$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d9a7402a-c4dd-3778-9808-b7317aeceb81.roa File: d9a7402a-c4dd-3778-9808-b7317aeceb81.roa (raw, json) Hash identifier: ukPYBXbmxF9WNuPfqmKQooYzKZzTrjVYcSByI0eXBKg= Subject key identifier: 29:49:FB:86:2C:A8:A2:1A:C9:CA:FA:B5:13:4E:34:F3:4C:C9:88:6C Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584A07D5217C5523465D4D618C00 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d9a7402a-c4dd-3778-9808-b7317aeceb81.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 42689 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:21:7c:55:23:46:5d:4d:61:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=872fa57a-c909-4a88-abfe-1945e3bc36d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c0:40:ca:8d:f7:af:0d:4d:37:4c:be:26:b0: 6f:3c:47:68:ba:ec:d7:d0:56:2d:58:54:5f:c8:19: 3f:78:aa:f9:40:53:d4:28:15:df:f3:b7:8d:4d:d4: 00:00:05:3a:39:0e:f1:41:cd:18:15:3a:54:3b:b1: 77:1d:88:d1:4e:e0:e4:f4:b6:8f:e5:9d:96:4e:84: 76:4d:69:44:9f:37:68:23:e5:b1:6c:ab:e7:ac:de: 95:94:7c:77:8c:f5:1a:60:df:a9:5f:54:d6:42:01: 8a:6b:66:cc:ec:a0:31:9b:0d:98:4e:b8:8c:39:55: 10:d2:a6:e0:f0:e1:8d:ca:b3:46:b6:6c:24:da:ac: a3:b2:1d:ba:1a:5d:2a:93:c0:bb:b0:d6:68:e3:68: e4:63:01:ed:9a:e5:84:28:98:dd:c6:fb:30:32:bc: ad:9d:c7:b0:01:53:3b:59:31:cc:45:03:f5:c7:dc: 9b:06:c2:19:60:12:d5:20:20:22:ac:32:10:3e:85: dd:8e:a4:48:91:15:ff:bb:48:36:66:f1:db:eb:6b: c6:16:fe:c1:60:23:7f:63:ab:4a:01:dc:cb:1a:bf: f2:e1:db:ff:b3:88:63:53:13:5d:f7:ea:27:66:e9: c5:3b:46:7b:27:10:0e:1c:4c:46:c1:1a:0d:01:44: bd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:49:FB:86:2C:A8:A2:1A:C9:CA:FA:B5:13:4E:34:F3:4C:C9:88:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d9a7402a-c4dd-3778-9808-b7317aeceb81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d2:c2:f3:eb:57:bb:4d:0e:b1:ff:4a:44:28:a8:84:17:a4: 2c:42:e1:6c:b0:b4:e0:26:35:16:14:d8:a8:d3:c2:b4:17:9d: a8:08:c3:de:b1:ac:c3:ac:c4:19:5d:03:fd:99:0c:89:2d:af: c1:81:db:2c:99:70:7a:8e:14:c6:8a:63:16:49:42:3d:dd:38: 97:ed:d1:0c:d6:50:5a:c0:86:f2:c6:f2:c4:93:bf:b2:7e:f3: 4e:75:45:47:f5:35:ef:5a:8a:80:09:9f:c0:9d:8b:a1:bb:d0: b6:d7:cf:13:19:50:6d:71:c4:49:5f:84:ad:cc:e5:d0:42:21: f9:6d:2e:db:8d:d9:3a:e6:f5:56:51:43:4e:40:3b:53:69:af: fd:66:01:75:88:84:11:04:33:08:ed:68:ab:6b:4d:d2:5a:fc: 98:a3:3d:0a:f2:03:27:d0:14:12:29:24:4d:f4:e1:83:15:0a: 15:18:b8:94:63:1b:89:07:f0:d9:94:e5:af:81:e7:1a:d2:51: 07:eb:89:19:ad:88:9e:27:50:66:18:ac:cc:7b:1f:c7:79:7c: 79:12:8b:a7:34:db:d5:b9:ba:b7:66:98:9b:bd:34:65:8e:ed: a1:40:a1:65:08:1a:1e:0d:3c:87:b4:6e:b8:6e:9e:43:e5:5b: a3:41:41:f5 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEoH1SF8VSNGXU1hjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk ODcyZmE1N2EtYzkwOS00YTg4LWFiZmUtMTk0NWUzYmMzNmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58BAyo33rw1NN0y+JrBvPEdouuzX0FYtWFRf yBk/eKr5QFPUKBXf87eNTdQAAAU6OQ7xQc0YFTpUO7F3HYjRTuDk9LaP5Z2WToR2 TWlEnzdoI+WxbKvnrN6VlHx3jPUaYN+pX1TWQgGKa2bM7KAxmw2YTriMOVUQ0qbg 8OGNyrNGtmwk2qyjsh26Gl0qk8C7sNZo42jkYwHtmuWEKJjdxvswMrytncewAVM7 WTHMRQP1x9ybBsIZYBLVICAirDIQPoXdjqRIkRX/u0g2ZvHb62vGFv7BYCN/Y6tK AdzLGr/y4dv/s4hjUxNd9+onZunFO0Z7JxAOHExGwRoNAUS93QIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFClJ+4YsqKIaycr6tRNONPNMyYhsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvZDlhNzQwMmEtYzRkZC0z Nzc4LTk4MDgtYjczMTdhZWNlYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBh0sLz61e7TQ6x/0pEKKiEF6QsQuFssLTgJjUWFNio08K0 F52oCMPesazDrMQZXQP9mQyJLa/BgdssmXB6jhTGimMWSUI93TiX7dEM1lBawIby xvLEk7+yfvNOdUVH9TXvWoqACZ/AnYuhu9C2188TGVBtccRJX4StzOXQQiH5bS7b jdk65vVWUUNOQDtTaa/9ZgF1iIQRBDMI7Wira03SWvyYoz0K8gMn0BQSKSRN9OGD FQoVGLiUYxuJB/DZlOWvgeca0lEH64kZrYieJ1BmGKzMex/HeXx5EounNNvVubq3 ZpibvTRlju2hQKFlCBoeDTyHtG64bp5D5VujQUH1 -----END CERTIFICATE-----Generated at Mon Jun 16 14:53:04 2025 by rpki-client