$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/213b928d-a0ca-3a2a-b210-23856b353e9d.roa File: 213b928d-a0ca-3a2a-b210-23856b353e9d.roa (raw, json) Hash identifier: 3/GIKTt+vmP3lvvjJMfWn9bwtOBxPsVwlyXctG3FRZc= Subject key identifier: 09:BB:52:FC:A4:BE:C1:06:AE:95:F7:FE:5B:2C:37:F3:52:20:AD:C4 Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F4328584AB650DAA89A210CBD5ADA9818 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/213b928d-a0ca-3a2a-b210-23856b353e9d.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 54825 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:da:a8:9a:21:0c:bd:5a:da:98:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=139b3129-bcf5-424f-9af2-77df24c58d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:48:76:95:5d:76:7e:a7:bc:21:bd:5e:d3: ea:ba:1b:15:09:4d:ed:38:be:cf:db:f5:5a:d1:9c: ca:b8:65:bf:fa:77:4e:ac:fe:11:0d:8e:84:1f:7f: 1c:3e:d3:a5:45:8b:8c:5c:6b:02:d7:64:cc:01:39: a7:69:6a:31:41:e1:06:6f:3a:b2:3d:b0:6b:72:ee: 83:9d:f5:20:6e:0c:64:ea:60:0b:fd:cd:1d:02:c3: ed:23:d2:f5:57:51:79:49:d6:01:53:6b:2e:ab:d5: 29:bc:c5:c7:73:3f:75:6a:7d:79:48:b2:ad:aa:ad: 1d:e1:77:ca:d5:0c:16:29:0c:26:91:cf:c9:51:30: e3:34:6d:08:ef:b2:46:c2:99:d5:36:41:8a:3e:4c: 5f:63:e6:6d:f3:eb:30:36:17:3f:4e:ed:e6:ac:b3: 14:3f:fb:60:b8:e7:58:cb:70:b0:4d:f9:e6:35:86: 55:3a:06:89:8a:19:fd:2e:d5:9a:f9:e5:74:ee:c8: 94:5d:1b:81:cb:50:a2:0f:08:a1:41:27:0b:09:f9: 5d:0e:ba:a3:cb:67:2e:50:4f:48:41:57:0d:25:ec: 85:95:a0:b5:dc:0d:a0:d9:4b:f9:b8:7d:65:cf:2d: 77:1e:05:5b:26:17:08:45:9f:8b:9a:10:1e:7b:f2: 8d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BB:52:FC:A4:BE:C1:06:AE:95:F7:FE:5B:2C:37:F3:52:20:AD:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/213b928d-a0ca-3a2a-b210-23856b353e9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:65:34:98:7a:de:25:6a:23:37:cc:83:a8:c4:fd:96:ae:ff: b6:0f:78:92:40:0d:67:44:45:b2:d6:c8:88:82:d1:a8:c7:3b: 11:d1:38:34:02:03:20:58:85:3d:4e:b2:a6:9e:ff:1f:66:c8: f1:67:23:0b:cf:46:59:9b:32:70:ec:7c:8b:13:7e:d8:92:75: 9f:8f:d6:ab:35:d8:75:68:ed:04:c8:2b:ac:29:4c:ae:b0:f8: fe:f6:7d:d6:5e:18:87:77:87:69:cb:c4:f7:97:6f:e9:11:24: 4c:14:c0:3e:24:0b:77:7a:48:1e:98:1d:d6:5d:49:40:02:b1: 00:24:97:9b:ae:2d:df:08:5f:7d:ab:e0:65:8a:b4:16:d6:01: 32:36:5f:82:b4:04:f2:da:5a:f1:55:26:9a:03:db:04:69:57: a5:aa:0b:b9:b2:72:e8:92:6b:eb:81:fe:65:e9:c0:f6:82:5b: b3:ca:b9:c7:0f:71:a5:88:0f:fa:3b:a7:f6:56:fa:93:d8:01: 06:cf:3f:8d:9a:19:c5:45:5a:67:49:d5:a0:09:99:cb:1a:b3: 1c:cc:3c:98:02:3f:76:98:cf:98:8d:6c:bc:51:a5:60:e3:ed: d8:d9:60:e2:bf:09:2b:fa:92:30:dc:6a:ae:9d:31:ad:cf:9b: f2:a6:9d:b9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEq2UNqomiEMvVramBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MTM5YjMxMjktYmNmNS00MjRmLTlhZjItNzdkZjI0YzU4ZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3pIdpVddn6nvCG9XtPquhsVCU3tOL7P2/Va 0ZzKuGW/+ndOrP4RDY6EH38cPtOlRYuMXGsC12TMATmnaWoxQeEGbzqyPbBrcu6D nfUgbgxk6mAL/c0dAsPtI9L1V1F5SdYBU2suq9UpvMXHcz91an15SLKtqq0d4XfK 1QwWKQwmkc/JUTDjNG0I77JGwpnVNkGKPkxfY+Zt8+swNhc/Tu3mrLMUP/tguOdY y3CwTfnmNYZVOgaJihn9LtWa+eV07siUXRuBy1CiDwihQScLCfldDrqjy2cuUE9I QVcNJeyFlaC13A2g2Uv5uH1lzy13HgVbJhcIRZ+LmhAee/KNVwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAm7UvykvsEGrpX3/lssN/NSIK3EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvMjEzYjkyOGQtYTBjYS0z YTJhLWIyMTAtMjM4NTZiMzUzZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI1lNJh63iVqIzfMg6jE/Zau/7YPeJJADWdERbLWyIiC0ajH OxHRODQCAyBYhT1Osqae/x9myPFnIwvPRlmbMnDsfIsTftiSdZ+P1qs12HVo7QTI K6wpTK6w+P72fdZeGId3h2nLxPeXb+kRJEwUwD4kC3d6SB6YHdZdSUACsQAkl5uu Ld8IX32r4GWKtBbWATI2X4K0BPLaWvFVJpoD2wRpV6WqC7mycuiSa+uB/mXpwPaC W7PKuccPcaWID/o7p/ZW+pPYAQbPP42aGcVFWmdJ1aAJmcsasxzMPJgCP3aYz5iN bLxRpWDj7djZYOK/CSv6kjDcaq6dMa3Pm/Kmnbk= -----END CERTIFICATE-----Generated at Mon Aug 4 18:38:20 2025 by rpki-client