$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/dcd6626c-1861-32f9-8607-92a02a22b123.roa File: dcd6626c-1861-32f9-8607-92a02a22b123.roa (raw, json) Hash identifier: BSy/kRKGxk5PGHfdEqO51w6s46aOjEte2t9wYzG2ueE= Subject key identifier: B8:9F:20:45:26:79:9A:3D:E7:40:C3:74:5B:E1:7D:73:22:44:63:52 Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F4328584B99D788D3635C44F22531E680 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/dcd6626c-1861-32f9-8607-92a02a22b123.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 399107 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:88:d3:63:5c:44:f2:25:31:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=6df73e35-af22-47f7-95a1-251bbd81dc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:dc:b9:0f:1f:a0:59:b2:ba:c0:ef:c4:d3:79: 02:d4:9d:b8:92:1b:87:ee:8d:43:11:d7:3c:37:94: 20:50:fb:26:3b:17:0c:f4:58:68:20:b7:5d:6a:ce: f3:8e:8e:7e:a5:b0:63:ed:f9:08:95:03:f7:da:dc: 9a:57:87:f1:0e:a3:e8:57:0a:db:fb:0e:2b:cd:d3: ef:68:24:46:94:9c:88:ce:cd:23:76:23:27:17:ae: aa:b8:17:af:46:93:c1:e5:8f:7d:b5:e1:02:22:74: ab:2d:08:a0:8d:07:d8:41:5c:98:60:4b:f4:24:0b: 47:85:fb:01:b2:f0:92:3f:ba:d1:76:02:1f:48:0a: ce:6a:ea:c3:55:64:fa:a4:fe:5d:76:a6:ed:f4:28: d9:8e:97:ce:17:a3:f2:1f:6f:95:68:bd:f0:94:eb: 78:f2:da:9a:43:d8:05:cf:22:fb:2a:1d:8a:b1:86: b0:af:d7:4f:e3:67:f1:c9:ee:92:5b:56:95:73:c0: 78:16:b5:70:fb:ae:7b:32:fb:44:88:50:15:7c:70: 0a:2e:27:aa:f0:61:3c:d9:84:61:ff:a2:0d:d2:71: bb:5b:09:39:ad:90:fa:5b:58:5e:db:5a:b2:a6:af: 6e:24:23:1a:71:96:d3:07:0a:bd:10:d0:d1:61:f6: 47:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9F:20:45:26:79:9A:3D:E7:40:C3:74:5B:E1:7D:73:22:44:63:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/dcd6626c-1861-32f9-8607-92a02a22b123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:0b:61:48:cc:a4:d1:b5:d2:c9:4e:94:7f:7b:58:00:26:09: 54:38:d2:99:ad:37:51:f3:e4:5b:c9:36:83:f6:08:ab:c8:ca: ff:c7:ba:87:73:85:e3:b7:e5:50:62:f3:bd:e0:12:0a:b3:0e: 0b:1d:84:09:cd:45:24:5e:5e:9c:0a:fc:9e:bd:ea:16:34:29: 55:db:21:be:3d:25:58:f4:b8:36:1d:f5:99:97:39:1c:3c:55: 9d:b9:22:fc:af:f7:06:9c:02:1a:62:96:6c:de:7b:f5:64:30: af:cb:69:6c:3a:18:03:01:04:38:1d:dd:98:a4:8b:70:44:ad: b5:49:a6:3e:3b:3a:17:d9:6f:37:b2:50:71:24:7a:e1:9d:51: 10:3e:67:68:62:40:e2:e7:9d:ef:35:bd:1c:60:d9:b6:d4:23: fb:e6:b1:02:cf:cf:98:c2:41:d6:85:8d:07:e8:3f:6e:9a:9c: e8:d9:81:a4:50:80:9b:a8:6b:15:60:f6:5b:52:fd:33:40:4b: 63:a2:e0:49:5f:99:69:f2:58:32:c1:f2:07:6d:db:61:22:21: 61:23:00:be:ca:17:92:ff:7b:b1:ad:0e:45:5c:19:2e:7b:12: 7b:12:38:44:b1:71:b6:27:6c:0f:74:3c:68:f0:28:5d:21:96: 1d:b3:ae:38 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuZ14jTY1xE8iUx5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NmRmNzNlMzUtYWYyMi00N2Y3LTk1YTEtMjUxYmJkODFkYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdy5Dx+gWbK6wO/E03kC1J24khuH7o1DEdc8 N5QgUPsmOxcM9FhoILddas7zjo5+pbBj7fkIlQP32tyaV4fxDqPoVwrb+w4rzdPv aCRGlJyIzs0jdiMnF66quBevRpPB5Y99teECInSrLQigjQfYQVyYYEv0JAtHhfsB svCSP7rRdgIfSArOaurDVWT6pP5ddqbt9CjZjpfOF6PyH2+VaL3wlOt48tqaQ9gF zyL7Kh2KsYawr9dP42fxye6SW1aVc8B4FrVw+657MvtEiFAVfHAKLieq8GE82YRh /6IN0nG7Wwk5rZD6W1he21qypq9uJCMacZbTBwq9ENDRYfZHzwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLifIEUmeZo950DDdFvhfXMiRGNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvZGNkNjYyNmMtMTg2MS0z MmY5LTg2MDctOTJhMDJhMjJiMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC0LYUjMpNG10slOlH97WAAmCVQ40pmtN1Hz5FvJNoP2CKvI yv/HuodzheO35VBi873gEgqzDgsdhAnNRSReXpwK/J696hY0KVXbIb49JVj0uDYd 9ZmXORw8VZ25Ivyv9wacAhpilmzee/VkMK/LaWw6GAMBBDgd3Ziki3BErbVJpj47 OhfZbzeyUHEkeuGdURA+Z2hiQOLnne81vRxg2bbUI/vmsQLPz5jCQdaFjQfoP26a nOjZgaRQgJuoaxVg9ltS/TNAS2Oi4ElfmWnyWDLB8gdt22EiIWEjAL7KF5L/e7Gt DkVcGS57EnsSOESxcbYnbA90PGjwKF0hlh2zrjg= -----END CERTIFICATE-----Generated at Wed Nov 5 12:13:40 2025 by rpki-client