$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/431d6262-5c18-3bbe-989a-e3bf39351b0f.roa File: 431d6262-5c18-3bbe-989a-e3bf39351b0f.roa (raw, json) Hash identifier: ijFUkMjs6uhi4v6SHtZzEN5Z5u+rgNwIs+OKGQPj+08= Subject key identifier: 0D:C3:EB:30:FF:78:AD:51:7B:9C:26:4E:07:93:8C:FA:92:03:81:C3 Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F43285849D85F88F0912DB8DF52B21F00 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/431d6262-5c18-3bbe-989a-e3bf39351b0f.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 399106 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:88:f0:91:2d:b8:df:52:b2:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=85f15733-18d2-4afb-8eff-8eb5728fd4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:11:7b:7e:5b:b6:0f:66:cd:84:78:2f:ae:dc: d3:cf:b3:21:d9:e5:45:c9:d8:89:16:27:36:01:61: 9b:33:7c:4f:0b:cf:57:cc:d8:b3:ec:e7:ed:29:c7: f4:cb:a6:62:53:63:80:ff:fb:9b:f1:21:fd:9e:e5: 1d:e2:27:45:c7:5c:e9:e8:8a:42:ec:71:be:c2:e9: 64:09:be:56:6f:a4:0b:cb:8d:1a:3a:10:21:87:db: c9:f0:11:2f:9b:bc:11:2e:09:b2:4d:b7:ff:ab:cd: 93:f0:ed:8a:26:8a:7b:c9:7c:72:59:51:df:91:6b: f2:45:fe:f3:2c:83:5f:30:a7:64:bb:e9:a8:f5:9e: d2:67:bb:ad:75:79:46:89:fb:25:13:a3:87:ea:3b: a8:d6:7a:e9:b0:49:db:f0:c9:1b:ea:1c:8c:eb:26: c2:23:02:ca:ff:79:59:09:fb:5e:2c:86:4f:56:95: 6b:89:32:eb:35:fd:a5:f5:36:26:7c:ed:67:48:95: 32:a1:69:a5:2f:15:65:fb:78:13:ba:fc:11:74:39: 7a:64:a7:56:7f:c5:97:a3:1f:8b:27:e9:15:f7:9f: 3e:2a:79:74:7f:95:e3:cc:67:8f:e9:0f:f1:b8:aa: a6:b8:58:0e:00:4d:71:29:e4:61:b3:c1:85:02:18: 23:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C3:EB:30:FF:78:AD:51:7B:9C:26:4E:07:93:8C:FA:92:03:81:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/431d6262-5c18-3bbe-989a-e3bf39351b0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:3a:40:46:fe:09:c7:68:c6:8e:d5:ec:82:8e:71:fe:3c:4f: 58:48:3a:ff:7d:fe:e7:78:db:49:86:df:89:87:7f:72:e4:aa: 30:6a:41:0c:8c:e3:8d:fe:2c:d9:38:37:7e:ae:aa:77:cc:d1: 3d:8a:0d:33:01:3e:8a:3e:22:71:79:09:49:f8:31:01:84:96: dc:8f:81:f5:2b:d1:6a:10:c5:4e:9e:b7:45:de:86:51:1b:0a: fe:4e:4f:57:2d:fb:f4:3c:46:15:06:31:47:a5:b8:a9:ca:d5: 55:9e:54:f6:1e:50:e6:ec:62:74:41:94:cd:1e:6d:f4:8a:cf: a8:ad:29:2f:fb:05:e5:61:a5:58:8a:c1:4c:0d:7f:56:64:19: cd:bc:f1:e8:02:48:09:3c:a9:85:56:1c:0f:d7:95:26:6e:3c: 2b:7c:75:aa:47:33:c7:81:f0:ef:04:64:12:8e:e0:46:76:ac: ae:a6:50:5b:09:9b:ef:4e:02:1b:19:2b:cd:c5:be:74:b8:ac: 93:c0:ff:ec:20:23:40:f1:dc:6c:1d:04:0a:b5:a4:92:31:37: e4:99:53:67:4a:5d:b8:bc:6a:24:e0:0f:86:ff:5f:cc:e7:3b: a7:ab:2d:91:0c:c4:2f:fe:9e:70:1b:31:2d:7f:5e:9d:37:d1: 12:97:17:69 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnYX4jwkS2431KyHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ODVmMTU3MzMtMThkMi00YWZiLThlZmYtOGViNTcyOGZkNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghF7flu2D2bNhHgvrtzTz7Mh2eVFydiJFic2 AWGbM3xPC89XzNiz7OftKcf0y6ZiU2OA//ub8SH9nuUd4idFx1zp6IpC7HG+wulk Cb5Wb6QLy40aOhAhh9vJ8BEvm7wRLgmyTbf/q82T8O2KJop7yXxyWVHfkWvyRf7z LINfMKdku+mo9Z7SZ7utdXlGifslE6OH6juo1nrpsEnb8Mkb6hyM6ybCIwLK/3lZ CfteLIZPVpVriTLrNf2l9TYmfO1nSJUyoWmlLxVl+3gTuvwRdDl6ZKdWf8WXox+L J+kV958+Knl0f5XjzGeP6Q/xuKqmuFgOAE1xKeRhs8GFAhgjXQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFA3D6zD/eK1Re5wmTgeTjPqSA4HDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvNDMxZDYyNjItNWMxOC0z YmJlLTk4OWEtZTNiZjM5MzUxYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEg6QEb+Ccdoxo7V7IKOcf48T1hIOv99/ud420mG34mHf3Lk qjBqQQyM443+LNk4N36uqnfM0T2KDTMBPoo+InF5CUn4MQGEltyPgfUr0WoQxU6e t0XehlEbCv5OT1ct+/Q8RhUGMUeluKnK1VWeVPYeUObsYnRBlM0ebfSKz6itKS/7 BeVhpViKwUwNf1ZkGc288egCSAk8qYVWHA/XlSZuPCt8dapHM8eB8O8EZBKO4EZ2 rK6mUFsJm+9OAhsZK83FvnS4rJPA/+wgI0Dx3GwdBAq1pJIxN+SZU2dKXbi8aiTg D4b/X8znO6erLZEMxC/+nnAbMS1/Xp030RKXF2k= -----END CERTIFICATE-----Generated at Sun Jun 15 15:48:34 2025 by rpki-client