$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/ce0197c4-50e0-3806-a103-08cbe1f623a0.roa File: ce0197c4-50e0-3806-a103-08cbe1f623a0.roa (raw, json) Hash identifier: eM9WUuOl8fvoUhugGUlvmG6YZEEJduUgusbxWsqBOdA= Subject key identifier: A5:20:0A:92:31:40:F6:DE:8F:A4:92:67:2A:43:1F:08:40:7E:C5:90 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584ED9C754DE790B82D42B944F34 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/ce0197c4-50e0-3806-a103-08cbe1f623a0.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 7029 IP address blocks: 81.199.64.0/20 maxlen: 24 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:54:de:79:0b:82:d4:2b:94:4f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=f7aae600-c258-48a9-974d-ffe32a5f9ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:18:c8:0d:a1:52:e9:da:4c:58:bc:b8:c3:73: 90:b6:f1:2b:4e:03:58:58:76:5b:ca:a9:5c:1a:8e: 44:aa:89:ce:d1:d0:31:97:34:7f:16:f5:72:50:fb: 81:e1:af:38:5d:ff:13:bc:13:c1:72:84:c1:9d:b5: 9b:e8:6b:6e:39:b6:7e:41:32:86:b4:2a:5e:24:63: bf:9f:b9:7e:dc:b1:37:e7:ec:53:2f:c3:bf:6e:0e: bf:c8:9c:21:93:ff:c1:5a:76:f5:59:49:0b:b0:9c: 67:39:9e:e4:00:ce:96:c7:7d:a4:be:12:9a:c1:04: e4:68:e4:f9:8d:72:13:a4:3b:6c:98:4d:48:4b:16: 5a:ac:6f:ec:9a:63:c3:d6:8b:cd:5b:8b:11:4e:0b: 16:36:29:9b:90:a6:b9:89:da:36:17:bf:b6:b9:93: 0f:45:7e:55:74:f9:6a:a7:d9:c4:57:c3:ee:25:ca: ac:16:d7:23:b3:4c:18:55:f3:76:d2:28:65:32:08: 2a:f0:da:14:df:e2:fc:85:37:34:f7:f1:9a:27:b1: b2:eb:c1:84:cb:ab:68:1a:9e:f3:6c:a0:d4:34:5d: b0:6c:b4:16:01:92:1d:7c:5a:1e:a7:00:e6:30:6d: 99:4a:f5:3b:b8:22:61:42:9f:2c:7b:17:6a:d4:ed: 52:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:20:0A:92:31:40:F6:DE:8F:A4:92:67:2A:43:1F:08:40:7E:C5:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/ce0197c4-50e0-3806-a103-08cbe1f623a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 81.199.64.0/20 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:35:14:6b:cf:a9:cb:cc:ec:8b:5b:3f:80:9e:5c:27:1d:c7: b6:af:78:0f:56:e9:44:22:ce:af:e0:a0:50:65:28:11:eb:2d: b5:81:8f:86:33:0b:be:7e:8c:75:79:a8:ea:10:30:e1:b4:c2: fb:e6:e3:fa:4d:24:39:18:34:44:3e:24:d8:1d:60:3a:da:20: e7:85:93:25:63:5b:f3:f4:ff:0a:4a:4a:11:16:cf:2a:95:99: d7:1f:23:2a:90:37:e6:f5:30:4a:42:1b:ee:d2:87:1f:0f:31: c4:e9:93:83:43:3e:5c:f9:e6:ee:48:ab:24:5c:e4:31:e1:27: cc:b2:1f:69:b0:74:1f:1a:de:fd:ff:b6:d4:5c:30:19:94:89: 5a:a5:50:47:f0:b7:33:bb:08:1a:30:b8:4b:bc:7c:ab:59:75: 6a:1f:08:5a:46:78:5a:43:e9:85:e3:d9:7e:7f:81:bd:c9:60: 2c:0f:d1:d7:33:bc:fd:e4:44:f0:11:64:6d:8c:96:de:ba:8f: f4:cb:1a:8e:37:4c:44:be:e7:86:c7:87:81:11:a0:87:bb:79: c8:b9:f7:c1:77:fb:e8:a5:c0:16:52:29:24:7d:fd:9b:38:9c: 62:fe:a8:d7:24:22:43:bb:1f:cd:05:71:36:74:50:a4:35:1b: 02:bf:60:bf -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7Zx1TeeQuC1CuUTzQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ZjdhYWU2MDAtYzI1OC00OGE5LTk3NGQtZmZlMzJhNWY5YWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRjIDaFS6dpMWLy4w3OQtvErTgNYWHZbyqlc Go5EqonO0dAxlzR/FvVyUPuB4a84Xf8TvBPBcoTBnbWb6GtuObZ+QTKGtCpeJGO/ n7l+3LE35+xTL8O/bg6/yJwhk//BWnb1WUkLsJxnOZ7kAM6Wx32kvhKawQTkaOT5 jXITpDtsmE1ISxZarG/smmPD1ovNW4sRTgsWNimbkKa5ido2F7+2uZMPRX5VdPlq p9nEV8PuJcqsFtcjs0wYVfN20ihlMggq8NoU3+L8hTc09/GaJ7Gy68GEy6toGp7z bKDUNF2wbLQWAZIdfFoepwDmMG2ZSvU7uCJhQp8sexdq1O1SYwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKUgCpIxQPbej6SSZypDHwhAfsWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvY2UwMTk3YzQtNTBlMC0z ODA2LWExMDMtMDhjYmUxZjYyM2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQEUcdAMAsD BAR5W9ADAwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBuNRRrz6nLzOyLWz+AnlwnHce2r3gPVulEIs6v 4KBQZSgR6y21gY+GMwu+fox1eajqEDDhtML75uP6TSQ5GDREPiTYHWA62iDnhZMl Y1vz9P8KSkoRFs8qlZnXHyMqkDfm9TBKQhvu0ocfDzHE6ZODQz5c+ebuSKskXOQx 4SfMsh9psHQfGt79/7bUXDAZlIlapVBH8LczuwgaMLhLvHyrWXVqHwhaRnhaQ+mF 49l+f4G9yWAsD9HXM7z95ETwEWRtjJbeuo/0yxqON0xEvueGx4eBEaCHu3nIuffB d/vopcAWUikkff2bOJxi/qjXJCJDux/NBXE2dFCkNRsCv2C/ -----END CERTIFICATE-----Generated at Sun Sep 13 11:43:07 2026 by rpki-client