$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/213b928d-a0ca-3a2a-b210-23856b353e9d.roa File: 213b928d-a0ca-3a2a-b210-23856b353e9d.roa (raw, json) Hash identifier: Ayk1y6OOK9K77LQxiChOWdicSAk9lcYVUZt4TlYAGgs= Subject key identifier: 98:D7:C3:69:65:94:03:9A:AE:9D:CD:F3:9C:40:CF:B4:1F:C1:E7:7C Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F43285849D594DA95572B764B89A3F000 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/213b928d-a0ca-3a2a-b210-23856b353e9d.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 54825 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:da:95:57:2b:76:4b:89:a3:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=8df59cb5-bfac-4d72-8a2d-4b263774fc33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:20:90:f9:56:12:09:98:11:68:0f:56:8c: ef:db:d5:11:75:dd:7f:22:8a:55:86:14:b0:8f:15: 29:69:62:e2:77:3b:31:77:88:1b:10:c2:68:33:c2: 2c:ef:76:20:4d:a3:c3:6f:e6:ac:94:17:4f:b0:2d: 18:4b:4a:d3:61:a9:2f:a9:80:2a:0f:90:bc:a5:c5: 0e:72:81:be:a3:8c:b7:10:b2:8c:47:c2:32:ed:d8: 1d:e9:99:35:16:2c:71:72:fe:13:86:0f:b0:37:45: 23:84:9e:02:7a:92:70:8e:dc:1f:a7:5d:fe:09:d1: 88:7a:29:2d:ca:f1:ff:54:e4:5d:d1:de:c1:70:d3: 47:56:f4:1a:a7:de:58:9c:a5:47:65:95:9f:eb:aa: 93:dc:d1:a4:97:cb:53:a9:65:7e:8b:a1:73:55:1b: 80:ac:7e:83:dc:12:d2:45:8d:1c:c4:cd:8d:fe:f2: 05:a3:ae:ee:80:61:37:a6:91:52:1a:62:ac:f2:0a: 8c:46:6d:63:88:ca:50:89:be:bf:07:21:5b:ed:11: 0b:fa:45:47:0d:b3:84:e8:dc:35:1d:97:5f:e0:8d: 4b:1b:2c:05:8a:20:cb:52:0e:b2:5b:e5:39:5d:d0: 12:70:eb:5b:fc:03:c0:b6:3d:ae:62:84:52:63:e9: 18:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D7:C3:69:65:94:03:9A:AE:9D:CD:F3:9C:40:CF:B4:1F:C1:E7:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/213b928d-a0ca-3a2a-b210-23856b353e9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f0:c9:ba:5e:1b:6b:0b:ae:ab:e9:9f:81:cf:f7:bb:2b:bb: dc:6b:d4:a2:81:c5:00:81:8a:12:7d:c0:2d:65:94:52:37:b7: d5:03:9a:1d:2c:db:3b:50:02:ae:9e:01:b5:a6:d0:e7:df:c9: 53:3f:b7:b9:65:e3:dd:b4:b2:32:53:33:40:97:c6:42:07:22: 41:c5:f8:83:f8:aa:35:b8:f3:28:fb:48:71:99:e6:32:0e:36: f1:f1:0b:a4:b1:89:c3:68:78:88:1f:b5:b7:a5:4f:d8:27:96: 08:8b:fb:89:7a:4f:90:1c:40:f6:58:e1:9f:dc:48:2f:87:d0: 3e:ba:e9:90:ec:91:36:e7:84:5f:ed:d7:ee:dc:c1:9f:b9:1e: 0d:c7:ab:04:86:1e:96:5f:8f:fa:27:33:6f:6e:ee:82:e0:62: 27:27:a7:7a:f4:8a:7a:28:9c:f2:af:1c:68:ff:ff:66:ad:d2: 4f:28:39:a2:76:22:64:ac:06:94:f0:c4:f8:c3:59:79:57:20: 26:c5:c4:e5:98:47:74:32:57:1f:67:3c:dc:34:9b:9c:aa:1e: e9:53:29:7c:62:8f:b6:59:a3:2b:eb:e7:c0:0b:ad:84:8c:32: 5d:06:31:7d:5d:9a:d3:b6:21:b2:c7:ef:aa:76:e3:fc:ed:57: 24:3d:8a:51 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnVlNqVVyt2S4mj8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk OGRmNTljYjUtYmZhYy00ZDcyLThhMmQtNGIyNjM3NzRmYzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmAgkPlWEgmYEWgPVozv29URdd1/IopVhhSw jxUpaWLidzsxd4gbEMJoM8Is73YgTaPDb+aslBdPsC0YS0rTYakvqYAqD5C8pcUO coG+o4y3ELKMR8Iy7dgd6Zk1Fixxcv4Thg+wN0UjhJ4CepJwjtwfp13+CdGIeikt yvH/VORd0d7BcNNHVvQap95YnKVHZZWf66qT3NGkl8tTqWV+i6FzVRuArH6D3BLS RY0cxM2N/vIFo67ugGE3ppFSGmKs8gqMRm1jiMpQib6/ByFb7REL+kVHDbOE6Nw1 HZdf4I1LGywFiiDLUg6yW+U5XdAScOtb/APAtj2uYoRSY+kY6QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJjXw2lllAOarp3N85xAz7Qfwed8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvMjEzYjkyOGQtYTBjYS0z YTJhLWIyMTAtMjM4NTZiMzUzZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAbwybpeG2sLrqvpn4HP97sru9xr1KKBxQCBihJ9wC1llFI3 t9UDmh0s2ztQAq6eAbWm0OffyVM/t7ll4920sjJTM0CXxkIHIkHF+IP4qjW48yj7 SHGZ5jIONvHxC6SxicNoeIgftbelT9gnlgiL+4l6T5AcQPZY4Z/cSC+H0D666ZDs kTbnhF/t1+7cwZ+5Hg3HqwSGHpZfj/onM29u7oLgYicnp3r0inoonPKvHGj//2at 0k8oOaJ2ImSsBpTwxPjDWXlXICbFxOWYR3QyVx9nPNw0m5yqHulTKXxij7ZZoyvr 58ALrYSMMl0GMX1dmtO2IbLH76p24/ztVyQ9ilE= -----END CERTIFICATE-----Generated at Mon Jun 16 06:13:52 2025 by rpki-client