$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/ce0197c4-50e0-3806-a103-08cbe1f623a0.roa File: ce0197c4-50e0-3806-a103-08cbe1f623a0.roa (raw, json) Hash identifier: QMSdYbaVYOpX8V5yuP9qnr4PSIFktrmJmpK8QHrjOuI= Subject key identifier: 25:AE:EF:13:A2:A5:41:C4:BE:3D:1D:DF:E3:96:98:42:69:24:06:31 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584B970CEA8A287A925D17B2D540 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/ce0197c4-50e0-3806-a103-08cbe1f623a0.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 7029 IP address blocks: 81.199.64.0/20 maxlen: 24 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:ea:8a:28:7a:92:5d:17:b2:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=ffba5c23-1b14-4735-88fc-546d964c01ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:79:41:15:30:1a:e6:e2:a0:67:fa:48:cc: 58:b8:21:55:e0:11:ce:27:83:63:dc:14:6a:c7:8b: d5:77:d0:3d:03:a2:0a:3c:e1:7f:06:38:81:3b:cc: 74:fb:76:a3:8e:f8:ab:76:3c:ab:98:1c:e6:f6:a7: c1:ca:6b:10:91:11:1e:17:d3:16:f7:45:de:3a:97: e1:df:6a:8c:8e:c3:29:30:5b:62:80:4f:05:6e:01: a6:f0:45:8f:25:09:16:1a:cd:d1:2e:b9:fc:27:a6: 2a:d0:3a:16:85:76:c5:cf:d2:62:d6:88:ad:a8:ff: 87:ea:3c:bf:c4:aa:87:3a:3b:51:d1:f5:ab:9a:57: 4d:b4:e4:44:7a:64:7e:28:55:12:05:5b:e8:43:22: d6:c8:3b:19:19:0c:fb:19:f9:a6:c8:df:7a:9f:ca: 81:c9:a6:65:dd:79:e8:2d:fe:d0:3c:76:be:9d:32: 39:7f:0b:81:95:51:94:8b:53:d7:8c:16:11:2b:9b: d8:e8:61:3b:8c:bf:2c:4d:c1:c5:ff:83:e7:ef:72: 2b:fd:fc:bb:a4:50:66:d3:20:d0:fc:00:6d:22:00: a0:0a:bf:b1:50:6e:d2:e5:c0:eb:3d:ed:96:23:24: 67:17:7d:48:37:e7:ae:46:8e:54:e2:e9:17:d2:d5: f1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AE:EF:13:A2:A5:41:C4:BE:3D:1D:DF:E3:96:98:42:69:24:06:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/ce0197c4-50e0-3806-a103-08cbe1f623a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 81.199.64.0/20 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:97:c7:4e:bd:57:0a:b2:d1:e6:2e:3f:f5:ba:45:9e:1d:7b: d3:be:73:1a:1d:a0:18:b6:1d:26:69:81:03:5a:f4:43:d2:51: 69:82:bd:d3:c0:c3:b9:a2:cc:90:56:b9:fb:0e:cb:1d:eb:33: fb:e3:58:53:f9:fc:47:e4:ab:67:fe:ee:76:44:37:7a:d6:79: 95:15:f6:be:3a:29:08:db:12:d4:80:91:81:dd:63:83:15:5c: 2a:c7:9c:0d:22:76:fc:51:1e:1b:6d:58:fc:16:f4:c1:39:6a: 70:ba:79:4b:c6:5f:9d:f2:6c:8b:96:81:38:7d:ec:d7:74:1c: 0f:aa:4d:53:0c:bf:7f:49:06:37:89:18:c6:f5:99:c5:75:df: 67:90:94:ad:51:85:1a:13:44:dc:5d:fc:2c:55:33:f6:7d:e7: 6d:8e:92:e3:8e:af:08:7b:e1:08:44:2f:58:84:b6:b1:53:c1: e7:9d:69:4c:f6:48:ff:1c:34:73:99:56:54:11:34:f8:01:56: 98:25:ee:8f:2f:a3:14:34:63:a3:f5:73:9f:d8:d8:f3:54:be: ce:81:26:99:38:13:2c:4d:48:fc:86:e2:ba:ec:08:b5:98:f1: 7f:c4:64:74:92:27:50:c5:6e:eb:a7:e4:95:26:3f:34:11:c0: 2c:49:97:43 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEuXDOqKKHqSXRey1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZmZiYTVjMjMtMWIxNC00NzM1LTg4ZmMtNTQ2ZDk2NGMwMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIZ5QRUwGubioGf6SMxYuCFV4BHOJ4Nj3BRq x4vVd9A9A6IKPOF/BjiBO8x0+3ajjvirdjyrmBzm9qfBymsQkREeF9MW90XeOpfh 32qMjsMpMFtigE8FbgGm8EWPJQkWGs3RLrn8J6Yq0DoWhXbFz9Ji1oitqP+H6jy/ xKqHOjtR0fWrmldNtOREemR+KFUSBVvoQyLWyDsZGQz7GfmmyN96n8qByaZl3Xno Lf7QPHa+nTI5fwuBlVGUi1PXjBYRK5vY6GE7jL8sTcHF/4Pn73Ir/fy7pFBm0yDQ /ABtIgCgCr+xUG7S5cDrPe2WIyRnF31IN+euRo5U4ukX0tXxAQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCWu7xOipUHEvj0d3+OWmEJpJAYxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvY2UwMTk3YzQtNTBlMC0z ODA2LWExMDMtMDhjYmUxZjYyM2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQEUcdAMAsD BAR5W9ADAwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAQl8dOvVcKstHmLj/1ukWeHXvTvnMaHaAYth0m aYEDWvRD0lFpgr3TwMO5osyQVrn7Dssd6zP741hT+fxH5Ktn/u52RDd61nmVFfa+ OikI2xLUgJGB3WODFVwqx5wNInb8UR4bbVj8FvTBOWpwunlLxl+d8myLloE4fezX dBwPqk1TDL9/SQY3iRjG9ZnFdd9nkJStUYUaE0TcXfwsVTP2fedtjpLjjq8Ie+EI RC9YhLaxU8HnnWlM9kj/HDRzmVZUETT4AVaYJe6PL6MUNGOj9XOf2NjzVL7OgSaZ OBMsTUj8huK67Ai1mPF/xGR0kidQxW7rp+SVJj80EcAsSZdD -----END CERTIFICATE-----Generated at Thu Oct 23 06:03:27 2025 by rpki-client