$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/4c26d07a-6a10-3283-bc4c-d335313f9d53.roa File: 4c26d07a-6a10-3283-bc4c-d335313f9d53.roa (raw, json) Hash identifier: tFJkaivDwMAgidYEMCEknooGbLKQ8xVmJVzQfJrwDHw= Subject key identifier: 5C:5E:CA:A7:19:E8:62:5E:75:22:B1:DC:8C:40:5A:9F:1D:9B:60:96 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F43285849D85F97AF3682687B7775F8C0 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/4c26d07a-6a10-3283-bc4c-d335313f9d53.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 7922 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:97:af:36:82:68:7b:77:75:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=be8ef62a-6774-44ca-9148-dfccacc66de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5e:f1:7d:32:0b:06:97:6a:3b:71:5c:11:97: 4d:e0:30:49:4e:c4:1b:28:bf:3a:ee:44:a2:7e:4e: 57:90:4f:28:8d:77:72:d7:63:90:29:58:63:bc:2a: 95:11:a3:cf:22:ec:79:4a:64:36:e0:02:f4:80:f5: db:38:2a:14:0e:68:75:28:00:c9:83:a7:c8:c2:8b: 94:a3:e0:2b:22:c0:2f:61:7b:44:a0:b7:81:c9:7e: 78:5e:ad:85:8b:40:eb:d6:86:07:23:7e:a0:ac:2a: 06:a6:40:bc:39:9e:aa:20:b4:ab:ca:e0:fc:3c:77: 8f:cc:ba:9f:ab:d5:0a:f4:44:20:5c:bb:07:dc:d5: 74:2a:d8:47:4a:7e:b5:03:ce:22:01:65:2e:69:ce: 9b:8c:fb:b5:26:28:66:c5:3c:fb:d4:c0:4d:3e:4a: 1e:31:ff:79:a9:0c:6f:98:15:81:1d:e3:09:36:10: 4a:b6:78:44:52:b5:db:0a:0e:69:83:40:cf:57:20: 90:58:38:b9:f0:82:86:3d:51:02:3e:8c:6e:ae:17: 8a:ee:7c:41:44:14:80:54:06:44:e8:24:ce:b7:1e: a5:ae:05:91:04:fc:0c:7a:d0:a6:f3:d2:9e:9a:cb: a2:9f:2b:6e:c9:ec:03:85:40:87:41:76:90:77:fc: 50:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5E:CA:A7:19:E8:62:5E:75:22:B1:DC:8C:40:5A:9F:1D:9B:60:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/4c26d07a-6a10-3283-bc4c-d335313f9d53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:95:2e:56:7a:ed:30:0d:f4:88:33:24:6c:61:59:57:56:c5: 22:c6:d7:12:97:5e:b3:6a:d0:b8:4e:9c:54:fd:e7:bc:f6:10: f4:86:50:53:f7:c3:9a:1b:40:60:d9:83:3b:48:1d:f8:f7:5e: c9:2b:54:55:04:4a:03:36:56:86:2a:75:13:8e:d7:f9:71:d7: 91:f3:33:17:30:16:b4:22:f7:b9:94:41:fd:94:6c:0b:4f:7e: 44:b3:95:1d:a6:de:5a:a1:34:4a:85:fe:c8:a0:f5:73:36:48: 42:08:d4:24:77:5d:63:ee:bb:3a:36:a0:df:df:57:42:59:87: 16:34:d8:40:dd:f6:e0:da:6a:e2:73:37:68:a2:8f:c2:df:58: 73:b6:2e:9f:93:fe:2f:37:5e:2f:d1:d4:5b:8b:52:b8:b0:87: 15:1b:88:e1:59:9d:e1:0b:74:b5:78:db:3f:b6:56:72:e6:70: 5b:15:94:70:c1:fd:62:e8:07:b4:db:7e:d5:94:80:a2:d9:74: 00:aa:77:b7:b4:e5:a7:36:bf:3f:c4:c0:50:0d:11:fd:e1:b2: 6e:e3:a8:70:18:c8:e1:49:95:46:33:9b:bd:2a:8f:a9:8b:47: 58:ad:52:3c:7c:4d:5b:5c:8e:49:b3:9e:d3:f4:c6:7b:6c:2c: 45:c3:ff:8f -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEnYX5evNoJoe3d1+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk YmU4ZWY2MmEtNjc3NC00NGNhLTkxNDgtZGZjY2FjYzY2ZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV7xfTILBpdqO3FcEZdN4DBJTsQbKL867kSi fk5XkE8ojXdy12OQKVhjvCqVEaPPIux5SmQ24AL0gPXbOCoUDmh1KADJg6fIwouU o+ArIsAvYXtEoLeByX54Xq2Fi0Dr1oYHI36grCoGpkC8OZ6qILSryuD8PHePzLqf q9UK9EQgXLsH3NV0KthHSn61A84iAWUuac6bjPu1JihmxTz71MBNPkoeMf95qQxv mBWBHeMJNhBKtnhEUrXbCg5pg0DPVyCQWDi58IKGPVECPoxurheK7nxBRBSAVAZE 6CTOtx6lrgWRBPwMetCm89KemsuinytuyewDhUCHQXaQd/xQoQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFFxeyqcZ6GJedSKx3IxAWp8dm2CWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvNGMyNmQwN2EtNmExMC0z MjgzLWJjNGMtZDMzNTMxM2Y5ZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAHlS5Weu0wDfSIMyRsYVlXVsUixtcSl16zatC4TpxU/ee8 9hD0hlBT98OaG0Bg2YM7SB34917JK1RVBEoDNlaGKnUTjtf5cdeR8zMXMBa0Ive5 lEH9lGwLT35Es5Udpt5aoTRKhf7IoPVzNkhCCNQkd11j7rs6NqDf31dCWYcWNNhA 3fbg2mriczdooo/C31hzti6fk/4vN14v0dRbi1K4sIcVG4jhWZ3hC3S1eNs/tlZy 5nBbFZRwwf1i6Ae0237VlICi2XQAqne3tOWnNr8/xMBQDRH94bJu46hwGMjhSZVG M5u9Ko+pi0dYrVI8fE1bXI5Js57T9MZ7bCxFw/+P -----END CERTIFICATE-----Generated at Sun Jun 15 12:26:53 2025 by rpki-client