$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/0a793ce5-2a13-3752-babb-d659187f1a1c.roa File: 0a793ce5-2a13-3752-babb-d659187f1a1c.roa (raw, json) Hash identifier: u+NteNE/3PHNOqXrgpAUjlj90UGwNzcVtXbIcz6waak= Subject key identifier: 5C:F7:C4:59:93:72:55:B2:C7:4B:18:40:E3:E6:5C:3E:46:ED:4C:6F Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F4328584AE891214B47150E519FBA21C0 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/0a793ce5-2a13-3752-babb-d659187f1a1c.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 31898 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:21:4b:47:15:0e:51:9f:ba:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=9dfd66a0-14e5-4f86-9b47-c0a0f79efac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1c:52:d5:cc:76:8c:11:b2:d6:0c:a9:52:bd: 70:27:f1:fb:57:1b:ee:3b:c7:16:ba:d4:c7:ca:8f: 64:e3:7d:31:6a:96:3d:27:5d:fd:84:1e:b4:13:01: ee:c5:3c:53:a0:dc:4d:08:8d:21:58:96:de:2d:2e: c2:75:b4:84:73:2c:d2:e0:76:7c:9a:28:b0:cd:bf: b9:d7:e1:bb:95:4c:13:b2:cf:3b:54:35:b8:d9:03: ad:53:d1:f7:97:2f:3b:50:2a:9d:6d:d7:a8:e6:de: e5:cb:d8:0e:d2:c2:cb:49:16:36:4a:5b:de:b4:c5: 6d:6c:73:9d:db:59:1d:00:ee:2b:3a:41:f3:86:75: e6:f9:2c:57:76:88:e4:4c:db:98:fb:b0:0e:40:74: 8f:12:46:cf:b9:79:f8:12:47:c7:0f:85:28:95:97: 0a:9a:15:64:f9:b4:5c:b5:2a:fc:5c:f2:d5:11:cc: aa:64:46:57:d4:be:0f:7d:f4:d3:a3:82:4f:d3:26: 84:47:1c:a8:e5:96:6d:66:a7:62:45:bf:09:70:2a: e0:f3:bb:f0:a8:10:88:d7:a6:99:27:97:79:ee:7a: 62:46:90:0a:c1:21:e9:ab:7b:5b:34:52:83:1a:3e: 2c:50:4d:9f:c7:72:5a:90:24:47:3f:8d:21:e6:af: 4b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F7:C4:59:93:72:55:B2:C7:4B:18:40:E3:E6:5C:3E:46:ED:4C:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/0a793ce5-2a13-3752-babb-d659187f1a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:5c:9f:9b:32:78:08:86:62:dd:dc:58:d1:d8:ab:3e:e9:0a: 31:8a:53:24:f8:98:9b:8b:c7:c5:bc:ca:54:be:c0:94:8d:85: de:2a:9a:0c:ea:18:41:c1:b3:c6:51:90:b1:2c:39:4c:a8:35: cb:79:87:5d:1e:c6:14:99:f9:b9:e6:a4:46:e2:76:09:b7:64: d4:5c:a2:a5:8a:4e:3d:f0:7c:7e:11:27:c8:1c:2a:48:eb:98: d6:30:04:d5:bc:16:b0:82:77:3f:f3:10:c8:87:51:8b:b0:53: 4f:63:05:bc:3d:f8:ae:40:60:e4:81:6d:e2:21:ec:10:ee:99: 68:7e:e4:19:f4:5e:ba:85:0c:fc:cb:2b:12:ed:8b:94:9e:f5: 9a:98:7e:4a:66:b5:8b:d2:f6:92:6d:d5:da:86:5a:73:b5:b7: ad:9c:cc:ec:1c:8f:c5:5c:45:22:ea:81:a2:e5:1a:70:ea:85: 91:cb:a2:7b:19:dc:81:97:29:9a:51:a8:0f:d6:3a:d6:e8:93: 93:dc:55:bc:af:4d:de:b5:64:4f:99:c2:8c:0c:b4:cf:f9:31: bb:c2:66:38:9e:d7:dc:79:4f:d5:1e:24:11:d1:80:ec:41:60: 77:7b:25:b6:2e:21:d7:18:11:19:6f:48:4f:a6:58:4c:08:36: 21:d7:91:6f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErokSFLRxUOUZ+6IcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk OWRmZDY2YTAtMTRlNS00Zjg2LTliNDctYzBhMGY3OWVmYWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBxS1cx2jBGy1gypUr1wJ/H7VxvuO8cWutTH yo9k430xapY9J139hB60EwHuxTxToNxNCI0hWJbeLS7CdbSEcyzS4HZ8miiwzb+5 1+G7lUwTss87VDW42QOtU9H3ly87UCqdbdeo5t7ly9gO0sLLSRY2SlvetMVtbHOd 21kdAO4rOkHzhnXm+SxXdojkTNuY+7AOQHSPEkbPuXn4EkfHD4UolZcKmhVk+bRc tSr8XPLVEcyqZEZX1L4PffTTo4JP0yaERxyo5ZZtZqdiRb8JcCrg87vwqBCI16aZ J5d57npiRpAKwSHpq3tbNFKDGj4sUE2fx3JakCRHP40h5q9LZQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFz3xFmTclWyx0sYQOPmXD5G7UxvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvMGE3OTNjZTUtMmExMy0z NzUyLWJhYmItZDY1OTE4N2YxYTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAK5cn5syeAiGYt3cWNHYqz7pCjGKUyT4mJuLx8W8ylS+wJSN hd4qmgzqGEHBs8ZRkLEsOUyoNct5h10exhSZ+bnmpEbidgm3ZNRcoqWKTj3wfH4R J8gcKkjrmNYwBNW8FrCCdz/zEMiHUYuwU09jBbw9+K5AYOSBbeIh7BDumWh+5Bn0 XrqFDPzLKxLti5Se9ZqYfkpmtYvS9pJt1dqGWnO1t62czOwcj8VcRSLqgaLlGnDq hZHLonsZ3IGXKZpRqA/WOtbok5PcVbyvTd61ZE+ZwowMtM/5MbvCZjie19x5T9Ue JBHRgOxBYHd7JbYuIdcYERlvSE+mWEwINiHXkW8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:35:19 2025 by rpki-client