$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/4c26d07a-6a10-3283-bc4c-d335313f9d53.roa File: 4c26d07a-6a10-3283-bc4c-d335313f9d53.roa (raw, json) Hash identifier: VDMCDFLKCpDbrGjbSJlmYGVG88t1Z1yP0R7Vn9d6V4s= Subject key identifier: 7E:B3:8E:19:C3:0F:19:AF:63:71:6B:FB:36:09:CE:DF:15:16:FA:1E Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584D59EA68CAFE00C39D9DB7AC00 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/4c26d07a-6a10-3283-bc4c-d335313f9d53.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 7922 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:68:ca:fe:00:c3:9d:9d:b7:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=a727c29d-8814-40e2-a106-f26c6a5f5ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1e:2a:a7:32:a9:76:af:0b:78:42:d7:83:98: 8f:84:ef:a6:ba:cc:eb:f4:24:a5:d8:cf:60:75:e3: ef:78:a9:69:67:03:3e:50:56:cf:40:df:00:41:a5: 1e:48:2b:d4:89:f2:cd:1c:3b:0d:f7:b2:8f:68:e6: 9d:df:55:8f:10:ff:65:58:c9:9b:a3:e4:95:b0:ca: ef:d1:cf:d9:50:c7:a5:16:64:0d:6b:d3:67:90:03: ef:3d:46:52:de:b7:cb:e3:1f:05:8a:66:7b:98:9f: 8a:69:62:df:6a:e2:49:19:c5:41:83:88:4e:69:a7: 76:4b:3e:c2:53:46:ab:9d:57:d9:af:27:96:fe:f5: d8:41:45:5e:72:4a:ef:f6:fa:f9:46:63:1c:36:57: ac:51:13:52:89:d3:74:31:c1:e8:4d:5c:f0:86:dc: fa:e6:46:c3:83:cc:5c:91:4d:9e:a6:0c:0a:66:49: 3d:c3:bc:9e:9b:7b:62:36:c3:dd:ea:c2:48:eb:9c: 00:51:99:3b:a4:08:e5:26:e3:f9:29:c6:5e:c9:5d: 63:93:7f:24:cf:9f:0b:00:94:7a:c9:1f:a0:1d:39: 5c:ff:38:f7:85:f9:9e:42:bf:df:88:d6:bb:d3:8d: bf:d2:ef:11:07:6d:67:58:63:39:7c:e8:f0:37:80: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B3:8E:19:C3:0F:19:AF:63:71:6B:FB:36:09:CE:DF:15:16:FA:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/4c26d07a-6a10-3283-bc4c-d335313f9d53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:9f:71:5d:65:07:33:d2:a1:d1:4f:5e:6a:a9:fa:45:87:f5: a7:e0:b1:0b:c0:d4:a5:60:75:50:26:19:ea:45:10:c7:45:f1: f9:66:9d:e8:92:fb:bc:3d:24:30:e3:cd:66:ce:4b:32:6f:29: 8c:a6:05:62:12:67:3b:76:be:b7:97:b7:ee:77:f4:89:c7:50: ac:ba:3c:5d:2d:8e:fa:97:51:66:fa:f4:14:40:6f:8d:b6:40: 7d:e1:33:c5:36:4d:02:a6:99:37:04:63:72:31:ca:48:4b:15: be:91:71:14:95:ff:1d:e3:dc:1d:a5:60:e5:11:e3:18:be:4e: 2a:ff:95:cc:40:54:04:5e:4c:35:2e:e3:f8:a0:5a:e7:3e:7d: a1:4d:fc:76:bf:52:c7:20:68:b5:59:ce:db:93:a8:24:68:a1: 6c:c3:31:ac:d0:4d:aa:96:02:0b:12:c6:e3:89:27:93:96:13: 74:78:59:a6:55:87:da:de:14:62:12:16:82:06:f7:0a:27:a6: 73:06:92:ab:10:35:99:a3:7b:10:c0:23:4a:be:f3:88:91:45: 30:c3:ab:f6:28:c8:dc:38:23:66:eb:97:75:0e:b1:e3:76:23: e2:ca:3f:1c:86:fa:39:17:e2:1f:00:af:cf:75:92:0f:78:ae: ba:96:a2:83 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE1Z6mjK/gDDnZ23rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk YTcyN2MyOWQtODgxNC00MGUyLWExMDYtZjI2YzZhNWY1ZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR4qpzKpdq8LeELXg5iPhO+muszr9CSl2M9g dePveKlpZwM+UFbPQN8AQaUeSCvUifLNHDsN97KPaOad31WPEP9lWMmbo+SVsMrv 0c/ZUMelFmQNa9NnkAPvPUZS3rfL4x8FimZ7mJ+KaWLfauJJGcVBg4hOaad2Sz7C U0arnVfZryeW/vXYQUVeckrv9vr5RmMcNlesURNSidN0McHoTVzwhtz65kbDg8xc kU2epgwKZkk9w7yem3tiNsPd6sJI65wAUZk7pAjlJuP5KcZeyV1jk38kz58LAJR6 yR+gHTlc/zj3hfmeQr/fiNa7042/0u8RB21nWGM5fOjwN4B9ZQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFH6zjhnDDxmvY3Fr+zYJzt8VFvoeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvNGMyNmQwN2EtNmExMC0z MjgzLWJjNGMtZDMzNTMxM2Y5ZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBQn3FdZQcz0qHRT15qqfpFh/Wn4LELwNSlYHVQJhnqRRDH RfH5Zp3okvu8PSQw481mzksybymMpgViEmc7dr63l7fud/SJx1CsujxdLY76l1Fm +vQUQG+NtkB94TPFNk0Cppk3BGNyMcpISxW+kXEUlf8d49wdpWDlEeMYvk4q/5XM QFQEXkw1LuP4oFrnPn2hTfx2v1LHIGi1Wc7bk6gkaKFswzGs0E2qlgILEsbjiSeT lhN0eFmmVYfa3hRiEhaCBvcKJ6ZzBpKrEDWZo3sQwCNKvvOIkUUww6v2KMjcOCNm 65d1DrHjdiPiyj8chvo5F+IfAK/PdZIPeK66lqKD -----END CERTIFICATE-----Generated at Fri Apr 17 15:03:58 2026 by rpki-client