$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa File: c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa (raw, json) Hash identifier: izvOCUZcqCrb84xoix1Cd+MuoKgzCiH6msQu/7gmbPU= Subject key identifier: CD:A8:56:8B:26:07:57:50:B8:5C:36:A1:CF:11:98:63:7E:D6:24:45 Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F4328584AAB264FB277A9733C77843F80 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 16509 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:4f:b2:77:a9:73:3c:77:84:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=826fa8c7-6348-4fa4-86c7-f68790a989d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:36:a0:b0:dd:e0:b9:92:36:4d:d9:82:1f: e2:2d:7b:91:7b:ff:80:10:ce:08:2a:d7:3d:d4:dd: 4d:7e:96:f6:68:ba:0a:b6:25:9e:b3:fa:1a:32:9b: 5e:73:3b:e3:56:9a:21:99:b2:aa:05:47:39:6e:f1: 67:f6:25:f0:bd:b9:ae:ab:94:7e:4e:df:93:d1:8c: 63:5b:6d:1d:80:42:0c:e2:8b:d8:05:0c:fc:3a:e8: b1:ba:d7:61:ae:23:1c:a9:f3:43:ba:25:05:c5:1c: d6:a3:a0:96:cc:11:62:cb:03:e6:3d:85:3a:9c:16: d3:4d:d0:17:f1:6c:dc:ed:78:e7:4c:2a:d8:0d:0f: 36:7c:3e:bc:96:44:b5:84:56:ad:40:b3:7e:fe:51: f7:f6:a4:a3:c5:7e:74:3c:d8:d3:95:24:eb:59:d4: 61:06:84:36:db:55:06:5c:31:13:04:0e:a7:64:57: 38:38:27:bf:aa:f5:5c:21:d1:74:85:de:71:fa:4f: 97:7c:29:64:8f:6d:69:81:ed:4d:7f:4e:ac:08:22: 71:0a:f1:71:83:02:b2:72:df:a3:b8:51:8e:09:a8: ee:3d:a2:32:1a:f2:a9:55:d9:1a:cb:4d:b7:62:f5: f5:e1:20:28:69:52:3b:9c:e0:4f:e9:1c:af:b9:dc: 36:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A8:56:8B:26:07:57:50:B8:5C:36:A1:CF:11:98:63:7E:D6:24:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:58:2e:a1:f2:f9:7e:ea:ee:80:01:c6:65:57:4a:c1:9a:27: 65:78:93:d0:0d:1d:c6:62:4f:75:63:0b:04:e5:7f:48:9e:21: 51:89:c6:d3:6a:05:23:3a:6f:f2:9f:90:02:79:89:c3:64:02: f3:8d:6b:e9:27:fa:04:54:da:1b:2e:4c:84:ab:17:4f:fd:68: 70:29:8e:b6:24:ac:5c:b4:e6:44:44:3c:56:e3:28:df:a9:78: 0b:3f:fe:a7:bc:74:de:b5:f8:18:4f:0b:3f:56:60:aa:9e:c8: d7:c7:29:ea:48:a8:15:86:99:bb:45:06:03:bd:29:a6:06:fc: 18:b8:14:a2:43:b5:dd:9c:7a:00:a2:0f:03:d2:59:1f:d2:38: f0:9f:34:d7:1a:f8:73:38:13:dd:9a:91:39:dd:88:73:ed:b9: 0a:e0:0a:0a:c5:63:bb:da:d0:3e:e6:13:d3:95:16:f0:9d:f2: d1:22:c4:10:06:36:ea:c4:d5:54:38:bf:7c:86:da:f7:65:28: 66:18:57:f1:5a:26:93:1f:60:12:1f:30:d6:0f:0b:43:7a:fb: 15:b3:2a:e7:d3:62:c0:5b:af:9e:28:b2:4f:43:fd:be:a1:bb: a4:6b:c3:55:c1:8c:2c:69:8b:00:ea:5d:2d:95:75:c0:01:71: b7:0e:4e:80 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqrJk+yd6lzPHeEP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk ODI2ZmE4YzctNjM0OC00ZmE0LTg2YzctZjY4NzkwYTk4OWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ02oLDd4LmSNk3Zgh/iLXuRe/+AEM4IKtc9 1N1Nfpb2aLoKtiWes/oaMpteczvjVpohmbKqBUc5bvFn9iXwvbmuq5R+Tt+T0Yxj W20dgEIM4ovYBQz8OuixutdhriMcqfNDuiUFxRzWo6CWzBFiywPmPYU6nBbTTdAX 8Wzc7XjnTCrYDQ82fD68lkS1hFatQLN+/lH39qSjxX50PNjTlSTrWdRhBoQ221UG XDETBA6nZFc4OCe/qvVcIdF0hd5x+k+XfClkj21pge1Nf06sCCJxCvFxgwKyct+j uFGOCajuPaIyGvKpVdkay023YvX14SAoaVI7nOBP6Ryvudw2qQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFM2oVosmB1dQuFw2oc8RmGN+1iRFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvYzk3ZDc2YTctZTljYS0z ODEyLTkxM2MtNTlmM2FkOGM5ZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJhYLqHy+X7q7oABxmVXSsGaJ2V4k9ANHcZiT3VjCwTlf0ie IVGJxtNqBSM6b/KfkAJ5icNkAvONa+kn+gRU2hsuTISrF0/9aHApjrYkrFy05kRE PFbjKN+peAs//qe8dN61+BhPCz9WYKqeyNfHKepIqBWGmbtFBgO9KaYG/Bi4FKJD td2cegCiDwPSWR/SOPCfNNca+HM4E92akTndiHPtuQrgCgrFY7va0D7mE9OVFvCd 8tEixBAGNurE1VQ4v3yG2vdlKGYYV/FaJpMfYBIfMNYPC0N6+xWzKufTYsBbr54o sk9D/b6hu6Rrw1XBjCxpiwDqXS2VdcABcbcOToA= -----END CERTIFICATE-----Generated at Mon Aug 4 18:22:59 2025 by rpki-client