$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/8631b3bd-0b55-3465-bbe8-646adfd8309c.roa File: 8631b3bd-0b55-3465-bbe8-646adfd8309c.roa (raw, json) Hash identifier: +cSfEb0cDQSyewDAcYTxn+Kp1WkKuzfsb1c/g6pZ4gw= Subject key identifier: 85:77:35:46:1C:82:48:7D:42:87:0A:B3:2A:30:99:52:00:9E:6E:16 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F43285848C41B7F3FBEF91F07C51DC280 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/8631b3bd-0b55-3465-bbe8-646adfd8309c.roa Signing time: Tue 04 Feb 2025 02:00:40 +0000 ROA not before: Tue 04 Feb 2025 02:00:40 +0000 ROA not after: Mon 05 May 2025 01:00:40 +0000 asID: 398465 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:1b:7f:3f:be:f9:1f:07:c5:1d:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Feb 4 02:00:40 2025 GMT Not After : May 5 01:00:40 2025 GMT Subject: CN=8c220b37-7513-47db-8d24-bb10f36498ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:77:8b:bc:b3:0c:dc:50:0c:6b:ea:80:92:88: 96:9b:22:40:88:fa:1b:e0:a5:6b:8a:05:28:61:b2: d7:c7:f9:02:57:87:81:03:d1:85:c3:86:95:e2:0c: d4:20:87:56:a7:43:92:51:0d:9c:2c:4e:56:67:7a: 3a:b6:fe:c2:16:19:8e:9c:2c:e3:b8:e6:ff:fa:40: b5:e4:5c:5f:a4:da:ef:27:49:5a:91:a5:f5:f8:b9: 8a:23:5d:fa:ba:7d:65:c4:b5:7f:ec:51:0a:1c:c9: 03:11:04:41:8f:3e:99:e1:10:7b:04:ed:6c:a4:63: d8:61:d4:14:9d:d3:84:da:02:d9:88:c8:c2:26:fd: 94:a2:7a:fb:6c:95:75:be:6c:04:44:17:12:88:00: 00:41:48:75:47:1d:c0:fc:ad:6a:c6:d6:40:d1:ab: 8f:f0:ec:c9:f3:a0:bd:6f:69:b2:e1:56:b3:5d:4a: a7:2e:69:4b:d5:63:bf:c8:c3:86:67:16:dd:ca:5a: 13:f5:b2:1e:79:19:19:44:3f:cd:6a:75:ea:89:c7: 69:7d:e3:38:35:e5:b3:d5:aa:9a:f9:2d:d4:76:dc: 6e:04:7c:85:9d:a8:d3:68:cb:a9:cd:b4:1e:3c:f5: 2a:f3:94:f5:e6:d9:42:40:df:fe:02:33:43:f2:1b: 90:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:77:35:46:1C:82:48:7D:42:87:0A:B3:2A:30:99:52:00:9E:6E:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/8631b3bd-0b55-3465-bbe8-646adfd8309c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:fc:b2:26:9b:33:94:aa:92:be:53:45:e9:ec:d8:91:13:4a: c7:fd:4c:e6:31:83:58:4a:9a:23:e2:e4:14:f8:fa:93:28:1e: 96:fe:08:02:34:62:a5:d6:6a:7b:7a:a1:0b:3a:2a:cc:60:48: c8:9f:cd:21:be:8f:74:cf:0c:09:fc:f9:99:80:59:c5:5d:2c: dd:6c:69:2b:c9:98:07:a8:58:da:88:af:02:a2:c7:40:77:5d: cc:1f:b5:bd:c0:15:81:51:99:92:70:cd:76:b1:be:c1:8e:69: 5f:a5:fd:4f:24:1a:61:75:db:9a:91:30:ba:8b:53:7a:d3:6e: 12:68:34:bc:69:25:06:5f:09:1d:da:e1:1b:2c:e6:4b:c5:ac: b6:f9:65:4b:b5:68:af:79:8a:e2:e9:45:d2:99:16:85:eb:40: 66:d8:1c:aa:28:d4:2d:f7:f3:82:98:09:dc:90:de:54:2c:cd: 90:c6:97:90:8a:7c:82:22:66:26:f2:e1:72:e0:b8:85:17:a4: 4c:6f:8c:ad:2f:15:b0:cd:a0:82:77:28:c7:f5:2b:5f:c5:4a: 7a:4f:9e:74:12:8e:42:9f:b1:10:7a:0c:8b:a3:30:c1:da:b5: 42:b2:83:49:0d:67:19:26:bb:32:94:47:4c:50:28:c7:74:fd: 4c:ea:1c:40 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEjEG38/vvkfB8UdwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk OGMyMjBiMzctNzUxMy00N2RiLThkMjQtYmIxMGYzNjQ5OGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3eLvLMM3FAMa+qAkoiWmyJAiPob4KVrigUo YbLXx/kCV4eBA9GFw4aV4gzUIIdWp0OSUQ2cLE5WZ3o6tv7CFhmOnCzjuOb/+kC1 5FxfpNrvJ0lakaX1+LmKI136un1lxLV/7FEKHMkDEQRBjz6Z4RB7BO1spGPYYdQU ndOE2gLZiMjCJv2Uonr7bJV1vmwERBcSiAAAQUh1Rx3A/K1qxtZA0auP8OzJ86C9 b2my4VazXUqnLmlL1WO/yMOGZxbdyloT9bIeeRkZRD/NanXqicdpfeM4NeWz1aqa +S3UdtxuBHyFnajTaMupzbQePPUq85T15tlCQN/+AjND8huQrwIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFIV3NUYcgkh9QocKsyowmVIAnm4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvODYzMWIzYmQtMGI1NS0z NDY1LWJiZTgtNjQ2YWRmZDgzMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBT/LImmzOUqpK+U0Xp7NiRE0rH/UzmMYNYSpoj4uQU+PqT KB6W/ggCNGKl1mp7eqELOirMYEjIn80hvo90zwwJ/PmZgFnFXSzdbGkryZgHqFja iK8CosdAd13MH7W9wBWBUZmScM12sb7Bjmlfpf1PJBphdduakTC6i1N6024SaDS8 aSUGXwkd2uEbLOZLxay2+WVLtWiveYri6UXSmRaF60Bm2ByqKNQt9/OCmAnckN5U LM2QxpeQinyCImYm8uFy4LiFF6RMb4ytLxWwzaCCdyjH9StfxUp6T550Eo5Cn7EQ egyLozDB2rVCsoNJDWcZJrsylEdMUCjHdP1M6hxA -----END CERTIFICATE-----Generated at Sat Apr 5 08:56:13 2025 by rpki-client