$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/e44dfe4f-2667-34d4-bf61-05659f9c77ad.roa File: e44dfe4f-2667-34d4-bf61-05659f9c77ad.roa (raw, json) Hash identifier: CTkRs7sTL8yCyiHlNDodU6FgLvXNZIjaH9zGQPpBfpk= Subject key identifier: 16:34:A7:27:44:86:64:1C:DD:43:29:91:57:72:FE:A3:34:A6:41:C9 Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Certificate serial: 010D0C9F4328584FB3A6971DA45AFA716FC5D340 Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/e44dfe4f-2667-34d4-bf61-05659f9c77ad.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 4637 IP address blocks: 121.91.208.0/20 maxlen: 24 121.91.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:97:1d:a4:5a:fa:71:6f:c5:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=4bbf8e4e-6f35-4d64-b94d-db92e25e549a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cc:96:5e:e2:ce:9a:de:25:09:71:9e:45:08: 52:c7:4d:df:ee:e6:50:61:f6:72:8f:dd:9d:40:bb: 5f:fc:cb:29:77:8a:57:c3:6a:18:a0:50:36:5a:fb: d7:0c:c3:11:f2:4a:80:37:69:0f:27:bb:20:cb:f4: ad:83:b8:ac:95:d3:a4:60:1c:27:f7:32:0e:cf:b5: e5:0a:66:de:cd:04:96:e5:f3:62:50:59:f9:32:4e: 5f:e7:36:bc:d4:79:ed:a2:8d:34:ed:2b:aa:50:f2: 98:d8:f9:d7:e2:94:0f:5a:73:c2:3c:75:fb:fb:47: 27:7a:d1:7f:0c:f7:18:52:3a:78:4b:e8:99:fe:16: 04:29:bf:7c:33:16:f9:48:12:67:b3:66:d1:9f:d9: b0:16:45:33:86:65:e5:e2:a0:a9:67:0e:08:d7:f0: cf:b0:0c:4e:d9:06:ab:3a:a5:77:a0:b4:53:cf:25: 25:10:d3:2b:38:71:4a:34:1f:d1:9d:eb:e3:0e:39: 9e:9f:68:1e:a4:7f:04:f0:81:d7:58:37:84:8f:7b: 98:3a:0b:17:96:cf:95:d1:3d:eb:d0:fd:76:22:b8: 7d:07:8a:b3:c9:3d:59:46:88:30:17:14:f0:e0:c1: 33:98:df:c0:48:3f:e9:aa:ae:1e:b6:2a:41:f0:f0: 78:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:34:A7:27:44:86:64:1C:DD:43:29:91:57:72:FE:A3:34:A6:41:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/e44dfe4f-2667-34d4-bf61-05659f9c77ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl X509v3 Authority Key Identifier: keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer sbgp-ipAddrBlock: critical IPv4: 121.91.208.0-121.91.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:7f:50:a8:2d:35:74:1b:5d:c3:70:94:6a:36:24:1f:15:e8: 28:36:a0:37:36:fb:1b:3d:ec:0d:d3:24:9d:cf:0b:e9:9d:93: 59:06:89:4a:e3:fb:30:65:6f:3e:2d:33:5c:1c:d1:61:9d:4c: d3:cc:9c:af:5a:5a:67:99:c0:19:fd:2d:04:11:3a:06:31:dc: 92:02:d8:68:8f:65:0f:eb:3e:dd:11:7b:49:86:1b:7b:20:6b: 2a:90:f1:c3:35:15:4a:84:d0:4f:54:78:6f:bb:ef:d5:3e:94: fe:ec:e0:41:23:48:c4:0a:db:c6:f2:c5:33:92:3f:c1:25:f8: 74:94:d5:0c:5f:58:43:13:7f:41:9f:ae:6d:96:3c:7a:f5:94: 76:40:ee:d9:9d:61:eb:35:b0:16:d5:4e:f2:c5:b8:f0:95:10: 55:e5:30:53:84:e5:d9:35:a1:a6:a7:11:94:ed:24:2d:94:01: 4e:65:c3:b1:c3:a6:9f:b3:c4:74:f0:fa:a5:17:e6:6b:e0:38: 01:56:7f:66:70:ff:aa:a6:53:d9:ea:b9:7e:18:78:91:b1:ef: 29:dd:98:80:08:60:77:4d:bf:58:1c:66:07:b9:05:25:d9:19: 78:15:80:85:0d:0e:f4:2c:f2:50:1d:23:27:28:cd:55:b5:c2: 28:78:ac:73 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWE+zppcdpFr6cW/F00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhkYjJlYzgtNjUxYy00YmRjLWJmMzgtOTdmZTM4NzAy NjA5MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk NGJiZjhlNGUtNmYzNS00ZDY0LWI5NGQtZGI5MmUyNWU1NDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcyWXuLOmt4lCXGeRQhSx03f7uZQYfZyj92d QLtf/Mspd4pXw2oYoFA2WvvXDMMR8kqAN2kPJ7sgy/Stg7isldOkYBwn9zIOz7Xl CmbezQSW5fNiUFn5Mk5f5za81Hntoo007SuqUPKY2PnX4pQPWnPCPHX7+0cnetF/ DPcYUjp4S+iZ/hYEKb98Mxb5SBJns2bRn9mwFkUzhmXl4qCpZw4I1/DPsAxO2Qar OqV3oLRTzyUlENMrOHFKNB/RnevjDjmen2gepH8E8IHXWDeEj3uYOgsXls+V0T3r 0P12Irh9B4qzyT1ZRogwFxTw4MEzmN/ASD/pqq4etipB8PB4EQIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFBY0pydEhmQc3UMpkVdy/qM0pkHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OGRi MmVjOC02NTFjLTRiZGMtYmYzOC05N2ZlMzg3MDI2MDkvZTQ0ZGZlNGYtMjY2Ny0z NGQ0LWJmNjEtMDU2NTlmOWM3N2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODhkYjJlYzgtNjUxYy00YmRjLWJm MzgtOTdmZTM4NzAyNjA5Lzg4ZGIyZWM4LTY1MWMtNGJkYy1iZjM4LTk3ZmUzODcw MjYwOS5jcmwwHwYDVR0jBBgwFoAUeOWLAyWpWva/3XB5vVJQ5gP+sAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OGRiMmVjOC02NTFjLTRiZGMtYmYzOC05N2Zl Mzg3MDI2MDkuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAR5W9AD AwJ5WDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAgf1CoLTV0G13DcJRqNiQfFegoNqA3NvsbPewN0ySdzwvp nZNZBolK4/swZW8+LTNcHNFhnUzTzJyvWlpnmcAZ/S0EEToGMdySAthoj2UP6z7d EXtJhht7IGsqkPHDNRVKhNBPVHhvu+/VPpT+7OBBI0jECtvG8sUzkj/BJfh0lNUM X1hDE39Bn65tljx69ZR2QO7ZnWHrNbAW1U7yxbjwlRBV5TBThOXZNaGmpxGU7SQt lAFOZcOxw6afs8R08PqlF+Zr4DgBVn9mcP+qplPZ6rl+GHiRse8p3ZiACGB3Tb9Y HGYHuQUl2Rl4FYCFDQ70LPJQHSMnKM1VtcIoeKxz -----END CERTIFICATE-----Generated at Tue Nov 3 12:58:18 2026 by rpki-client