$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/8631b3bd-0b55-3465-bbe8-646adfd8309c.roa File: 8631b3bd-0b55-3465-bbe8-646adfd8309c.roa (raw, json) Hash identifier: SCCf9R22myty/A8Daqcw/gQhJU1anyehbcd4/P2TzxI= Subject key identifier: 5B:69:09:E2:FB:A6:45:18:05:F5:49:28:9B:AC:48:BD:D7:D5:2D:08 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584A82AB4A401DD1B18FAECDA680 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/8631b3bd-0b55-3465-bbe8-646adfd8309c.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 398465 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:4a:40:1d:d1:b1:8f:ae:cd:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=1b5f4e5d-2c85-4eb1-bbcb-b0f9f63b6c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0a:5d:c6:57:e5:43:b9:1e:ae:6d:7e:8c:a6: 74:f4:4d:c0:a2:b1:74:af:04:4a:fa:0b:cc:6e:57: 6b:0b:cb:51:3c:99:53:20:47:d1:79:fb:ab:0a:5b: 88:b2:08:65:d2:5b:f8:ec:b9:a2:85:7d:75:13:47: 79:f4:c3:a6:b9:14:12:a0:c4:ff:53:e2:b3:4c:0c: 64:51:4b:f6:d0:34:47:88:00:6b:f5:dd:fb:be:33: 11:db:ac:95:f2:e2:4f:39:97:24:77:5a:c5:1d:d0: aa:cf:71:80:e0:f6:b3:a7:8e:29:aa:3f:e7:19:78: 81:59:a4:52:19:11:85:9c:ea:91:51:0c:b9:d0:97: 67:0a:4a:9a:48:77:e8:cf:4b:69:d6:54:e7:1f:d2: 9a:99:d9:75:31:a1:bf:6b:0c:3c:94:7d:6a:11:2e: 98:e4:f9:98:13:95:a7:b9:99:13:2e:d1:f7:ef:94: 34:96:d0:c9:b1:20:db:eb:85:8e:e1:7c:e9:fa:8d: 24:5d:66:ca:44:47:c0:2a:40:61:c7:50:43:f4:d6: 26:ce:6a:a8:2c:7e:85:b2:23:e0:42:5b:14:70:9a: e7:1f:a8:72:56:05:86:ae:20:ce:aa:9b:5b:19:e0: 69:c1:a6:74:cd:74:82:d7:5e:fa:ec:d0:86:09:9d: 3a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:69:09:E2:FB:A6:45:18:05:F5:49:28:9B:AC:48:BD:D7:D5:2D:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/8631b3bd-0b55-3465-bbe8-646adfd8309c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:9d:65:05:72:ba:3f:4f:fd:cf:29:35:84:75:12:84:24:21: e0:46:f9:02:7e:a6:71:03:e8:a1:95:02:47:01:1f:70:14:3d: bf:66:a1:52:62:65:0f:eb:da:99:3f:56:2e:90:63:64:1c:b8: 2e:d1:5c:37:71:99:cc:8e:84:c3:30:8f:78:88:91:6d:a5:a1: 1c:f7:97:67:84:a1:ab:2e:04:53:3d:36:cf:2c:56:88:79:69: db:7b:1b:45:5f:f8:94:b8:18:0e:7a:b0:4c:47:8c:c9:9d:ef: c8:7a:74:b0:52:30:36:d9:63:15:ce:23:17:24:af:5c:29:84: 9c:88:b8:0e:78:92:dc:d5:ef:a2:b0:59:fa:c7:74:80:20:dd: 85:b9:f3:94:f2:61:00:8e:7b:00:7c:a3:cd:f7:f9:24:83:31: 98:96:0a:5a:f7:19:99:24:cd:34:ea:87:04:ff:3f:38:5c:fe: 2d:58:e6:42:78:5f:9e:4a:32:ad:5e:aa:b9:36:83:0d:4b:07: b8:39:27:32:d6:b8:5e:cd:3f:a7:b4:26:d6:d6:8b:8f:f5:5b: 16:31:93:38:36:58:e6:cc:73:70:c7:01:56:ff:6a:4f:b8:33: a5:44:dd:47:b5:9b:23:12:7c:1c:76:b4:c4:a3:67:ae:16:99: 1d:a0:1c:77 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEqCq0pAHdGxj67NpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk MWI1ZjRlNWQtMmM4NS00ZWIxLWJiY2ItYjBmOWY2M2I2YzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwpdxlflQ7kerm1+jKZ09E3AorF0rwRK+gvM bldrC8tRPJlTIEfRefurCluIsghl0lv47LmihX11E0d59MOmuRQSoMT/U+KzTAxk UUv20DRHiABr9d37vjMR26yV8uJPOZckd1rFHdCqz3GA4Pazp44pqj/nGXiBWaRS GRGFnOqRUQy50JdnCkqaSHfoz0tp1lTnH9Kamdl1MaG/aww8lH1qES6Y5PmYE5Wn uZkTLtH375Q0ltDJsSDb64WO4Xzp+o0kXWbKREfAKkBhx1BD9NYmzmqoLH6FsiPg QlsUcJrnH6hyVgWGriDOqptbGeBpwaZ0zXSC11767NCGCZ06dwIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFFtpCeL7pkUYBfVJKJusSL3X1S0IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvODYzMWIzYmQtMGI1NS0z NDY1LWJiZTgtNjQ2YWRmZDgzMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBJnWUFcro/T/3PKTWEdRKEJCHgRvkCfqZxA+ihlQJHAR9w FD2/ZqFSYmUP69qZP1YukGNkHLgu0Vw3cZnMjoTDMI94iJFtpaEc95dnhKGrLgRT PTbPLFaIeWnbextFX/iUuBgOerBMR4zJne/IenSwUjA22WMVziMXJK9cKYSciLgO eJLc1e+isFn6x3SAIN2FufOU8mEAjnsAfKPN9/kkgzGYlgpa9xmZJM006ocE/z84 XP4tWOZCeF+eSjKtXqq5NoMNSwe4OScy1rhezT+ntCbW1ouP9VsWMZM4NljmzHNw xwFW/2pPuDOlRN1HtZsjEnwcdrTEo2euFpkdoBx3 -----END CERTIFICATE-----Generated at Sun Jul 20 21:48:01 2025 by rpki-client