$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/305a652b-8f6d-3a59-84d7-290880080ccf.roa File: 305a652b-8f6d-3a59-84d7-290880080ccf.roa (raw, json) Hash identifier: SWAJ+6G6DRgDZ9vf/+p3W8wm+4VOIa7jNg3hs/TTLcE= Subject key identifier: D1:D6:26:4B:88:49:1F:FB:3D:0D:37:B1:FE:00:B9:39:A4:7C:A7:1A Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F43285849CBCF9743A6960CD8D18184C0 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/305a652b-8f6d-3a59-84d7-290880080ccf.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 396259 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:97:43:a6:96:0c:d8:d1:81:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=b396d01a-ce6e-4831-b30b-bc4c5c76b702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c4:99:09:f4:8b:87:db:77:6e:7d:7b:d5:c4: 21:df:b7:53:a8:57:9c:41:af:97:26:62:71:d4:97: 2d:8b:64:e8:b6:49:b7:11:87:b2:3b:81:89:d1:b1: b6:e6:fc:80:02:e7:3a:ce:0a:55:d1:9f:51:70:65: 6f:db:38:b9:ae:f7:d4:43:9f:cc:0e:c0:ee:24:44: b7:e9:94:7c:79:3a:ba:99:4a:dd:55:67:55:3f:69: 54:0a:46:4f:58:f1:93:bb:54:84:1b:09:b6:0b:db: 48:84:8c:fc:fe:db:54:34:50:dc:79:23:4e:78:b0: d6:3c:75:62:c2:1e:c7:85:21:70:b0:51:3f:d5:fb: 08:12:96:62:81:4a:b9:97:cf:ce:be:5f:b4:ae:69: f9:55:78:df:4b:c6:93:cc:23:c4:f2:30:6d:c5:ef: 14:21:aa:8b:18:f4:59:54:99:d7:b1:22:3e:36:8e: 61:12:0f:16:e5:3b:8f:29:0a:cb:69:65:ee:62:1d: cd:c0:b3:a0:b4:78:22:a9:de:00:b5:95:1c:ad:ba: da:de:4c:eb:3e:12:d1:c5:fc:46:82:56:a1:cb:8a: 35:07:57:49:be:22:ad:e4:1f:fd:98:3c:2e:7e:49: bc:ab:47:fb:e1:44:13:89:e3:a1:d0:7d:99:35:8f: bf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D6:26:4B:88:49:1F:FB:3D:0D:37:B1:FE:00:B9:39:A4:7C:A7:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/305a652b-8f6d-3a59-84d7-290880080ccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:42:45:b3:e0:6d:16:cf:9e:05:a3:ad:7c:34:fe:6c:e3:56: 3d:d8:64:33:da:c6:c7:2c:30:a9:b8:b4:c0:37:92:1f:31:64: 27:73:23:42:8d:d7:7d:63:bd:71:ea:16:ae:5e:12:25:da:87: f0:9e:ed:d2:e3:b2:29:3f:b6:51:ba:0e:08:57:36:79:e0:b5: 07:84:1c:fe:ba:ac:b8:ce:32:bb:84:06:cf:ec:97:a4:e9:0c: 89:ed:b6:c3:d5:4f:ae:80:30:57:2c:97:cc:33:ce:a3:c8:00: 38:64:d6:ec:5f:24:cb:4a:4c:74:ac:72:6b:c3:06:4e:7f:37: 3d:93:75:64:4b:52:74:95:e3:fe:25:fb:80:2a:a8:ac:50:09: 8c:cc:df:69:0a:1c:1c:83:88:ee:8a:13:b8:39:cb:4d:62:eb: 1b:5f:df:ab:a7:78:3d:58:70:4a:fc:a6:8e:cd:16:71:09:62: 4e:ce:02:7b:ac:75:76:bb:ca:3c:0e:04:db:57:2c:09:9a:4e: df:85:06:c8:ba:81:17:83:34:05:4c:b9:0c:31:54:0f:bd:1c: ad:6b:63:4d:2b:34:c2:44:3e:e3:aa:98:3b:f2:80:ad:94:d0: 55:d5:45:9d:55:5d:8a:45:27:59:7f:c1:57:a8:0b:58:76:f5: 98:db:6a:f1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnLz5dDppYM2NGBhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk YjM5NmQwMWEtY2U2ZS00ODMxLWIzMGItYmM0YzVjNzZiNzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMSZCfSLh9t3bn171cQh37dTqFecQa+XJmJx 1Jcti2Totkm3EYeyO4GJ0bG25vyAAuc6zgpV0Z9RcGVv2zi5rvfUQ5/MDsDuJES3 6ZR8eTq6mUrdVWdVP2lUCkZPWPGTu1SEGwm2C9tIhIz8/ttUNFDceSNOeLDWPHVi wh7HhSFwsFE/1fsIEpZigUq5l8/Ovl+0rmn5VXjfS8aTzCPE8jBtxe8UIaqLGPRZ VJnXsSI+No5hEg8W5TuPKQrLaWXuYh3NwLOgtHgiqd4AtZUcrbra3kzrPhLRxfxG glahy4o1B1dJviKt5B/9mDwufkm8q0f74UQTieOh0H2ZNY+/ewIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNHWJkuISR/7PQ03sf4AuTmkfKcaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvMzA1YTY1MmItOGY2ZC0z YTU5LTg0ZDctMjkwODgwMDgwY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALZCRbPgbRbPngWjrXw0/mzjVj3YZDPaxscsMKm4tMA3kh8x ZCdzI0KN131jvXHqFq5eEiXah/Ce7dLjsik/tlG6DghXNnngtQeEHP66rLjOMruE Bs/sl6TpDInttsPVT66AMFcsl8wzzqPIADhk1uxfJMtKTHSscmvDBk5/Nz2TdWRL UnSV4/4l+4AqqKxQCYzM32kKHByDiO6KE7g5y01i6xtf36uneD1YcEr8po7NFnEJ Yk7OAnusdXa7yjwOBNtXLAmaTt+FBsi6gReDNAVMuQwxVA+9HK1rY00rNMJEPuOq mDvygK2U0FXVRZ1VXYpFJ1l/wVeoC1h29ZjbavE= -----END CERTIFICATE-----Generated at Sun Jun 15 15:11:21 2025 by rpki-client