$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa File: 0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa (raw, json) Hash identifier: EJDSmXmqnCvFXh5PFFmQTjgfEURGx9JPeJTnMe0w2po= Subject key identifier: 2A:F8:D9:E6:88:41:4C:22:9F:36:48:1E:F8:38:52:14:68:33:C1:56 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584F8F3DC70432480639F4049588 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 11404 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:c7:04:32:48:06:39:f4:04:95:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=bb80bc79-7874-495f-b697-8264a248cad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fd:e9:16:08:74:b6:a2:cc:c3:f1:7d:3d:11: df:ef:09:91:54:97:aa:20:b8:bd:45:a2:e2:e7:45: 90:89:2a:97:3a:18:4e:3a:4d:5a:aa:b1:08:87:59: 4c:c2:9b:ed:b0:54:02:80:58:25:98:3d:f7:78:fb: 70:27:0c:d0:78:5f:c6:c1:81:f4:63:6d:97:21:48: 31:66:b1:f8:3e:c3:e7:e4:4d:90:17:dd:e6:cc:d0: 14:fc:c9:a7:2d:19:82:85:cd:08:a5:6b:50:9c:b2: 2a:a3:1b:1e:42:5f:36:58:ab:e1:b1:48:05:61:84: 82:f1:0f:e5:ea:42:d4:20:2a:76:68:f8:cc:af:80: 76:5b:be:eb:a7:6a:cb:09:5b:c5:4f:42:e3:dd:82: 75:b4:d1:04:12:b6:71:62:53:9d:c3:5d:d6:38:9f: a2:a3:2c:da:90:63:15:6f:bc:26:b2:34:a9:25:dd: 64:ac:0a:f0:11:89:e8:3a:a7:36:aa:1c:ea:38:65: 75:93:1a:37:16:ab:27:fa:11:cc:e4:ad:96:4c:8a: ef:ce:dc:5e:8f:2d:f4:60:ed:d5:83:a8:53:07:13: 2a:08:37:bb:14:eb:f4:36:23:e1:9d:37:58:28:ae: 94:7c:af:9d:15:ac:bd:ee:f5:24:21:2f:9a:d4:25: 47:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F8:D9:E6:88:41:4C:22:9F:36:48:1E:F8:38:52:14:68:33:C1:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/0b5414fb-dc2b-3daa-af9c-677ab8f10baa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:62:dc:35:c3:21:f3:64:04:92:66:e2:aa:74:6f:91:03:00: 79:c2:27:3d:ce:b2:e1:41:4b:30:10:1d:14:29:d9:81:b6:35: 68:37:67:4a:f6:de:c6:f6:1b:0b:fb:a7:89:da:4a:f7:ac:fe: 3a:4f:44:1d:56:ef:aa:10:40:4b:96:f8:a5:1c:d3:ff:20:87: e8:67:90:9c:7f:bd:39:65:fd:0e:34:bc:e6:05:d6:3a:bd:4f: 43:d0:83:93:29:21:84:ad:6e:26:48:01:2f:57:08:78:a5:53: a1:c7:e0:14:66:0b:36:4b:3c:ad:7c:62:43:e9:51:ea:59:e1: 6d:43:46:86:bd:42:16:e8:51:f2:d5:aa:cc:da:4f:ae:f1:db: 08:ed:86:0b:1e:5f:12:91:3f:f1:c2:5e:89:fb:af:b2:23:55: 6f:22:74:07:b0:8c:2e:cb:b9:b6:19:4d:77:ed:18:ab:10:2b: 79:d8:fe:56:37:ea:bd:bd:ab:71:d3:7f:38:a1:7e:5f:58:ba: 4d:78:d0:53:33:06:92:0a:69:2e:8d:9e:65:98:a0:a8:02:3e: e8:da:ad:3d:09:ab:4e:75:ef:a4:b2:e2:54:8b:60:e0:b0:51: 7d:fe:ad:e0:6c:ee:95:43:39:e9:14:b5:b0:52:27:94:18:23: e7:f2:5f:2d -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE+PPccEMkgGOfQElYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk YmI4MGJjNzktNzg3NC00OTVmLWI2OTctODI2NGEyNDhjYWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP3pFgh0tqLMw/F9PRHf7wmRVJeqILi9RaLi 50WQiSqXOhhOOk1aqrEIh1lMwpvtsFQCgFglmD33ePtwJwzQeF/GwYH0Y22XIUgx ZrH4PsPn5E2QF93mzNAU/MmnLRmChc0IpWtQnLIqoxseQl82WKvhsUgFYYSC8Q/l 6kLUICp2aPjMr4B2W77rp2rLCVvFT0Lj3YJ1tNEEErZxYlOdw13WOJ+ioyzakGMV b7wmsjSpJd1krArwEYnoOqc2qhzqOGV1kxo3Fqsn+hHM5K2WTIrvztxejy30YO3V g6hTBxMqCDe7FOv0NiPhnTdYKK6UfK+dFay97vUkIS+a1CVHvQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFCr42eaIQUwinzZIHvg4UhRoM8FWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvMGI1NDE0ZmItZGMyYi0z ZGFhLWFmOWMtNjc3YWI4ZjEwYmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQA3Ytw1wyHzZASSZuKqdG+RAwB5wic9zrLhQUswEB0UKdmB tjVoN2dK9t7G9hsL+6eJ2kr3rP46T0QdVu+qEEBLlvilHNP/IIfoZ5Ccf705Zf0O NLzmBdY6vU9D0IOTKSGErW4mSAEvVwh4pVOhx+AUZgs2SzytfGJD6VHqWeFtQ0aG vUIW6FHy1arM2k+u8dsI7YYLHl8SkT/xwl6J+6+yI1VvInQHsIwuy7m2GU137Rir ECt52P5WN+q9vatx0384oX5fWLpNeNBTMwaSCmkujZ5lmKCoAj7o2q09CatOde+k suJUi2DgsFF9/q3gbO6VQznpFLWwUieUGCPn8l8t -----END CERTIFICATE-----Generated at Sat Oct 31 11:22:11 2026 by rpki-client