$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa File: 80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa (raw, json) Hash identifier: Hgr7pp3WGbD1e1X979mtw92ZEn13IcMa35s7eSEz7GQ= Subject key identifier: D9:F1:53:31:FE:4E:C5:F5:E7:8F:94:0F:F2:F5:A5:A3:BA:8B:D8:06 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584D7CCFDA7DAA487041FF0AC760 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 6079 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:da:7d:aa:48:70:41:ff:0a:c7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=7bc20971-b41c-4bdb-adfe-2767c6fd1686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3d:af:aa:4d:69:e9:30:64:6c:4d:27:8d:77: 27:b9:4e:0e:a5:56:7e:be:b6:14:c5:b2:08:10:c7: 10:ee:57:cd:63:3e:f5:7d:eb:e1:72:71:98:89:0b: 18:81:65:5f:f4:52:87:d0:a5:55:c4:59:32:5f:e2: eb:24:52:dd:a1:d7:5f:3e:03:c3:d8:b2:a0:3c:6e: 0c:03:40:50:d2:71:70:7a:e5:da:fb:60:61:fa:aa: 0d:31:eb:59:41:a6:40:48:0e:c6:ac:31:74:62:10: 35:51:e0:82:13:c9:ed:02:3e:95:ae:f4:fc:cd:f5: f1:00:cb:5a:46:5a:0c:cd:a5:72:5b:b3:d8:67:a7: b8:45:e0:d2:7b:ab:62:3e:37:1e:39:9a:50:6f:eb: 19:7e:cd:82:50:e3:75:c4:e5:ee:17:fc:59:ad:c2: a4:9f:bb:dc:d4:f0:07:af:de:b6:46:95:4f:15:ae: 4e:03:95:b0:54:fc:4d:ab:fa:14:1a:3a:c8:97:e9: 48:84:65:92:90:4f:9d:f1:24:4f:ad:d7:ab:1c:8c: 22:55:d9:28:36:84:2f:8d:7e:78:6a:1b:1f:33:0e: 9a:57:9b:3a:aa:c4:51:de:a5:0b:22:0f:d6:7d:4e: 64:07:0f:65:a8:79:0e:dc:99:59:e8:59:1c:a9:18: 64:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F1:53:31:FE:4E:C5:F5:E7:8F:94:0F:F2:F5:A5:A3:BA:8B:D8:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ff:6d:c6:e1:2f:0a:1b:4e:4f:60:be:f4:0f:02:f7:fe:56: 39:c3:72:b4:00:9c:21:cd:b9:1b:a4:de:b7:a4:d3:3d:57:da: 0e:42:dd:91:66:1a:b0:34:46:83:ae:7a:c0:ae:3d:9e:b4:e8: 93:fb:30:2d:df:2a:4a:92:69:26:dd:5d:7c:b8:b3:4d:d2:3f: 44:bf:25:7a:d1:ad:cc:f0:7a:41:d5:5f:c1:fb:ac:19:60:3c: 1a:21:58:d3:b1:ef:6c:b7:74:86:5d:7c:16:3d:c4:ba:95:7f: 23:95:a5:61:c8:47:7c:b5:e4:3d:b2:bf:e4:69:fa:98:39:8b: b2:d6:3f:f4:28:1a:d6:20:8c:fc:52:c2:76:cd:3d:df:0c:70: fe:0c:c9:ab:2b:0a:79:54:08:e8:c1:4f:0e:24:87:3c:9b:f8: d0:3a:4f:37:2b:f6:d3:64:3a:77:8d:e7:96:b9:08:84:b4:f4: bc:c4:b9:6c:9a:86:73:b7:bc:42:db:1a:ec:83:b0:ac:db:1d: 32:46:29:e4:f3:ff:43:90:4e:9b:f9:b2:46:d3:43:3e:c7:be: ec:24:92:57:ca:bf:0f:f5:11:b3:02:f6:fd:bd:44:5f:54:cb: 28:1f:7c:1f:98:79:fd:0a:67:f9:27:af:ef:aa:56:8d:16:fb: fa:04:4a:d4 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE18z9p9qkhwQf8Kx2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk N2JjMjA5NzEtYjQxYy00YmRiLWFkZmUtMjc2N2M2ZmQxNjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj2vqk1p6TBkbE0njXcnuU4OpVZ+vrYUxbII EMcQ7lfNYz71fevhcnGYiQsYgWVf9FKH0KVVxFkyX+LrJFLdoddfPgPD2LKgPG4M A0BQ0nFweuXa+2Bh+qoNMetZQaZASA7GrDF0YhA1UeCCE8ntAj6VrvT8zfXxAMta RloMzaVyW7PYZ6e4ReDSe6tiPjceOZpQb+sZfs2CUON1xOXuF/xZrcKkn7vc1PAH r962RpVPFa5OA5WwVPxNq/oUGjrIl+lIhGWSkE+d8SRPrderHIwiVdkoNoQvjX54 ahsfMw6aV5s6qsRR3qULIg/WfU5kBw9lqHkO3JlZ6FkcqRhk3QIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFNnxUzH+TsX154+UD/L1paO6i9gGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvODBmODA2NzMtODJiMC0z ODgwLThiZmUtMWY3Y2Q2ZDAyNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQB3/23G4S8KG05PYL70DwL3/lY5w3K0AJwhzbkbpN63pNM9 V9oOQt2RZhqwNEaDrnrArj2etOiT+zAt3ypKkmkm3V18uLNN0j9EvyV60a3M8HpB 1V/B+6wZYDwaIVjTse9st3SGXXwWPcS6lX8jlaVhyEd8teQ9sr/kafqYOYuy1j/0 KBrWIIz8UsJ2zT3fDHD+DMmrKwp5VAjowU8OJIc8m/jQOk83K/bTZDp3jeeWuQiE tPS8xLlsmoZzt7xC2xrsg7Cs2x0yRink8/9DkE6b+bJG00M+x77sJJJXyr8P9RGz Avb9vURfVMsoH3wfmHn9Cmf5J6/vqlaNFvv6BErU -----END CERTIFICATE-----Generated at Fri Apr 17 15:00:50 2026 by rpki-client