$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d4a09bdc-1a34-32e9-95c1-afcba7627345.roa File: d4a09bdc-1a34-32e9-95c1-afcba7627345.roa (raw, json) Hash identifier: 7BgAn6zOb1ACu6icvw2DfKZ5nbQ6bJ9VvrQRQStSvBc= Subject key identifier: 33:65:44:DF:35:09:A5:DA:62:A6:1D:14:AC:64:11:E9:D4:87:2D:E6 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584A96368A4A9084AD708340BD00 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d4a09bdc-1a34-32e9-95c1-afcba7627345.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 701 IP address blocks: 81.199.64.0/20 maxlen: 24 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:8a:4a:90:84:ad:70:83:40:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=79125b1c-8c0b-4e99-83e8-3a311c54ceed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:91:bf:4c:e5:1d:ee:1b:6c:19:97:2a:b8:12: c6:51:8e:0e:ed:67:c8:ac:f5:ff:28:a5:dd:f6:aa: fc:84:20:f3:0d:a6:2d:df:d6:9b:8b:d3:f2:23:da: 81:45:19:07:5e:3d:f2:44:08:9f:aa:d4:cd:3b:f0: f9:c0:7e:05:17:c0:9e:a4:52:77:71:eb:72:c9:83: 79:6b:1c:13:05:c2:fd:d4:66:39:11:8d:b7:9b:7c: b0:8e:af:c5:7c:fb:d0:8f:3e:01:48:54:57:88:68: ea:c1:bb:ed:d6:e7:c6:24:3e:d2:10:ee:cd:41:36: 8d:e4:22:3b:91:08:9e:f6:5f:c9:bc:9f:8b:7d:a4: 25:b9:a9:17:da:cf:9a:e9:8e:c1:fc:8f:26:e7:ca: f5:4f:83:d3:30:d9:08:43:8e:f0:00:bc:f6:f2:f0: 5e:f5:04:dd:cb:8d:90:a8:36:f4:cd:c0:10:59:a2: 12:cb:9c:9a:2b:9f:e7:15:b5:4d:e6:d3:5d:01:af: 94:1b:dd:41:66:9a:65:a3:51:1a:a3:36:b6:93:ef: 2e:7b:fc:c3:0a:76:39:00:ec:a0:74:e6:d7:5f:4c: 87:72:36:78:e8:6e:9c:14:36:cb:ab:b8:0c:27:5d: 2a:f3:24:58:c8:51:dd:fd:e3:b6:9b:db:1a:90:06: 9c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:65:44:DF:35:09:A5:DA:62:A6:1D:14:AC:64:11:E9:D4:87:2D:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d4a09bdc-1a34-32e9-95c1-afcba7627345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 81.199.64.0/20 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:b2:6d:6b:1b:21:11:2d:76:b9:ad:48:d4:07:73:42:cb:d1: 60:ae:18:aa:91:5d:64:6b:05:5e:0b:4b:9b:6f:9f:6a:c0:cc: e4:8e:e6:4f:c4:e1:9f:5e:13:06:fb:3e:f5:45:f3:24:8f:db: e3:9c:c3:50:4a:7a:4e:2c:80:94:c7:3a:24:58:bb:6f:f0:fb: 05:91:53:15:44:c1:59:37:91:13:2b:8b:8f:fc:1a:7f:2f:0d: 8d:1d:bd:d5:56:47:3c:54:e8:a7:77:a3:52:5e:7f:a3:72:c4: 1d:3f:db:1b:d7:66:65:ba:4d:34:46:10:14:9f:be:c7:de:62: 89:89:78:ec:13:82:4d:3e:63:80:8b:a8:92:8a:ae:b3:8a:11: de:d9:c9:17:70:84:1c:98:55:15:1a:3e:0a:8f:92:b4:a5:7f: 25:a7:56:66:a2:ad:17:85:7a:74:32:6a:f9:f1:06:ad:41:90: 55:11:01:23:e7:37:ed:e4:9f:05:61:99:f5:6f:2c:c7:7f:6a: 0b:9b:3a:ce:3f:08:41:80:53:de:9a:2a:c5:62:0f:86:37:25: 75:18:2c:af:3b:39:5c:cd:50:e0:13:70:a8:d7:a0:ad:77:87: 4c:86:ff:d5:95:e3:e3:a7:22:5b:21:1f:1b:a0:f3:b4:ae:53: a8:fc:ed:8e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqWNopKkIStcINAvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk NzkxMjViMWMtOGMwYi00ZTk5LTgzZTgtM2EzMTFjNTRjZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpG/TOUd7htsGZcquBLGUY4O7WfIrPX/KKXd 9qr8hCDzDaYt39abi9PyI9qBRRkHXj3yRAifqtTNO/D5wH4FF8CepFJ3cetyyYN5 axwTBcL91GY5EY23m3ywjq/FfPvQjz4BSFRXiGjqwbvt1ufGJD7SEO7NQTaN5CI7 kQie9l/JvJ+LfaQluakX2s+a6Y7B/I8m58r1T4PTMNkIQ47wALz28vBe9QTdy42Q qDb0zcAQWaISy5yaK5/nFbVN5tNdAa+UG91BZpplo1Eaoza2k+8ue/zDCnY5AOyg dObXX0yHcjZ46G6cFDbLq7gMJ10q8yRYyFHd/eO2m9sakAac6QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDNlRN81CaXaYqYdFKxkEenUhy3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvZDRhMDliZGMtMWEzNC0z MmU5LTk1YzEtYWZjYmE3NjI3MzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQEUcdAMAsD BAR5W9ADAwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQANsm1rGyERLXa5rUjUB3NCy9FgrhiqkV1kawVe C0ubb59qwMzkjuZPxOGfXhMG+z71RfMkj9vjnMNQSnpOLICUxzokWLtv8PsFkVMV RMFZN5ETK4uP/Bp/Lw2NHb3VVkc8VOind6NSXn+jcsQdP9sb12Zluk00RhAUn77H 3mKJiXjsE4JNPmOAi6iSiq6zihHe2ckXcIQcmFUVGj4Kj5K0pX8lp1Zmoq0XhXp0 Mmr58QatQZBVEQEj5zft5J8FYZn1byzHf2oLmzrOPwhBgFPemirFYg+GNyV1GCyv OzlczVDgE3Co16Ctd4dMhv/VlePjpyJbIR8boPO0rlOo/O2O -----END CERTIFICATE-----Generated at Thu Aug 7 01:22:07 2025 by rpki-client