$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/8631b3bd-0b55-3465-bbe8-646adfd8309c.roa File: 8631b3bd-0b55-3465-bbe8-646adfd8309c.roa (raw, json) Hash identifier: iwbHaFi0VegLbUU24xzDNjZOtVwN+9h5jSi4ZJ3aUjw= Subject key identifier: 10:8B:14:12:DC:BC:92:09:5E:1C:35:24:17:F6:B3:60:2B:0B:92:F7 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F43285849A35480774FE50E59B2D2D920 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/8631b3bd-0b55-3465-bbe8-646adfd8309c.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 398465 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:80:77:4f:e5:0e:59:b2:d2:d9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=68bbf790-3c95-4b76-9cab-0cd808781272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ff:a6:06:c3:4d:b1:94:f3:25:b1:fd:39:52: 79:f7:f5:d4:f1:9e:d9:22:b4:36:9d:ea:68:c6:8d: b9:09:30:10:5f:5e:87:8a:38:39:7f:e2:bc:7e:60: 36:fd:2a:43:47:71:b8:e0:a1:c6:84:1c:57:35:f0: 85:b0:5e:3d:40:89:dc:e6:e1:16:70:6a:e2:2f:4b: e3:18:40:58:61:17:b4:0d:43:f4:eb:76:8b:df:26: 85:88:df:a1:72:48:24:7e:dd:c7:75:e6:f0:2f:18: d6:d7:3f:13:25:29:fd:92:ad:d3:f6:9f:c1:50:1e: 2e:3b:a4:bf:53:ad:d2:a9:66:9f:d6:18:32:ae:73: d0:44:5e:7b:10:45:fc:6a:0f:a5:6d:b4:70:1b:af: cb:09:a4:4b:1f:0d:80:c2:03:60:46:44:03:7a:95: 8b:61:e4:7a:65:84:1c:ed:f8:82:58:90:17:42:2c: 35:5c:65:b9:dc:df:f7:55:46:26:57:b6:52:0e:d8: e7:47:c1:aa:e3:0e:af:72:af:34:48:bb:d6:e9:c3: 7e:e9:ef:f5:84:6b:50:71:09:be:d1:d4:62:cb:84: ff:0e:39:69:25:ad:26:0f:33:10:0c:e9:ce:70:5f: b5:4c:68:5e:0b:34:ea:83:16:9b:4d:3b:7e:a1:f8: e3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8B:14:12:DC:BC:92:09:5E:1C:35:24:17:F6:B3:60:2B:0B:92:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/8631b3bd-0b55-3465-bbe8-646adfd8309c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:1b:2b:7a:68:7f:fc:23:79:84:02:b9:59:5c:51:b8:e2:9d: af:a1:52:8b:fa:b2:f4:b9:db:6e:90:10:bf:4f:35:d3:ba:ee: 87:33:65:37:35:c5:15:b0:5f:47:60:ac:8b:20:6b:f5:11:1c: a4:58:70:41:24:86:63:37:f2:bd:73:99:42:a2:5d:15:b0:05: c5:74:e4:9e:29:8e:d1:ea:f5:08:74:8c:90:5c:5f:14:d1:cc: fc:7e:41:c8:76:ac:a1:b9:e6:ea:c6:6e:28:2e:0f:8d:76:6a: 55:04:10:a5:d6:22:52:17:54:5b:f5:7a:ad:0e:ab:42:1f:d2: d5:72:a9:c9:17:7f:11:5d:56:ba:c4:b7:95:aa:77:47:77:d9: 45:e0:ff:25:c7:b7:4e:62:18:04:4b:07:fc:84:8a:c6:21:2c: b7:e2:41:ae:b5:51:16:b7:a4:66:71:b0:a4:d1:3b:88:ec:f4: ae:46:2b:6a:f2:11:bf:37:cd:83:90:9c:1f:1f:a7:d9:e8:54: b9:e5:52:2f:7a:27:cc:45:d8:74:1c:91:b7:49:f0:af:f2:91: 04:ae:ab:c4:1b:40:0f:26:94:31:05:c6:4a:89:60:4b:bf:9d: f5:91:ce:d7:31:0f:54:01:6a:89:2d:13:0d:3c:04:eb:bb:f0: c6:da:e4:f0 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEmjVIB3T+UOWbLS2SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk NjhiYmY3OTAtM2M5NS00Yjc2LTljYWItMGNkODA4NzgxMjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/+mBsNNsZTzJbH9OVJ59/XU8Z7ZIrQ2nepo xo25CTAQX16Hijg5f+K8fmA2/SpDR3G44KHGhBxXNfCFsF49QInc5uEWcGriL0vj GEBYYRe0DUP063aL3yaFiN+hckgkft3HdebwLxjW1z8TJSn9kq3T9p/BUB4uO6S/ U63SqWaf1hgyrnPQRF57EEX8ag+lbbRwG6/LCaRLHw2AwgNgRkQDepWLYeR6ZYQc 7fiCWJAXQiw1XGW53N/3VUYmV7ZSDtjnR8Gq4w6vcq80SLvW6cN+6e/1hGtQcQm+ 0dRiy4T/DjlpJa0mDzMQDOnOcF+1TGheCzTqgxabTTt+ofjjJwIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFBCLFBLcvJIJXhw1JBf2s2ArC5L3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvODYzMWIzYmQtMGI1NS0z NDY1LWJiZTgtNjQ2YWRmZDgzMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQB4Gyt6aH/8I3mEArlZXFG44p2voVKL+rL0udtukBC/TzXT uu6HM2U3NcUVsF9HYKyLIGv1ERykWHBBJIZjN/K9c5lCol0VsAXFdOSeKY7R6vUI dIyQXF8U0cz8fkHIdqyhuebqxm4oLg+NdmpVBBCl1iJSF1Rb9XqtDqtCH9LVcqnJ F38RXVa6xLeVqndHd9lF4P8lx7dOYhgESwf8hIrGISy34kGutVEWt6RmcbCk0TuI 7PSuRitq8hG/N82DkJwfH6fZ6FS55VIveifMRdh0HJG3SfCv8pEErqvEG0APJpQx BcZKiWBLv531kc7XMQ9UAWqJLRMNPATru/DG2uTw -----END CERTIFICATE-----Generated at Sat Apr 26 16:30:55 2025 by rpki-client