$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d9a7402a-c4dd-3778-9808-b7317aeceb81.roa File: d9a7402a-c4dd-3778-9808-b7317aeceb81.roa (raw, json) Hash identifier: obCNrI2AL0RSQj4H8W//cvNW35+ASROS+yf/4BVyDeI= Subject key identifier: 8F:BF:73:3F:5F:FA:38:17:D0:43:C0:D5:41:F2:3B:69:B6:AC:B0:3D Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584CAA2731CBB857ED5FFC2C3475 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d9a7402a-c4dd-3778-9808-b7317aeceb81.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 42689 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:31:cb:b8:57:ed:5f:fc:2c:34:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=a976a698-4b88-4e3d-aafe-6023431556dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4b:23:5e:e5:e6:37:88:7d:48:65:45:35:a7: ed:4f:d5:0a:da:75:21:9b:df:b5:3e:63:ef:9c:b3: 8f:24:d6:5e:3e:1e:de:1b:24:75:49:e1:71:30:e9: bb:58:8a:93:7c:5d:62:32:84:e9:1a:f3:c6:b9:51: 35:de:6d:99:11:72:37:ed:ef:29:4e:bb:f5:87:7d: 43:16:db:3b:27:c9:3b:5b:f3:3a:05:92:b7:b8:45: cb:51:ee:65:63:99:88:3c:0f:a6:92:46:aa:a3:c0: a2:21:45:d6:b8:37:e2:01:3d:b0:03:7c:fe:20:3e: 17:24:98:35:15:bf:67:86:1f:87:ed:c7:d6:8b:6b: df:89:7e:e0:35:d6:4a:4e:d0:fc:f4:4c:3f:92:3d: eb:a7:75:46:87:2f:b2:32:fc:af:09:bd:a4:91:0e: 5f:5a:17:0b:48:57:1c:96:6c:35:1d:01:e7:65:14: 4d:d8:ad:65:27:a3:6c:9d:30:a1:ed:96:da:01:1b: 08:6b:72:4a:54:b7:17:25:49:91:71:4c:96:9e:0a: c2:13:bd:9a:7e:da:89:4f:72:c3:d4:ce:2e:32:d1: 8c:ce:c9:93:93:59:8a:16:80:f6:c0:26:1c:21:4e: 28:15:56:f8:28:96:39:76:0c:c2:4a:db:ba:e4:b1: 6b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BF:73:3F:5F:FA:38:17:D0:43:C0:D5:41:F2:3B:69:B6:AC:B0:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d9a7402a-c4dd-3778-9808-b7317aeceb81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e6:05:14:c0:1c:4b:7d:e9:7b:8b:d3:ca:87:1b:7a:c3:25: c8:32:4e:2e:8d:3b:40:62:2a:69:16:29:89:85:76:67:62:42: 75:4d:c6:88:e4:47:f3:af:2e:c8:a3:ed:e8:89:72:21:8d:36: 4a:4e:26:8e:14:78:df:72:8c:84:35:58:04:b0:75:8f:8c:1d: 9f:ee:6a:e0:83:78:11:9b:a9:dd:82:7b:1d:d1:de:2f:d1:d6: 17:65:0f:8a:8d:9d:5d:ed:7b:b2:93:b5:3f:9d:46:5f:69:1d: 83:2e:a3:fe:3a:0b:f4:3c:2a:b8:22:0e:88:ca:02:6b:db:a0: db:7c:4b:17:06:a0:2a:e4:00:e1:6d:b5:12:69:43:e3:5c:4d: a4:ae:22:25:96:fe:ea:18:b1:28:a7:40:4c:4f:a8:c3:d9:6e: 26:a2:e1:33:28:99:45:9b:80:75:62:c7:ed:5c:b6:48:a3:c3: e1:37:1b:be:89:45:6f:a0:5c:87:2d:f1:10:55:74:c6:3d:54: b7:43:c9:71:ad:21:9d:5a:b0:1f:44:e3:0f:90:5a:ae:8f:63: 5f:79:fb:4d:9f:0f:b9:de:57:3b:c5:59:3c:56:86:fc:c2:7b: a6:e5:0f:91:0b:ce:f9:1b:ea:9b:7a:5c:6d:b4:bd:e7:25:47: 77:cc:9d:a5 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEyqJzHLuFftX/wsNHUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk YTk3NmE2OTgtNGI4OC00ZTNkLWFhZmUtNjAyMzQzMTU1NmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UsjXuXmN4h9SGVFNaftT9UK2nUhm9+1PmPv nLOPJNZePh7eGyR1SeFxMOm7WIqTfF1iMoTpGvPGuVE13m2ZEXI37e8pTrv1h31D Fts7J8k7W/M6BZK3uEXLUe5lY5mIPA+mkkaqo8CiIUXWuDfiAT2wA3z+ID4XJJg1 Fb9nhh+H7cfWi2vfiX7gNdZKTtD89Ew/kj3rp3VGhy+yMvyvCb2kkQ5fWhcLSFcc lmw1HQHnZRRN2K1lJ6NsnTCh7ZbaARsIa3JKVLcXJUmRcUyWngrCE72aftqJT3LD 1M4uMtGMzsmTk1mKFoD2wCYcIU4oFVb4KJY5dgzCStu65LFrAwIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFI+/cz9f+jgX0EPA1UHyO2m2rLA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvZDlhNzQwMmEtYzRkZC0z Nzc4LTk4MDgtYjczMTdhZWNlYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQA25gUUwBxLfel7i9PKhxt6wyXIMk4ujTtAYippFimJhXZn YkJ1TcaI5Efzry7Io+3oiXIhjTZKTiaOFHjfcoyENVgEsHWPjB2f7mrgg3gRm6nd gnsd0d4v0dYXZQ+KjZ1d7Xuyk7U/nUZfaR2DLqP+Ogv0PCq4Ig6IygJr26DbfEsX BqAq5ADhbbUSaUPjXE2kriIllv7qGLEop0BMT6jD2W4mouEzKJlFm4B1YsftXLZI o8PhNxu+iUVvoFyHLfEQVXTGPVS3Q8lxrSGdWrAfROMPkFquj2NfeftNnw+53lc7 xVk8Vob8wnum5Q+RC875G+qbelxttL3nJUd3zJ2l -----END CERTIFICATE-----Generated at Mon Mar 2 12:18:28 2026 by rpki-client