$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d9a7402a-c4dd-3778-9808-b7317aeceb81.roa File: d9a7402a-c4dd-3778-9808-b7317aeceb81.roa (raw, json) Hash identifier: 4+Tx1BdbCtLZaYSB6eYCP4FCTqMlPxgNlP+dEjIyAF8= Subject key identifier: 4E:14:1F:4A:D0:A6:66:B2:41:C3:D9:81:F5:14:94:9B:DB:2C:CD:A0 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F432858492728B96450C3DEBFC39EC700 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d9a7402a-c4dd-3778-9808-b7317aeceb81.roa Signing time: Tue 11 Mar 2025 13:32:24 +0000 ROA not before: Tue 11 Mar 2025 13:32:24 +0000 ROA not after: Mon 09 Jun 2025 13:32:24 +0000 asID: 42689 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:27:28:b9:64:50:c3:de:bf:c3:9e:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Mar 11 13:32:24 2025 GMT Not After : Jun 9 13:32:24 2025 GMT Subject: CN=3c279b26-5c86-446a-b31f-3c9fe1d57f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c9:f3:fb:10:d3:c1:50:95:db:6a:92:a5:ee: da:e6:33:92:1d:90:35:8b:dd:cd:a9:1f:c7:68:f4: e8:3d:49:6a:50:92:1c:af:c6:14:7f:c4:00:f8:1f: e8:55:d4:5e:76:26:68:41:5c:d2:10:ad:32:5c:91: 72:be:48:b1:2b:7c:29:e5:0e:90:a8:6a:47:4f:84: a7:3b:b1:ce:c2:d6:ad:c3:e6:61:82:45:84:fc:b1: cd:a6:20:32:b0:a3:77:0c:cb:ef:29:b2:20:c4:55: a5:4a:5d:79:c0:54:c0:ca:78:14:bd:69:9c:54:33: bc:da:b3:4f:ea:26:93:0e:ae:17:eb:4a:5a:d5:30: 05:86:4c:ba:70:de:5c:c4:d7:fc:a4:19:7b:a9:07: e0:c7:9f:96:ae:bb:76:2d:45:cb:04:51:ac:84:09: 05:21:b3:a5:07:42:7f:7f:9b:0d:04:11:f0:9c:ee: b0:88:f3:7e:2e:80:aa:32:0f:15:8d:df:dd:d3:af: d5:b6:b7:85:48:81:71:c1:cc:c1:87:5c:85:5d:e7: 24:f8:d9:02:d3:6e:08:6e:34:5f:f5:8a:2f:44:04: 17:7d:75:ef:2f:8d:a6:ab:d6:dc:2c:ec:d8:1e:c4: ed:8b:0f:d7:97:66:1d:b6:a6:7b:44:dd:69:f6:be: 07:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:14:1F:4A:D0:A6:66:B2:41:C3:D9:81:F5:14:94:9B:DB:2C:CD:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/d9a7402a-c4dd-3778-9808-b7317aeceb81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c2:1f:c5:e8:19:5c:ef:51:0d:cf:5a:f4:13:08:34:5e:fd: 01:10:f7:df:a5:80:a2:99:b9:c0:6f:f8:4c:4c:a3:bf:b4:53: 2a:57:56:2d:e4:42:e2:dd:c0:64:45:96:27:b2:fe:56:c8:11: 7a:48:4f:88:71:ad:a4:5e:97:db:69:0b:7f:7c:8c:b7:49:6a: 85:f5:9f:df:4c:fd:a5:f9:aa:c8:b6:8b:50:4d:68:92:ca:dc: e8:e0:f8:1d:46:80:5e:92:f5:02:1d:b7:19:62:d8:d5:b5:07: b6:79:de:41:9c:94:8c:e6:b3:88:88:55:08:29:bb:ff:a4:46: 3e:1c:49:7e:b2:ed:ed:44:3a:b5:9c:37:7e:f5:ec:02:5d:59: 08:9e:f8:3c:28:3a:b8:a9:87:83:69:dc:59:b4:f5:75:f8:94: 4f:4c:da:f3:7c:2a:7a:7d:27:80:8f:13:1b:b7:82:84:5e:eb: 0e:c9:2b:b3:72:79:73:92:1e:1a:6c:c6:ca:89:52:3e:bc:96: f5:84:83:6c:4c:ae:47:c7:dd:b6:f6:6b:6b:1d:33:95:45:03: 25:68:0e:cf:b8:2b:f3:b9:92:76:1f:e2:97:76:b3:c8:21:3a: cf:65:ac:77:31:58:19:27:4c:16:b2:26:77:a2:60:d3:39:53: 58:14:b3:ec -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWEknKLlkUMPev8OexwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI1MDMxMTEzMzIyNFoXDTI1MDYwOTEzMzIyNFowLzEtMCsGA1UEAxMk M2MyNzliMjYtNWM4Ni00NDZhLWIzMWYtM2M5ZmUxZDU3ZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8nz+xDTwVCV22qSpe7a5jOSHZA1i93NqR/H aPToPUlqUJIcr8YUf8QA+B/oVdRediZoQVzSEK0yXJFyvkixK3wp5Q6QqGpHT4Sn O7HOwtatw+ZhgkWE/LHNpiAysKN3DMvvKbIgxFWlSl15wFTAyngUvWmcVDO82rNP 6iaTDq4X60pa1TAFhky6cN5cxNf8pBl7qQfgx5+Wrrt2LUXLBFGshAkFIbOlB0J/ f5sNBBHwnO6wiPN+LoCqMg8Vjd/d06/VtreFSIFxwczBh1yFXeck+NkC024IbjRf 9YovRAQXfXXvL42mq9bcLOzYHsTtiw/Xl2YdtqZ7RN1p9r4HJwIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFE4UH0rQpmayQcPZgfUUlJvbLM2gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvZDlhNzQwMmEtYzRkZC0z Nzc4LTk4MDgtYjczMTdhZWNlYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBOwh/F6Blc71ENz1r0Ewg0Xv0BEPffpYCimbnAb/hMTKO/ tFMqV1Yt5ELi3cBkRZYnsv5WyBF6SE+Ica2kXpfbaQt/fIy3SWqF9Z/fTP2l+arI totQTWiSytzo4PgdRoBekvUCHbcZYtjVtQe2ed5BnJSM5rOIiFUIKbv/pEY+HEl+ su3tRDq1nDd+9ewCXVkInvg8KDq4qYeDadxZtPV1+JRPTNrzfCp6fSeAjxMbt4KE XusOySuzcnlzkh4abMbKiVI+vJb1hINsTK5Hx9229mtrHTOVRQMlaA7PuCvzuZJ2 H+KXdrPIITrPZax3MVgZJ0wWsiZ3omDTOVNYFLPs -----END CERTIFICATE-----Generated at Sat Apr 5 12:42:07 2025 by rpki-client