$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/4c26d07a-6a10-3283-bc4c-d335313f9d53.roa File: 4c26d07a-6a10-3283-bc4c-d335313f9d53.roa (raw, json) Hash identifier: PDVA2jm6uk+hjW/wQt43x3HOwhzl/JEkA7kns/0AM6M= Subject key identifier: 4A:2A:D3:98:03:95:82:D2:92:AE:49:FB:B8:F9:30:70:23:07:34:98 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584EDC9200DEE8FBDE5A333AE180 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/4c26d07a-6a10-3283-bc4c-d335313f9d53.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 7922 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:00:de:e8:fb:de:5a:33:3a:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=1dc7ae5a-7e5a-4719-9df7-7a5df7f3efd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:54:32:d4:26:df:99:9a:ed:9e:c7:b1:db:63: 6a:c2:54:62:d4:f5:b0:3b:1d:0c:cc:ec:24:88:a1: 57:1c:49:d0:39:5f:a8:51:ee:18:7d:c9:a2:76:66: 8c:60:09:90:2c:87:6f:ec:16:ec:84:f9:1d:71:36: 2b:59:c6:ed:6a:f8:45:91:eb:2d:52:4b:63:0d:c2: 57:8f:ef:f6:13:b2:81:cd:9a:de:42:8a:76:35:13: 49:57:b9:f6:33:81:d9:c5:05:e2:5e:9d:e5:24:5e: eb:63:16:da:83:88:7d:c4:d8:59:86:26:61:2e:bb: a6:77:7b:d7:b2:32:42:6d:25:1f:4e:47:50:88:52: fc:bb:b6:06:36:42:fc:de:42:85:a9:b0:1e:73:39: c9:3a:26:4f:11:4c:de:10:94:66:3d:53:70:67:5f: 7c:a7:ad:20:4b:8e:b6:de:77:4c:ec:05:07:4c:ae: 5d:c4:c7:c0:13:8e:4b:d2:7d:05:45:52:c9:89:3a: 41:6d:e2:c4:76:6f:23:23:43:65:66:cf:a5:ff:be: 3e:2b:5a:8b:19:0a:28:4a:9e:c7:d8:71:8a:2e:a3: 42:0b:c3:2c:48:d0:31:69:92:8a:3e:a4:c3:ed:d9: 24:ec:75:3c:78:b0:56:cb:e9:13:0b:4b:73:49:57: ae:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2A:D3:98:03:95:82:D2:92:AE:49:FB:B8:F9:30:70:23:07:34:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/4c26d07a-6a10-3283-bc4c-d335313f9d53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:53:de:22:57:3b:86:3d:07:a4:e9:d3:cc:22:eb:7b:a9:6f: cf:cf:e2:41:4c:63:47:31:18:0f:af:01:84:fb:e0:b1:f0:6e: 08:36:35:0e:6d:4b:f8:58:7d:f4:66:7c:45:b6:0a:4b:36:d3: b2:50:c1:53:db:60:fb:d6:2d:f4:e0:a4:af:bb:df:58:bf:94: 05:8f:f7:39:29:f5:70:f1:89:bc:44:5a:24:23:a5:5c:c9:ad: ef:17:55:c6:f2:96:01:14:c3:75:c3:91:5d:d8:18:bc:4b:f2: 3b:cf:75:17:5a:fe:ab:d1:37:86:62:6a:93:9e:9a:da:40:41: d4:5d:35:55:ad:3f:ca:ca:f2:8b:a1:21:90:80:30:77:16:40: 3f:03:12:75:32:a2:64:06:ef:53:41:49:43:19:e5:f1:41:a3: 86:50:68:5f:2e:75:9c:30:e4:f9:c0:42:59:50:7f:92:57:2b: 66:29:77:c8:70:54:9b:44:69:01:c9:3a:6f:9e:1c:b2:77:17: 12:85:13:63:12:43:1e:32:99:28:51:1e:5d:2c:0a:0a:77:c1: 77:bb:3e:50:56:4f:81:72:7e:f6:c7:eb:d0:be:3c:f0:d8:92: 85:2c:50:c7:8b:e8:32:5f:2b:6f:57:78:54:18:8b:9f:e7:ef: b6:da:a9:06 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE7ckgDe6PveWjM64YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk MWRjN2FlNWEtN2U1YS00NzE5LTlkZjctN2E1ZGY3ZjNlZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVQy1CbfmZrtnsex22NqwlRi1PWwOx0MzOwk iKFXHEnQOV+oUe4YfcmidmaMYAmQLIdv7BbshPkdcTYrWcbtavhFkestUktjDcJX j+/2E7KBzZreQop2NRNJV7n2M4HZxQXiXp3lJF7rYxbag4h9xNhZhiZhLrumd3vX sjJCbSUfTkdQiFL8u7YGNkL83kKFqbAecznJOiZPEUzeEJRmPVNwZ198p60gS462 3ndM7AUHTK5dxMfAE45L0n0FRVLJiTpBbeLEdm8jI0NlZs+l/74+K1qLGQooSp7H 2HGKLqNCC8MsSNAxaZKKPqTD7dkk7HU8eLBWy+kTC0tzSVeurQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFEoq05gDlYLSkq5J+7j5MHAjBzSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvNGMyNmQwN2EtNmExMC0z MjgzLWJjNGMtZDMzNTMxM2Y5ZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAgU94iVzuGPQek6dPMIut7qW/Pz+JBTGNHMRgPrwGE++Cx 8G4INjUObUv4WH30ZnxFtgpLNtOyUMFT22D71i304KSvu99Yv5QFj/c5KfVw8Ym8 RFokI6Vcya3vF1XG8pYBFMN1w5Fd2Bi8S/I7z3UXWv6r0TeGYmqTnpraQEHUXTVV rT/KyvKLoSGQgDB3FkA/AxJ1MqJkBu9TQUlDGeXxQaOGUGhfLnWcMOT5wEJZUH+S VytmKXfIcFSbRGkByTpvnhyydxcShRNjEkMeMpkoUR5dLAoKd8F3uz5QVk+Bcn72 x+vQvjzw2JKFLFDHi+gyXytvV3hUGIuf5++22qkG -----END CERTIFICATE-----Generated at Sun Sep 13 13:26:56 2026 by rpki-client