$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/1cc0d284-01c5-349a-bb5e-bfbfdae46623.roa File: 1cc0d284-01c5-349a-bb5e-bfbfdae46623.roa (raw, json) Hash identifier: XMnLB2oRFH0jffEyWXD7ipHif8fGVn9w5ohP+4Gb2Fo= Subject key identifier: D7:C0:1B:6C:89:77:AD:0A:50:37:CD:73:A8:CE:8A:7C:FD:56:FE:70 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584A7D15E3FEE567634F0E6EC2CC Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/1cc0d284-01c5-349a-bb5e-bfbfdae46623.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 9304 IP address blocks: 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:15:e3:fe:e5:67:63:4f:0e:6e:c2:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=9b6186ae-7d82-4e8e-8fcf-45f8aa7ff2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:66:68:d8:bb:2d:df:a9:95:bd:c8:38:24:70: c6:63:2b:c0:35:e8:3b:1e:72:74:5b:40:9e:da:9e: 1a:d8:f9:0b:b5:e4:ac:9c:9e:ac:7b:92:e5:80:d9: 19:72:b0:ba:d2:41:3f:42:63:0f:5e:07:0f:97:87: af:21:53:86:ac:5f:be:2e:52:7c:24:fd:62:a6:3e: f6:c2:ee:24:42:22:6a:e4:f7:ff:5b:e6:77:a7:49: 60:46:75:78:33:85:43:f9:76:92:be:a5:d7:ba:0e: b1:77:9f:11:ec:29:69:5c:6d:cd:1f:20:48:73:f7: 01:3d:0c:86:2a:53:2b:a9:c0:9a:8b:94:63:3b:a4: f2:5f:1b:d7:7a:8e:0d:80:cf:92:b8:0a:ad:56:b0: 7c:55:4e:52:36:00:2a:3b:eb:1a:00:d6:4f:5e:57: 5d:ad:d8:a5:83:35:a7:6c:1d:38:ba:68:da:b1:75: 8c:f0:02:00:ea:a2:65:b8:3c:34:1b:9a:a9:f8:a7: 6a:3c:10:83:9a:5e:a6:0f:a4:f1:de:d4:a3:84:f2: 06:77:3a:4d:f0:07:dd:f7:53:57:61:00:b2:42:de: a5:1b:d1:b6:68:dd:b3:23:a7:94:05:b6:04:de:3a: bb:d1:db:e8:f3:b9:8f:dd:2a:31:91:86:8d:80:98: 7d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C0:1B:6C:89:77:AD:0A:50:37:CD:73:A8:CE:8A:7C:FD:56:FE:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/1cc0d284-01c5-349a-bb5e-bfbfdae46623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:c6:5a:59:34:d3:b0:cf:5f:b3:60:94:13:db:de:11:44:3a: 14:15:1e:65:16:e2:96:87:de:2e:0e:6b:8f:db:f6:42:ac:70: 1b:61:46:d8:32:02:6b:6f:85:c6:a1:f3:bc:95:fa:3f:18:86: 05:fa:3d:58:20:1c:04:89:f4:bb:68:f5:a9:29:ba:0a:21:ef: 4e:e2:c3:47:cb:cf:6f:4a:de:44:d4:dd:ed:ee:e2:fb:92:87: 15:ef:5e:52:e2:a8:54:c3:ae:5d:d3:2e:0f:3a:dd:f5:4c:c0: f6:72:ba:fe:1e:1c:18:b4:e3:ed:bd:d7:9f:1f:f8:fc:00:ce: 7e:8d:cb:29:23:a8:22:71:8d:ef:1f:59:c5:ec:41:a7:af:6b: 71:d1:56:4a:ef:38:7a:8a:ce:66:28:9a:ec:93:be:6a:06:98: 26:c1:0e:dc:8f:bd:ed:4d:20:4d:6e:2f:bf:7c:3d:ec:51:41: 40:b2:1e:9f:e1:0a:39:7c:68:ca:cb:33:99:09:6c:a3:4d:5a: a5:da:39:d5:6a:36:8c:a0:74:71:d8:de:a2:3b:3f:b5:11:85: c0:1a:56:4b:77:7c:fa:ca:73:5a:b5:e4:ef:7a:d5:c5:59:28: 2a:cc:a3:8d:81:58:8c:f7:ef:9e:d3:e3:6c:de:38:18:c5:f1: 87:6c:69:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FeP+5WdjTw5uwswwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk OWI2MTg2YWUtN2Q4Mi00ZThlLThmY2YtNDVmOGFhN2ZmMmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2Zo2Lst36mVvcg4JHDGYyvANeg7HnJ0W0Ce 2p4a2PkLteSsnJ6se5LlgNkZcrC60kE/QmMPXgcPl4evIVOGrF++LlJ8JP1ipj72 wu4kQiJq5Pf/W+Z3p0lgRnV4M4VD+XaSvqXXug6xd58R7ClpXG3NHyBIc/cBPQyG KlMrqcCai5RjO6TyXxvXeo4NgM+SuAqtVrB8VU5SNgAqO+saANZPXlddrdilgzWn bB04umjasXWM8AIA6qJluDw0G5qp+KdqPBCDml6mD6Tx3tSjhPIGdzpN8Afd91NX YQCyQt6lG9G2aN2zI6eUBbYE3jq70dvo87mP3SoxkYaNgJh9vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfAG2yJd60KUDfNc6jOinz9Vv5wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvMWNjMGQyODQtMDFjNS0z NDlhLWJiNWUtYmZiZmRhZTQ2NjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFeVvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHGWlk007DPX7NglBPb3hFEOhQVHmUW4paH3i4Oa4/b9kKscBthRtgy Amtvhcah87yV+j8YhgX6PVggHASJ9Lto9akpugoh707iw0fLz29K3kTU3e3u4vuS hxXvXlLiqFTDrl3TLg863fVMwPZyuv4eHBi04+29158f+PwAzn6NyykjqCJxje8f WcXsQaeva3HRVkrvOHqKzmYomuyTvmoGmCbBDtyPve1NIE1uL798PexRQUCyHp/h Cjl8aMrLM5kJbKNNWqXaOdVqNoygdHHY3qI7P7URhcAaVkt3fPrKc1q15O961cVZ KCrMo42BWIz3757T42zeOBjF8YdsaQQ= -----END CERTIFICATE-----Generated at Sun Jul 20 14:14:05 2025 by rpki-client