$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d07a9f1d-cf32-3368-b906-ef01c400b6f1.roa File: d07a9f1d-cf32-3368-b906-ef01c400b6f1.roa (raw, json) Hash identifier: Zgj7euZcq0TTHrfdhei6quobN8XLj0i9JULz/pBQWhE= Subject key identifier: D6:17:AE:52:38:4F:2A:23:24:C9:C1:87:7D:6D:88:50:72:6D:C6:7D Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F43285849CBCF8DC1A195341F8D950800 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d07a9f1d-cf32-3368-b906-ef01c400b6f1.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:8d:c1:a1:95:34:1f:8d:95:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=c8e8fe4a-f9da-40d2-99d3-e9b0cc0bf5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:c4:a6:72:31:32:72:e8:49:b2:9c:da:23: 0a:4e:99:fb:c5:8e:fa:1c:4e:86:1c:88:25:71:b3: 6e:dd:6a:62:b9:db:f6:9c:e9:df:d6:64:d3:32:6d: fc:3b:2f:10:e6:14:5a:72:1d:b5:f3:cd:ef:55:c3: 75:6c:8e:8d:d8:b9:f6:42:49:82:c4:2f:f1:6f:d6: fd:14:48:fa:12:58:11:4b:30:0b:48:23:f3:96:e7: 21:dd:18:75:77:9f:a9:b2:92:38:ee:1a:11:df:8c: b6:5f:00:87:8e:dc:94:33:8c:95:64:7e:71:67:23: 13:c0:5c:8f:44:08:e8:61:57:ab:8f:fa:81:5c:48: a5:af:d6:b5:dd:b3:e8:ee:bd:69:f8:1d:58:c3:12: 5a:7a:51:42:c4:53:64:74:78:1d:b3:54:82:af:95: 15:f5:42:7f:a7:20:2e:a3:ad:94:de:9b:09:93:42: 06:dc:9f:73:a9:cc:7f:88:d6:a6:be:e4:ae:81:49: dd:fb:39:2d:9e:f5:39:c3:6d:73:14:16:99:03:0c: d0:1b:13:1e:48:b8:e0:70:33:bf:af:a9:54:ea:1e: 4b:7c:90:ca:14:19:e6:7d:1e:1f:e4:45:88:51:41: 17:4d:38:6b:45:ef:3b:e1:ae:d4:00:0d:10:7b:f6: 84:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:17:AE:52:38:4F:2A:23:24:C9:C1:87:7D:6D:88:50:72:6D:C6:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d07a9f1d-cf32-3368-b906-ef01c400b6f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:93:b5:09:88:d5:84:47:32:49:8d:b2:86:8f:1d:28:b1:a1: 10:18:03:53:3c:93:5c:a4:ea:f3:21:b0:5d:8a:45:5f:d9:3a: 52:3f:75:ba:b6:85:5e:6d:58:01:13:ca:b0:32:3f:2e:5c:56: ec:0f:15:b2:60:b6:f0:5e:21:08:8d:15:e0:d8:02:79:d6:1b: d0:a3:01:c3:65:8d:27:14:7f:33:ba:90:80:a2:3d:22:8e:69: 99:67:c5:15:2f:c1:5c:44:da:b8:1f:53:7b:f9:ea:1e:39:f7: 73:51:5e:de:ff:bc:7b:7f:60:14:e5:99:24:45:50:c1:09:d7: 7e:96:f5:9f:d6:4d:3f:f6:f9:f8:ba:0c:d2:1b:40:b0:80:56: 80:a5:80:3b:cc:af:0f:4b:11:94:64:90:78:32:e7:b1:bd:c0: 4d:ad:c7:93:af:00:d0:fc:da:6a:8e:20:f9:86:e2:1c:2a:ec: 2e:35:b7:93:87:14:68:bf:c1:b5:ef:d5:f0:94:48:d5:9c:fd: f2:99:fb:e2:c5:4d:0f:60:80:5c:ec:18:48:ec:fe:af:43:ff: 54:95:76:24:d8:0e:7b:38:1a:bd:76:90:66:b8:bb:50:67:84: a5:ab:e1:d8:6c:cd:01:5e:3d:bf:00:6f:64:55:67:a7:0b:4b: 8f:ef:4c:bd -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnLz43BoZU0H42VCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk YzhlOGZlNGEtZjlkYS00MGQyLTk5ZDMtZTliMGNjMGJmNWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCfEpnIxMnLoSbKc2iMKTpn7xY76HE6GHIgl cbNu3Wpiudv2nOnf1mTTMm38Oy8Q5hRach21883vVcN1bI6N2Ln2QkmCxC/xb9b9 FEj6ElgRSzALSCPzluch3Rh1d5+pspI47hoR34y2XwCHjtyUM4yVZH5xZyMTwFyP RAjoYVerj/qBXEilr9a13bPo7r1p+B1YwxJaelFCxFNkdHgds1SCr5UV9UJ/pyAu o62U3psJk0IG3J9zqcx/iNamvuSugUnd+zktnvU5w21zFBaZAwzQGxMeSLjgcDO/ r6lU6h5LfJDKFBnmfR4f5EWIUUEXTThrRe874a7UAA0Qe/aEyQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNYXrlI4TyojJMnBh31tiFBybcZ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvZDA3YTlmMWQtY2YzMi0z MzY4LWI5MDYtZWYwMWM0MDBiNmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFmTtQmI1YRHMkmNsoaPHSixoRAYA1M8k1yk6vMhsF2KRV/Z OlI/dbq2hV5tWAETyrAyPy5cVuwPFbJgtvBeIQiNFeDYAnnWG9CjAcNljScUfzO6 kICiPSKOaZlnxRUvwVxE2rgfU3v56h4593NRXt7/vHt/YBTlmSRFUMEJ136W9Z/W TT/2+fi6DNIbQLCAVoClgDvMrw9LEZRkkHgy57G9wE2tx5OvAND82mqOIPmG4hwq 7C41t5OHFGi/wbXv1fCUSNWc/fKZ++LFTQ9ggFzsGEjs/q9D/1SVdiTYDns4Gr12 kGa4u1BnhKWr4dhszQFePb8Ab2RVZ6cLS4/vTL0= -----END CERTIFICATE-----Generated at Sun Jun 15 00:00:37 2025 by rpki-client