$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/2fef3d37-e795-39f5-b53a-c7e420227567.roa File: 2fef3d37-e795-39f5-b53a-c7e420227567.roa (raw, json) Hash identifier: HWoVB5okeS4xHLvL9R9gD+ejAQlmVIlMvOvPIGOmQhw= Subject key identifier: CE:E1:E0:D5:FA:1F:85:B8:0C:D2:A5:68:1E:CA:E5:5B:76:37:2E:B4 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584FB3A68FB9301601008E881D00 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/2fef3d37-e795-39f5-b53a-c7e420227567.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 7018 IP address blocks: 81.199.64.0/20 maxlen: 24 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:8f:b9:30:16:01:00:8e:88:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=21937aa6-4114-4f9c-8544-0f5d069a7158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8b:ba:db:dd:c6:7a:5c:d2:8d:25:f4:cb:c8: 6f:70:27:66:94:d1:09:9e:38:ab:c5:67:d8:fe:00: c2:fc:19:4a:c7:7e:1e:34:7a:65:be:03:4b:21:8c: f4:e4:c1:ff:f4:97:f5:3c:ab:20:aa:44:a3:36:ea: 06:14:ff:2d:ab:f6:5f:9d:b5:d5:9b:fe:c7:da:64: 8a:c8:ed:0b:58:ac:46:e7:83:6b:d0:d5:8c:26:27: c2:3d:9e:68:02:5b:50:1b:ef:67:91:83:96:97:82: 59:eb:e0:b6:02:19:2b:f1:3f:84:10:ab:55:9b:29: 8d:ab:c5:41:ed:c0:56:eb:61:d7:75:bd:f3:28:dd: 47:54:94:77:47:5e:c7:07:dc:2a:e6:d3:8e:21:26: 7c:d0:9c:3f:5a:14:cc:09:d5:fa:1e:dd:1d:46:58: 24:67:81:90:20:b2:52:1a:93:f9:31:24:e0:ef:22: 2c:82:4a:5e:da:3f:9d:f5:e1:c0:a0:da:2e:39:1e: b3:50:2f:33:c2:09:0f:21:cd:d7:b8:5e:d4:dc:c1: 02:03:85:62:55:d6:d5:68:86:53:27:f5:f7:ef:d6: 72:58:77:14:0b:b9:f9:2a:f2:90:af:af:99:fe:a4: 3c:d4:c6:cc:1d:94:97:73:30:c9:48:df:d4:db:f8: ef:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E1:E0:D5:FA:1F:85:B8:0C:D2:A5:68:1E:CA:E5:5B:76:37:2E:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/2fef3d37-e795-39f5-b53a-c7e420227567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 81.199.64.0/20 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a2:59:c4:cf:7f:81:dc:4e:d7:b8:a1:76:2f:81:d0:81:29: be:3e:fc:0f:05:7e:e7:1a:3e:4f:ba:1d:00:53:97:75:8a:e6: 5a:c3:b1:65:76:12:73:ae:77:b5:69:27:ea:21:40:be:31:01: 26:af:b1:be:67:95:ad:5c:87:bf:04:b9:cc:fd:d5:19:6a:97: c0:f9:cf:d7:2a:4b:cb:89:67:73:f4:30:13:d6:5b:64:8e:74: 70:9d:32:bb:d6:1b:19:41:a4:b8:33:98:df:54:82:16:f5:4d: 5a:37:c7:15:fe:d2:e9:fe:bc:30:a8:e7:47:89:e3:40:24:96: de:3d:6d:4f:7a:89:c3:32:11:d9:34:15:f1:68:65:30:0e:f5: ae:5b:28:29:ae:fd:e0:4b:f2:d1:d9:42:9b:4b:f8:43:a9:a3: fd:d6:c9:7b:01:70:9d:67:81:2a:54:fd:0e:a4:21:80:b9:e6: e8:8c:43:fe:d5:f0:35:c9:a9:4a:58:78:88:6e:cf:a7:b5:22: d1:84:91:a9:b6:4e:9f:71:bb:af:a0:b0:d0:a8:10:f0:be:a5: ec:fe:43:fd:64:ea:33:db:0e:a3:80:58:f6:c8:7b:fb:5a:74: 89:c9:55:11:20:5b:c0:1a:63:ee:f1:cb:04:0b:33:8a:a4:84: ac:98:55:8f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE+zpo+5MBYBAI6IHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk MjE5MzdhYTYtNDExNC00ZjljLTg1NDQtMGY1ZDA2OWE3MTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYu6293GelzSjSX0y8hvcCdmlNEJnjirxWfY /gDC/BlKx34eNHplvgNLIYz05MH/9Jf1PKsgqkSjNuoGFP8tq/ZfnbXVm/7H2mSK yO0LWKxG54Nr0NWMJifCPZ5oAltQG+9nkYOWl4JZ6+C2Ahkr8T+EEKtVmymNq8VB 7cBW62HXdb3zKN1HVJR3R17HB9wq5tOOISZ80Jw/WhTMCdX6Ht0dRlgkZ4GQILJS GpP5MSTg7yIsgkpe2j+d9eHAoNouOR6zUC8zwgkPIc3XuF7U3MECA4ViVdbVaIZT J/X379ZyWHcUC7n5KvKQr6+Z/qQ81MbMHZSXczDJSN/U2/jvmwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFM7h4NX6H4W4DNKlaB7K5Vt2Ny60MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvMmZlZjNkMzctZTc5NS0z OWY1LWI1M2EtYzdlNDIwMjI3NTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQEUcdAMAsD BAR5W9ADAwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBrolnEz3+B3E7XuKF2L4HQgSm+PvwPBX7nGj5P uh0AU5d1iuZaw7FldhJzrne1aSfqIUC+MQEmr7G+Z5WtXIe/BLnM/dUZapfA+c/X KkvLiWdz9DAT1ltkjnRwnTK71hsZQaS4M5jfVIIW9U1aN8cV/tLp/rwwqOdHieNA JJbePW1PeonDMhHZNBXxaGUwDvWuWygprv3gS/LR2UKbS/hDqaP91sl7AXCdZ4Eq VP0OpCGAuebojEP+1fA1yalKWHiIbs+ntSLRhJGptk6fcbuvoLDQqBDwvqXs/kP9 ZOoz2w6jgFj2yHv7WnSJyVURIFvAGmPu8csECzOKpISsmFWP -----END CERTIFICATE-----Generated at Mon Nov 2 12:45:42 2026 by rpki-client