$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa File: 80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa (raw, json) Hash identifier: Sw7/D+mY39YGnov3zDHRy/+3NAGeaIy0UiPtpfyTvyg= Subject key identifier: FB:5F:BF:F0:98:88:C5:85:36:28:97:CF:0D:BD:0A:EF:E1:DE:9F:40 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584C9C31B880ED8155DF4DF5B440 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa Signing time: Thu 22 Jan 2026 14:00:37 +0000 ROA not before: Thu 22 Jan 2026 14:00:37 +0000 ROA not after: Wed 22 Apr 2026 13:00:37 +0000 asID: 6079 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9c:31:b8:80:ed:81:55:df:4d:f5:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Jan 22 14:00:37 2026 GMT Not After : Apr 22 13:00:37 2026 GMT Subject: CN=0d77cc65-3358-43ef-9438-2f1c3a84e4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4f:6f:8e:0f:26:f4:00:d0:2c:f8:2a:5b:30: 7a:be:07:14:de:ca:d0:23:1b:fa:24:4b:dd:29:42: 6d:20:a7:a1:fd:a3:f5:bf:60:ad:4a:ed:b5:cd:03: 07:d2:86:e0:73:e8:5c:6f:0d:89:b0:19:fc:c8:89: 0c:a9:f5:3e:f9:d9:15:d9:80:ef:00:2a:6e:9d:d4: 86:0a:e0:fa:22:14:d7:ca:47:de:2b:bf:03:53:8d: 24:89:9c:a7:e9:72:e0:00:50:9f:5c:d7:e6:94:6c: c1:5f:21:75:13:82:f7:f6:b4:96:40:0d:3a:b5:95: b9:31:c3:3b:ac:a3:2c:20:e5:93:e1:c1:7a:ba:90: 7b:f4:26:7a:e2:ef:e7:65:ca:72:6c:d2:f7:1b:fe: 2a:f7:c2:fd:57:f7:f9:54:5c:d5:a8:c8:5d:f2:b1: d0:f2:cc:b5:2e:14:a9:7c:07:f7:12:3e:5c:79:b9: 6d:54:97:35:78:87:3a:92:c6:ea:09:d8:1d:74:f3: cc:fd:5b:80:fc:18:c9:ca:ce:98:a5:65:54:49:19: 91:d4:08:ac:51:c6:19:fc:48:56:d7:11:62:8b:33: 80:56:bf:93:93:1b:50:54:e1:fe:78:4c:54:71:a9: 52:61:36:ec:10:2c:aa:a8:b0:42:ed:a1:63:58:ac: c7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5F:BF:F0:98:88:C5:85:36:28:97:CF:0D:BD:0A:EF:E1:DE:9F:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/80f80673-82b0-3880-8bfe-1f7cd6d0251e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:00:7c:6d:e8:a3:be:a0:69:ea:45:7f:ce:30:b5:22:02:d6: 81:05:e2:40:e1:3d:59:d1:ba:c9:cc:65:62:a5:ab:bc:00:75: a0:99:30:a1:0f:d3:6e:56:fd:5d:8c:68:8c:d1:24:f4:a2:d7: b0:3a:a7:04:d9:6a:5d:0a:d4:3f:34:48:5c:a1:b2:62:3d:26: 58:fd:a4:a6:41:ea:8a:a2:08:b6:bf:06:bd:5d:37:93:38:bd: 24:52:a1:0d:15:88:de:8a:60:d3:53:ed:aa:2c:f4:46:03:a3: 04:5f:2c:58:9a:36:fe:98:8f:7e:93:50:46:8e:40:08:f6:98: 3d:d8:e6:27:34:a6:44:3f:8e:c6:b5:a9:3b:03:6f:b1:de:cc: 81:19:04:1e:b8:8b:11:56:fe:ad:96:b2:3d:2c:88:4d:ce:e5: 16:6f:d3:83:f0:71:57:81:b5:50:8c:7e:8a:f1:d5:fa:bd:ab: 0d:2d:9e:f8:ac:95:a0:02:bb:10:a4:6a:c2:05:c7:75:0e:7a: 77:46:ac:6b:d6:4a:8c:5b:d0:8f:1a:a2:a1:fa:1c:c0:d1:a5: b8:15:03:d3:09:c8:9e:4b:6c:d1:d7:46:69:9a:31:36:4f:cd: dc:2a:ed:41:a5:76:a0:2e:89:ba:6c:e4:50:a1:54:9c:77:f1: 7b:53:01:18 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEycMbiA7YFV3031tEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk MGQ3N2NjNjUtMzM1OC00M2VmLTk0MzgtMmYxYzNhODRlNGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk9vjg8m9ADQLPgqWzB6vgcU3srQIxv6JEvd KUJtIKeh/aP1v2CtSu21zQMH0obgc+hcbw2JsBn8yIkMqfU++dkV2YDvACpundSG CuD6IhTXykfeK78DU40kiZyn6XLgAFCfXNfmlGzBXyF1E4L39rSWQA06tZW5McM7 rKMsIOWT4cF6upB79CZ64u/nZcpybNL3G/4q98L9V/f5VFzVqMhd8rHQ8sy1LhSp fAf3Ej5cebltVJc1eIc6ksbqCdgddPPM/VuA/BjJys6YpWVUSRmR1AisUcYZ/EhW 1xFiizOAVr+TkxtQVOH+eExUcalSYTbsECyqqLBC7aFjWKzHawIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFPtfv/CYiMWFNiiXzw29Cu/h3p9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvODBmODA2NzMtODJiMC0z ODgwLThiZmUtMWY3Y2Q2ZDAyNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQA8AHxt6KO+oGnqRX/OMLUiAtaBBeJA4T1Z0brJzGVipau8 AHWgmTChD9NuVv1djGiM0ST0otewOqcE2WpdCtQ/NEhcobJiPSZY/aSmQeqKogi2 vwa9XTeTOL0kUqENFYjeimDTU+2qLPRGA6MEXyxYmjb+mI9+k1BGjkAI9pg92OYn NKZEP47Gtak7A2+x3syBGQQeuIsRVv6tlrI9LIhNzuUWb9OD8HFXgbVQjH6K8dX6 vasNLZ74rJWgArsQpGrCBcd1Dnp3Rqxr1kqMW9CPGqKh+hzA0aW4FQPTCcieS2zR 10ZpmjE2T83cKu1BpXagLom6bORQoVScd/F7UwEY -----END CERTIFICATE-----Generated at Mon Mar 2 03:13:24 2026 by rpki-client