$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa File: 80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa (raw, json) Hash identifier: CQXxj3djy5MkqJFqfxDDd1qzMDHKt5sY+fXcidZ/CZ0= Subject key identifier: FB:37:13:5F:A6:CF:5D:FD:DB:AE:E8:A7:54:01:91:D8:F3:FC:43:58 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584BBB7596A015AA10D4A6DC3700 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 6079 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:96:a0:15:aa:10:d4:a6:dc:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=b9ea2c6f-f363-4baf-9f7a-35434fec1a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:71:48:78:c2:37:c6:1b:1e:df:54:04:30:ce: b0:d6:5e:54:df:63:ab:6a:2b:3a:49:50:f7:77:0f: 66:75:f3:15:32:fb:89:c3:47:55:f8:af:dd:61:52: 85:59:dd:6a:d8:42:6b:61:4d:35:f5:1d:50:a2:07: f1:4e:49:e9:00:f4:c6:10:6d:37:9c:83:06:0a:1b: f3:54:83:23:cb:b6:93:ad:a5:c1:34:93:15:b6:2f: f2:09:c2:7e:e6:25:a4:39:89:1e:f1:7a:d4:f4:1f: da:f8:03:6f:c7:1f:7e:18:74:f8:09:70:fc:91:d4: 3b:df:20:f0:fb:96:2f:ab:4d:20:2c:a6:c3:30:fb: e3:38:93:6e:e7:62:b7:69:9d:c0:79:6a:f1:1e:89: 02:88:ec:7c:9b:f7:5d:7c:42:6e:43:5c:ce:35:15: d4:21:88:61:b4:26:5d:94:f9:b5:0a:a6:4c:dd:67: 16:72:63:db:7c:4e:0e:1a:58:fc:7d:68:d8:e4:21: ea:15:de:07:db:a4:6a:34:cc:f4:51:6c:05:f0:d3: 91:c9:ff:f7:6a:31:f3:15:63:7e:2c:04:c0:d6:02: 3a:81:b7:61:bf:f8:d3:10:d7:f3:9a:a7:73:d2:11: 62:27:35:45:e3:87:46:87:2d:8d:7d:4a:ce:6b:6f: df:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:37:13:5F:A6:CF:5D:FD:DB:AE:E8:A7:54:01:91:D8:F3:FC:43:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:65:c1:2b:4a:bd:3c:52:74:f5:67:c6:b6:56:72:06:97:75: 6c:f3:67:7e:62:14:a7:cf:65:eb:46:b7:13:84:96:73:97:c0: 87:ac:e5:8b:87:9c:ca:b5:35:ec:9e:b7:a1:ca:c0:16:7b:2f: a6:a0:4b:1e:87:97:8f:d7:6e:66:1e:19:86:a7:24:35:40:18: d6:71:72:74:a4:31:ea:3f:7b:bd:85:83:35:38:22:2f:04:21: 3e:f1:b0:b1:e0:02:0b:3c:90:47:80:17:8b:55:58:35:a6:97: d4:20:5f:10:cf:3e:ee:b4:af:41:40:18:dc:0c:86:49:b0:66: 81:95:57:a1:b7:05:83:92:71:f5:83:b3:37:09:2a:af:a3:ce: 0a:af:f7:dd:50:8e:79:67:31:fd:92:99:04:7a:c5:9c:da:be: 8c:70:3f:87:74:cd:48:4f:ac:26:7c:8c:0b:73:04:d5:8c:9a: fd:cd:28:8b:c9:25:49:fd:56:e0:87:52:65:63:b2:e7:b5:92: c2:70:a0:1a:ff:11:70:d4:39:d9:b5:ae:48:20:a2:44:53:09: 98:cc:da:33:f6:9e:f9:a2:54:a2:23:cb:7b:5a:d8:05:1f:5f: f3:5b:d6:22:35:68:ee:9a:ec:8d:65:01:22:f0:48:4e:8f:1a: 1c:2d:eb:30 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEu7dZagFaoQ1KbcNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk YjllYTJjNmYtZjM2My00YmFmLTlmN2EtMzU0MzRmZWMxYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nFIeMI3xhse31QEMM6w1l5U32Orais6SVD3 dw9mdfMVMvuJw0dV+K/dYVKFWd1q2EJrYU019R1QogfxTknpAPTGEG03nIMGChvz VIMjy7aTraXBNJMVti/yCcJ+5iWkOYke8XrU9B/a+ANvxx9+GHT4CXD8kdQ73yDw +5Yvq00gLKbDMPvjOJNu52K3aZ3AeWrxHokCiOx8m/ddfEJuQ1zONRXUIYhhtCZd lPm1CqZM3WcWcmPbfE4OGlj8fWjY5CHqFd4H26RqNMz0UWwF8NORyf/3ajHzFWN+ LATA1gI6gbdhv/jTENfzmqdz0hFiJzVF44dGhy2NfUrOa2/fHQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFPs3E1+mz139267op1QBkdjz/ENYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvODBmODA2NzMtODJiMC0z ODgwLThiZmUtMWY3Y2Q2ZDAyNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAzZcErSr08UnT1Z8a2VnIGl3Vs82d+YhSnz2XrRrcThJZz l8CHrOWLh5zKtTXsnrehysAWey+moEseh5eP125mHhmGpyQ1QBjWcXJ0pDHqP3u9 hYM1OCIvBCE+8bCx4AILPJBHgBeLVVg1ppfUIF8Qzz7utK9BQBjcDIZJsGaBlVeh twWDknH1g7M3CSqvo84Kr/fdUI55ZzH9kpkEesWc2r6McD+HdM1IT6wmfIwLcwTV jJr9zSiLySVJ/Vbgh1JlY7LntZLCcKAa/xFw1DnZta5IIKJEUwmYzNoz9p75olSi I8t7WtgFH1/zW9YiNWjumuyNZQEi8EhOjxocLesw -----END CERTIFICATE-----Generated at Tue Nov 4 16:41:18 2025 by rpki-client