$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa File: 80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa (raw, json) Hash identifier: F8B1WLv0zjt1wgm6g9xgzoC1PhkuVxEvSnl+UKYjySE= Subject key identifier: BE:C1:03:37:2B:2B:0D:6D:C1:9C:C9:CD:23:CD:AC:79:E8:35:D3:2E Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F432858491AA6D087848A8B6A72E19D00 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 6079 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:d0:87:84:8a:8b:6a:72:e1:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=e9bc856b-f9af-4b6d-ac32-0cfc41906c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ac:e1:cc:70:2a:76:01:b1:48:3e:b4:d9:f0: 62:80:b1:fc:a0:21:19:58:c7:c7:f4:c8:04:39:c8: 51:3f:05:31:dc:14:63:c0:51:37:cd:7d:6b:49:f2: bf:19:b7:14:48:0a:50:67:77:6b:35:d3:1e:62:48: 49:f7:af:c6:17:61:31:e6:75:87:06:f7:a9:22:ec: 73:9d:ae:e1:21:9b:05:f0:bf:ba:1a:68:80:19:80: 16:bb:37:fb:92:92:ca:c7:66:29:e0:ad:58:cd:eb: b4:59:cc:ba:54:a7:67:7c:fc:01:ae:c3:e2:41:ca: 56:6f:51:7c:1a:6a:52:57:b5:4a:7d:ba:b5:62:59: 8e:e5:12:b1:9a:fb:4e:c0:99:af:a9:cb:ad:ec:13: 88:b3:21:00:33:04:1c:01:f8:fa:1e:9a:cb:e2:cd: 7a:3d:37:ff:b9:a9:c7:a7:36:8c:6f:f8:bd:17:b3: 66:2b:fa:c2:59:0e:30:33:a7:df:4b:65:4b:b5:36: d6:01:98:42:ff:e2:40:dc:78:6e:f6:81:5e:d5:87: a8:17:6b:f0:54:c9:29:25:d8:8b:2d:cc:df:be:ef: 93:da:a8:29:f0:12:40:a8:90:7d:01:e4:fd:5b:8d: 70:98:1c:53:71:61:fe:40:c0:e1:66:ad:dd:ce:54: 41:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C1:03:37:2B:2B:0D:6D:C1:9C:C9:CD:23:CD:AC:79:E8:35:D3:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:50:b8:47:8c:e5:fb:13:c6:79:61:94:fc:c2:ff:a6:48:22: 05:81:eb:1d:58:a0:5e:6c:61:27:93:24:6b:0a:db:6a:36:e3: 28:99:66:fb:1b:0c:bd:98:46:9d:fc:fa:0e:45:bf:f6:bb:9e: 47:23:08:ca:67:b2:5d:18:0b:57:15:b0:34:82:3e:96:c2:e1: 97:52:4b:7b:a2:ca:23:f2:0c:1a:07:6e:ff:c6:29:36:39:e2: f2:f8:39:f5:0a:91:db:b1:85:aa:2c:45:ee:39:9e:52:0b:4b: 35:95:ce:48:2b:c9:df:06:7f:be:d7:d4:31:4e:75:7a:ba:c5: 39:c8:a9:27:36:e3:2a:10:db:66:ef:af:58:30:fd:a5:05:10: 06:ae:73:aa:18:3d:5c:72:7d:ab:11:8a:46:7d:f6:96:de:06: dd:95:f0:2a:ca:e5:88:2a:23:64:39:d8:26:c0:57:24:30:b9: fe:c6:8a:f1:cc:72:43:0a:17:09:a1:8d:72:5c:33:c9:64:ec: ad:bd:91:5a:05:fa:3b:78:7c:1c:38:57:7d:56:37:23:64:b3: 00:b7:ab:20:8a:a4:8f:4f:fd:66:b1:ec:d7:e9:24:39:bb:14: 53:27:e6:7e:58:77:e2:01:80:ce:65:26:01:36:df:94:90:07: b7:e1:f8:23 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEkaptCHhIqLanLhnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk ZTliYzg1NmItZjlhZi00YjZkLWFjMzItMGNmYzQxOTA2YzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwazhzHAqdgGxSD602fBigLH8oCEZWMfH9MgE OchRPwUx3BRjwFE3zX1rSfK/GbcUSApQZ3drNdMeYkhJ96/GF2Ex5nWHBvepIuxz na7hIZsF8L+6GmiAGYAWuzf7kpLKx2Yp4K1Yzeu0Wcy6VKdnfPwBrsPiQcpWb1F8 GmpSV7VKfbq1YlmO5RKxmvtOwJmvqcut7BOIsyEAMwQcAfj6HprL4s16PTf/uanH pzaMb/i9F7NmK/rCWQ4wM6ffS2VLtTbWAZhC/+JA3Hhu9oFe1YeoF2vwVMkpJdiL Lczfvu+T2qgp8BJAqJB9AeT9W41wmBxTcWH+QMDhZq3dzlRBYQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFL7BAzcrKw1twZzJzSPNrHnoNdMuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvODBmODA2NzMtODJiMC0z ODgwLThiZmUtMWY3Y2Q2ZDAyNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAjULhHjOX7E8Z5YZT8wv+mSCIFgesdWKBebGEnkyRrCttq NuMomWb7Gwy9mEad/PoORb/2u55HIwjKZ7JdGAtXFbA0gj6WwuGXUkt7osoj8gwa B27/xik2OeLy+Dn1CpHbsYWqLEXuOZ5SC0s1lc5IK8nfBn++19QxTnV6usU5yKkn NuMqENtm769YMP2lBRAGrnOqGD1ccn2rEYpGffaW3gbdlfAqyuWIKiNkOdgmwFck MLn+xorxzHJDChcJoY1yXDPJZOytvZFaBfo7eHwcOFd9VjcjZLMAt6sgiqSPT/1m sezX6SQ5uxRTJ+Z+WHfiAYDOZSYBNt+UkAe34fgj -----END CERTIFICATE-----Generated at Sun Apr 27 01:37:11 2025 by rpki-client