$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d9a7402a-c4dd-3778-9808-b7317aeceb81.roa File: d9a7402a-c4dd-3778-9808-b7317aeceb81.roa (raw, json) Hash identifier: 5ed0CNP5sAj0BuWMg4Slgo9KDKVzC1HsQmp+k7Ogj5I= Subject key identifier: 02:4B:AC:2A:E4:D8:C8:57:C8:BE:69:A1:9D:48:EA:8D:56:F9:BC:10 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584F0D6CFA51DCD055A28DA259C0 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d9a7402a-c4dd-3778-9808-b7317aeceb81.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 42689 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:fa:51:dc:d0:55:a2:8d:a2:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=c69fab64-20c8-4837-8086-c11b540691dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:68:c5:91:31:d3:97:84:2a:18:b2:1b:9a:62: a2:4b:56:1d:00:81:7f:1c:d2:a3:7c:ce:71:65:ba: 9f:de:2d:a4:7a:38:03:9b:c5:8d:65:81:f2:af:8e: 89:94:d9:ee:24:61:c9:12:2c:e0:65:37:78:1e:2f: 1b:39:b4:e7:b6:2c:36:7c:64:06:11:77:76:fe:fd: b9:24:f4:82:83:c4:47:d3:b5:aa:6d:22:46:c1:02: be:00:97:2d:49:fe:e3:96:5e:05:19:97:1b:30:ca: 3a:b8:df:1e:a0:61:ac:f3:05:21:af:c8:4b:c6:25: fe:ed:d0:5e:77:cc:8a:9e:75:23:21:3b:bb:06:64: 57:e1:cf:d3:1e:19:10:f6:4e:0e:ca:8a:96:10:7f: 3e:ab:c5:24:c2:63:2d:11:d8:6b:dd:17:5f:07:74: 7b:36:77:72:b6:f5:66:12:0d:60:28:88:15:2e:72: d2:01:87:02:a4:fc:3f:8d:ba:b9:5e:92:d6:35:76: c9:f1:50:6b:0f:04:a2:0b:99:de:1a:d6:19:e0:9b: 86:13:8e:14:e4:c0:d3:05:7e:4e:31:79:59:bd:f0: f5:32:55:76:d6:37:b3:98:64:01:46:ef:d5:08:35: 5c:8e:84:82:80:93:35:b2:53:4b:c7:ed:c2:e2:c0: d7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4B:AC:2A:E4:D8:C8:57:C8:BE:69:A1:9D:48:EA:8D:56:F9:BC:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d9a7402a-c4dd-3778-9808-b7317aeceb81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:0f:bf:98:8f:70:21:71:dc:0b:30:67:1f:da:29:7b:ec:87: cd:64:fd:dd:c1:63:49:55:c4:90:8f:01:1e:51:c5:ec:ce:70: 3f:97:54:25:9c:47:a7:85:33:3e:bd:b3:2b:7b:26:7f:34:ca: eb:c6:37:65:e9:a6:3c:89:94:c5:32:d9:52:13:65:33:16:31: 65:5b:70:6b:ed:3a:0c:82:7f:3a:1c:03:97:0e:a5:1e:8e:09: 5f:e8:5f:e6:0d:b8:2c:57:0b:09:6a:b6:5b:62:11:08:80:14: cb:7a:cd:5a:0e:d4:55:af:03:ec:2a:3d:7f:c3:e2:1b:2e:cf: 54:4c:5b:25:37:f3:e4:66:42:a8:f2:9b:ec:b8:74:0b:9e:cd: ba:01:31:be:44:27:46:11:9e:98:42:45:2b:57:5e:6f:3e:d2: dc:19:96:94:af:ce:81:74:f5:42:83:60:06:8f:0a:64:26:cf: a0:53:a3:d6:3c:d4:05:ec:41:b1:10:00:99:38:3c:a9:45:1a: 95:fb:b3:01:4d:8d:27:15:31:c4:d9:fe:10:ad:54:9f:a4:7c: 4c:41:23:a0:96:4d:81:e9:fb:ac:6d:11:cd:41:34:7b:99:57: 0e:dc:56:3e:f0:08:32:4a:17:85:1e:d6:98:12:36:d2:d7:23: bc:f9:82:12 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE8NbPpR3NBVoo2iWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk YzY5ZmFiNjQtMjBjOC00ODM3LTgwODYtYzExYjU0MDY5MWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmjFkTHTl4QqGLIbmmKiS1YdAIF/HNKjfM5x Zbqf3i2kejgDm8WNZYHyr46JlNnuJGHJEizgZTd4Hi8bObTntiw2fGQGEXd2/v25 JPSCg8RH07WqbSJGwQK+AJctSf7jll4FGZcbMMo6uN8eoGGs8wUhr8hLxiX+7dBe d8yKnnUjITu7BmRX4c/THhkQ9k4OyoqWEH8+q8UkwmMtEdhr3RdfB3R7NndytvVm Eg1gKIgVLnLSAYcCpPw/jbq5XpLWNXbJ8VBrDwSiC5neGtYZ4JuGE44U5MDTBX5O MXlZvfD1MlV21jezmGQBRu/VCDVcjoSCgJM1slNLx+3C4sDXiQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFAJLrCrk2MhXyL5poZ1I6o1W+bwQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvZDlhNzQwMmEtYzRkZC0z Nzc4LTk4MDgtYjczMTdhZWNlYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAWD7+Yj3AhcdwLMGcf2il77IfNZP3dwWNJVcSQjwEeUcXs znA/l1QlnEenhTM+vbMreyZ/NMrrxjdl6aY8iZTFMtlSE2UzFjFlW3Br7ToMgn86 HAOXDqUejglf6F/mDbgsVwsJarZbYhEIgBTLes1aDtRVrwPsKj1/w+IbLs9UTFsl N/PkZkKo8pvsuHQLns26ATG+RCdGEZ6YQkUrV15vPtLcGZaUr86BdPVCg2AGjwpk Js+gU6PWPNQF7EGxEACZODypRRqV+7MBTY0nFTHE2f4QrVSfpHxMQSOglk2B6fus bRHNQTR7mVcO3FY+8AgySheFHtaYEjbS1yO8+YIS -----END CERTIFICATE-----Generated at Sun Sep 13 10:56:55 2026 by rpki-client