$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa File: c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa (raw, json) Hash identifier: X4KFAHnB84kvEdim7alTlaSz3T9XKxeMay7iRKSFiLE= Subject key identifier: 3A:B5:35:64:58:8B:D6:FE:6D:CA:60:38:3E:CC:C5:49:03:D2:A5:B2 Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F43285849CBCF8DB277EA31FA3D84C600 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 16509 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:8d:b2:77:ea:31:fa:3d:84:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=5e8b6035-524b-404b-8b25-d80470624dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1e:69:d0:97:ca:1e:fe:77:76:69:86:16:69: 42:af:ea:1f:23:c3:85:c0:5e:c4:c7:fe:08:82:db: f7:6e:41:2a:6e:85:c2:8f:38:6d:fa:d6:f1:df:ef: b5:5f:b2:9f:5b:7c:76:0c:94:f2:9b:2e:aa:4e:09: 07:cd:a0:5b:50:46:cf:56:7f:bc:11:42:28:8a:15: 68:87:6c:17:f5:2d:5d:df:93:53:97:ff:3c:90:bb: 32:b1:ef:06:eb:b3:2e:0c:0e:c3:59:97:f4:98:ff: 01:db:15:b0:12:e4:7f:8c:97:9e:72:34:1f:77:cc: a5:a6:63:09:a6:fe:64:e2:1e:0e:0e:7a:f9:66:89: a2:a3:b4:05:07:a0:a8:d5:af:13:57:b0:46:7d:44: e9:6f:66:82:fa:47:4c:fc:7e:25:30:4c:ad:9a:1a: 10:88:f5:b1:ad:b6:ce:9e:f7:b9:de:9b:73:c6:72: 52:ce:7f:7e:a5:2d:15:52:91:8b:9d:89:8b:00:55: 0c:17:67:e6:f2:70:31:fa:e1:a7:2b:a1:13:95:0e: b2:9f:f4:8f:84:45:6b:ff:ff:86:f7:37:77:00:10: 88:f6:97:f2:53:16:45:4c:47:71:4a:03:4c:bb:13: 6e:c8:f5:bd:61:3b:35:25:b1:b8:37:72:3b:5b:bf: 34:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B5:35:64:58:8B:D6:FE:6D:CA:60:38:3E:CC:C5:49:03:D2:A5:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:1b:c4:cf:8d:9b:e1:6a:c3:72:c0:ce:f6:aa:40:eb:d8:25: e8:31:b8:a7:02:e2:37:c7:03:01:e6:1d:77:d6:f7:54:ba:60: ff:95:28:fd:9c:9e:c3:eb:37:dd:bb:ea:26:e1:11:0c:8c:25: eb:55:73:ec:77:e3:4a:ba:d5:3d:97:fa:2e:07:bc:02:36:ce: cb:13:9d:0d:17:38:e5:05:35:fd:e7:5c:e3:ca:ac:52:67:78: f8:f5:f5:c2:57:fa:05:17:49:1f:5b:34:5f:3f:14:62:09:7f: 36:12:9f:10:f7:9b:98:43:b1:19:d0:b2:34:1e:12:85:b3:e9: 4b:fa:30:93:d7:3f:06:b5:68:00:a1:37:1f:a7:0e:ed:c7:c2: b7:e0:ec:3c:4e:b4:c7:5e:8e:83:a4:0a:86:bb:16:4d:f9:e9: fc:5b:c0:48:a1:6a:db:69:7c:31:7e:06:50:c8:78:0d:97:fd: 60:fe:48:77:b0:97:81:30:5a:65:82:b1:94:d5:bb:d9:79:41: 8a:5f:4f:d2:d1:7a:a6:46:73:6d:f2:ed:6f:61:07:73:f8:60: 03:12:33:75:20:09:c6:fe:3e:ce:32:d7:f8:21:de:fd:f4:b4: 84:ae:2a:68:8c:21:77:63:4f:29:46:a6:be:ce:48:6c:ff:90: 77:a8:e7:26 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnLz42yd+ox+j2ExgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk NWU4YjYwMzUtNTI0Yi00MDRiLThiMjUtZDgwNDcwNjI0ZGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh5p0JfKHv53dmmGFmlCr+ofI8OFwF7Ex/4I gtv3bkEqboXCjzht+tbx3++1X7KfW3x2DJTymy6qTgkHzaBbUEbPVn+8EUIoihVo h2wX9S1d35NTl/88kLsyse8G67MuDA7DWZf0mP8B2xWwEuR/jJeecjQfd8ylpmMJ pv5k4h4ODnr5Zomio7QFB6Co1a8TV7BGfUTpb2aC+kdM/H4lMEytmhoQiPWxrbbO nve53ptzxnJSzn9+pS0VUpGLnYmLAFUMF2fm8nAx+uGnK6ETlQ6yn/SPhEVr//+G 9zd3ABCI9pfyUxZFTEdxSgNMuxNuyPW9YTs1JbG4N3I7W780ewIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDq1NWRYi9b+bcpgOD7MxUkD0qWyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvYzk3ZDc2YTctZTljYS0z ODEyLTkxM2MtNTlmM2FkOGM5ZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADobxM+Nm+Fqw3LAzvaqQOvYJegxuKcC4jfHAwHmHXfW91S6 YP+VKP2cnsPrN9276ibhEQyMJetVc+x340q61T2X+i4HvAI2zssTnQ0XOOUFNf3n XOPKrFJnePj19cJX+gUXSR9bNF8/FGIJfzYSnxD3m5hDsRnQsjQeEoWz6Uv6MJPX Pwa1aAChNx+nDu3Hwrfg7DxOtMdejoOkCoa7Fk356fxbwEihattpfDF+BlDIeA2X /WD+SHewl4EwWmWCsZTVu9l5QYpfT9LReqZGc23y7W9hB3P4YAMSM3UgCcb+Ps4y 1/gh3v30tISuKmiMIXdjTylGpr7OSGz/kHeo5yY= -----END CERTIFICATE-----Generated at Sat Jun 14 05:58:03 2025 by rpki-client