0:ae:cd:e3:8e:d7:bb:5b:c5:a1:4a:f2:09:3e:45:5e: 66:85:a3:b3:82:56:cd:e9:0b:f8:53:24:bf:98:d1:6f:46:23: c5:ea:f5:56:40:ae:e3:75:ed:5d:db:df:02:c4:2e:05:8b:c4: b1:ac:c2:63:0c:6b:18:58:4e:f5:f6:97:ee:74:10:33:d0:28: 2b:b1:0c:d1:6c:ad:27:3a:f3:57:d8:ed:82:ac:99:84:71:5b: d7:09:de:ac:59:27:b9:bd:69:dc:f5:f1:b0:55:d9:4b:84:3f: 8a:c4:95:cd:5f:04:5a:74:f7:b5:3b:9e:a4:db:c0:d2:6e:10: 80:1d:dc:dc:9f:7f:c9:c2:6f:25:2c:2d:2c:f1:66:a4:e6:17: 4a:a5:21:a3:ef:c9:cb:a4:f5:df:6a:03:7a:90:48:02:f7:60: 66:06:33:18:43:2a:ce:13:e2:b7:3d:d3:60:61:04:53:72:02: 78:24:33:df:ea:f0:c3:98:c1:b9:f9:b6:2a:0c:83:c4:ab:54: ca:80:5c:f4:4f:33:1e:29:e1:db:3d:58:a1:c3:c9:4e:91:b8: 05:2e:66:e4:99:b8:e1:78:9d:01:54:2f:1d:9a:51:bf:37:ad: ee:09:e8:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmcrMseZRAR8vngGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDQyMjE1NDgwNVoXDTI1MDcyMTE1NDgwNVowLzEtMCsGA1UEAxMk YjRkNTM5NjItYjYzNS00MjUxLTk3YmEtMzJjZTQ3NGIwOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KhliCatrHWoPZmVt84jWtWt6z8CzQB4MqMJ PIkSswMx9e+AOVvPQ7TaW+u6FRlD4OwQHKNed6suNUm1jeARGuTnMbJpJbrIYftH 9RBXZ67cG3FhVxP+nlcMKvL5yt1+PQ1Vmn6dlutnq1db0xeXZPU4+Sa45DoiPwSy nxptI4fUYtljuFth8lMflydqSTv/2aVddebHaoLadmxcP2ecNpeSxbFZB2YA3w+D mAFwc/hnjbTWuDOvQsDbcSeZiOGx0v+5CKxci7t54UKOJ0F1Vb4Ao9tz3loDSkDy k3vHgaDmG+CScp48LEGv4luPFkrk3kkHIeFMlhgwyatiQJkMPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDegY5ywi+imhpemSiSZzWfSgWWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvMWNjMGQyODQtMDFjNS0z NDlhLWJiNWUtYmZiZmRhZTQ2NjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFeVvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMzpS+Xn1YAzSvwmUF3fSFRcFjWsK7N447Xu1vFoUryCT5FXmaFo7OC Vs3pC/hTJL+Y0W9GI8Xq9VZAruN17V3b3wLELgWLxLGswmMMaxhYTvX2l+50EDPQ KCuxDNFsrSc681fY7YKsmYRxW9cJ3qxZJ7m9adz18bBV2UuEP4rElc1fBFp097U7 nqTbwNJuEIAd3Nyff8nCbyUsLSzxZqTmF0qlIaPvycuk9d9qA3qQSAL3YGYGMxhD Ks4T4rc902BhBFNyAngkM9/q8MOYwbn5tioMg8SrVMqAXPRPMx4p4ds9WKHDyU6R uAUuZuSZuOF4nQFULx2aUb83re4J6Lg= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:00 2025 by rpki-client