$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/0a793ce5-2a13-3752-babb-d659187f1a1c.roa File: 0a793ce5-2a13-3752-babb-d659187f1a1c.roa (raw, json) Hash identifier: iBsOJ3sZH/+Yir4AbWtoTZ/w2IA6aXzYLMGEXJmtO3A= Subject key identifier: 7E:12:8A:A6:E2:D4:8C:F4:4E:80:E2:96:74:D7:E6:28:FE:34:11:B2 Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F4328584A07D527831DB6F6D1AB5A3AA0 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/0a793ce5-2a13-3752-babb-d659187f1a1c.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 31898 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:27:83:1d:b6:f6:d1:ab:5a:3a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=16e84e63-5758-45c8-b549-ebbd05081b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cb:04:35:64:7c:a7:ff:35:13:00:74:5d:1c: 85:ee:6f:0f:b1:80:d8:68:00:74:dd:e5:57:d7:46: fd:a1:da:3a:06:14:7a:13:d5:28:37:87:80:d4:d9: 5f:6a:7c:77:fe:b0:53:bb:7d:3c:b6:d2:32:b1:de: 13:44:cc:7d:04:99:80:37:de:a5:6c:95:52:03:e7: b8:65:59:7d:b6:20:35:a8:55:09:92:c0:a1:d3:70: f8:7e:1b:41:f2:f9:6e:40:97:2e:8e:05:db:12:c5: 9e:d2:1f:84:4b:90:66:20:70:87:e7:b9:ab:ca:a6: 15:c0:c2:8f:33:c2:2e:34:53:7c:e5:d4:9a:7c:40: db:e7:2a:ad:67:1e:95:c3:69:3b:76:25:46:3e:fe: c6:b5:49:28:f6:56:97:1a:ef:92:50:e4:5e:4d:fc: a1:83:2b:20:c5:3e:84:5b:19:7f:4b:09:ab:ee:7f: 9e:6e:0f:40:ca:aa:6d:d4:e0:7c:81:51:a1:fd:35: 95:9e:25:c7:80:75:dd:0b:aa:e4:53:0d:89:2d:66: a3:83:7f:8d:b7:6b:5f:30:65:6d:17:90:4e:5b:0b: 50:29:af:40:89:2a:3c:23:b0:ef:93:6c:45:cf:a2: 30:80:0f:91:d9:c9:55:90:fd:54:16:6d:fc:09:f8: c1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:12:8A:A6:E2:D4:8C:F4:4E:80:E2:96:74:D7:E6:28:FE:34:11:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/0a793ce5-2a13-3752-babb-d659187f1a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a6:85:d8:49:d0:0d:aa:1e:79:5e:19:4d:0f:74:27:c4:bf: d7:10:2a:3b:a7:d3:9c:31:51:78:0d:25:3c:d9:d9:38:0d:8d: 32:8d:b8:72:b2:63:ab:96:f3:aa:86:16:83:32:18:e3:dc:eb: 28:31:71:80:21:98:03:eb:79:8c:32:da:7a:d5:ee:e3:e8:77: 6d:f7:28:02:9f:6c:26:e9:38:25:3e:8f:8b:2a:f4:10:ed:1f: 1b:7a:f0:07:a3:59:75:68:ea:b4:95:8f:c7:6a:23:c6:1b:31: 44:c4:14:55:c4:05:d8:13:b6:27:2d:2b:13:c6:b7:d4:3d:15: 09:b5:a0:a0:0d:88:78:df:91:fe:05:2f:be:96:46:db:23:0d: fc:a3:38:33:07:86:9a:f1:f8:04:72:55:ca:a4:a7:13:19:55: 95:6a:c1:17:cc:42:28:19:3f:d8:e0:54:71:dd:94:5d:d7:02: 56:1b:3b:9e:55:89:84:26:30:d8:a1:57:68:f8:dd:db:c0:fa: cf:2b:34:b0:ce:11:12:c8:72:fa:1b:16:c4:a2:88:43:97:3d: 92:b8:65:1a:76:a6:a2:c8:c3:1a:88:13:e8:f0:d2:97:a6:20: 75:0f:54:cf:fa:0c:a6:5c:22:ea:f1:8d:8a:db:77:53:81:f7: 6f:ba:c1:9d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoH1SeDHbb20ataOqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk MTZlODRlNjMtNTc1OC00NWM4LWI1NDktZWJiZDA1MDgxYjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MsENWR8p/81EwB0XRyF7m8PsYDYaAB03eVX 10b9odo6BhR6E9UoN4eA1Nlfanx3/rBTu308ttIysd4TRMx9BJmAN96lbJVSA+e4 ZVl9tiA1qFUJksCh03D4fhtB8vluQJcujgXbEsWe0h+ES5BmIHCH57mryqYVwMKP M8IuNFN85dSafEDb5yqtZx6Vw2k7diVGPv7GtUko9laXGu+SUOReTfyhgysgxT6E Wxl/Swmr7n+ebg9Ayqpt1OB8gVGh/TWVniXHgHXdC6rkUw2JLWajg3+Nt2tfMGVt F5BOWwtQKa9AiSo8I7Dvk2xFz6IwgA+R2clVkP1UFm38CfjB1wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFH4Siqbi1Iz0ToDilnTX5ij+NBGyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvMGE3OTNjZTUtMmExMy0z NzUyLWJhYmItZDY1OTE4N2YxYTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFGmhdhJ0A2qHnleGU0PdCfEv9cQKjun05wxUXgNJTzZ2TgN jTKNuHKyY6uW86qGFoMyGOPc6ygxcYAhmAPreYwy2nrV7uPod233KAKfbCbpOCU+ j4sq9BDtHxt68AejWXVo6rSVj8dqI8YbMUTEFFXEBdgTtictKxPGt9Q9FQm1oKAN iHjfkf4FL76WRtsjDfyjODMHhprx+ARyVcqkpxMZVZVqwRfMQigZP9jgVHHdlF3X AlYbO55ViYQmMNihV2j43dvA+s8rNLDOERLIcvobFsSiiEOXPZK4ZRp2pqLIwxqI E+jw0pemIHUPVM/6DKZcIurxjYrbd1OB92+6wZ0= -----END CERTIFICATE-----Generated at Mon Jun 16 03:20:07 2025 by rpki-client