$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa File: 571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa (raw, json) Hash identifier: 2jCX8Vd/081k2qgKlzOfAACYkKqG4aaA4unxdKpfd8M= Subject key identifier: 8F:90:70:79:4A:1F:BA:00:6C:5B:66:00:7A:A9:55:C3:87:8F:AA:75 Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F4328584D4A8F9FF9FE509005C7CCA300 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 36351 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:9f:f9:fe:50:90:05:c7:cc:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=1aaba9df-4ce5-43d3-af06-2023b066e311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a0:55:15:ba:ee:b6:f1:c0:dd:79:94:06:a1: 49:4a:06:d6:1f:2b:8f:c0:98:03:fe:a8:f6:ab:6f: 37:3a:3f:68:fa:bc:da:ad:5f:a3:c9:58:70:e9:3f: 42:f6:6a:00:2e:4a:db:52:29:d4:31:84:e2:84:7f: aa:18:6f:8a:35:1b:a2:38:97:02:10:c7:e1:13:56: 37:31:c1:5a:ea:3e:83:45:35:7c:77:f4:0a:59:fc: 05:d9:b3:d6:02:7b:1a:34:ec:4e:e6:c8:9f:76:55: 24:da:67:0e:28:44:73:9a:79:04:a3:68:fa:82:cd: c9:77:d0:b4:4c:78:f7:1c:31:66:d5:cd:09:e5:b8: 6b:3a:e1:b3:8d:cc:78:b3:3b:d1:66:69:d2:ae:7e: a0:ef:fb:86:2f:38:b3:a8:27:4d:31:ac:1a:93:f1: e4:a7:67:8d:3e:bf:dc:5e:d8:22:a1:1e:4a:76:be: 0a:0f:70:bc:84:2e:9e:4c:48:c1:e4:d6:82:df:94: a6:f7:3e:e6:13:b5:dc:75:1e:02:71:b0:b2:0c:5f: 34:b4:e8:46:45:89:f7:fb:06:15:9c:d0:eb:8d:6e: 9a:74:5c:fb:92:fa:7d:45:40:37:50:f6:8d:c3:78: 28:9a:d6:01:2d:3b:7e:22:ea:cc:d9:f3:60:c4:fc: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:90:70:79:4A:1F:BA:00:6C:5B:66:00:7A:A9:55:C3:87:8F:AA:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8e:fc:95:6c:61:e1:eb:29:06:48:9f:1a:54:ba:6e:62:df: 52:ba:a4:3b:18:66:2b:30:4f:e9:75:a5:1e:19:61:27:b9:d4: 5d:60:35:05:d9:d3:58:07:38:cc:c4:b1:6b:2f:fb:a7:70:1b: b1:65:08:59:19:f2:b6:0a:f3:c7:a9:ef:8c:f7:9c:1a:5c:cc: 27:6b:c8:0c:c2:82:0d:de:a7:67:aa:ad:57:1a:31:99:36:22: 72:94:9a:54:b2:76:ef:a0:f6:0b:8c:0a:c3:8d:53:e7:1b:e2: 14:05:1f:5d:3d:6f:02:7e:c8:72:29:0a:fe:db:89:ed:1c:39: 66:d6:2a:b3:cd:4a:60:d5:21:0c:bf:02:cf:de:c7:a3:0e:ad: 30:e9:1c:b7:be:92:63:4f:9d:42:3e:b5:be:52:5c:8e:cc:ee: 70:a5:5b:5a:df:21:2d:e2:a1:68:17:60:a2:87:be:ce:69:f8: c3:80:10:2b:bc:93:ba:01:61:e1:4e:fb:85:e8:c5:bb:e5:42: 41:bf:85:88:49:4d:07:f4:e9:65:50:5e:db:eb:b8:a8:c6:08: 44:15:9e:18:d4:8a:43:fe:02:2e:6d:07:38:7f:cf:ec:4e:c4: 9c:fd:82:7f:ad:43:a4:16:96:64:68:a1:a0:20:30:37:19:f1: 7d:e1:87:4f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1Kj5/5/lCQBcfMowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk MWFhYmE5ZGYtNGNlNS00M2QzLWFmMDYtMjAyM2IwNjZlMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaBVFbrutvHA3XmUBqFJSgbWHyuPwJgD/qj2 q283Oj9o+rzarV+jyVhw6T9C9moALkrbUinUMYTihH+qGG+KNRuiOJcCEMfhE1Y3 McFa6j6DRTV8d/QKWfwF2bPWAnsaNOxO5sifdlUk2mcOKERzmnkEo2j6gs3Jd9C0 THj3HDFm1c0J5bhrOuGzjcx4szvRZmnSrn6g7/uGLzizqCdNMawak/Hkp2eNPr/c XtgioR5Kdr4KD3C8hC6eTEjB5NaC35Sm9z7mE7XcdR4CcbCyDF80tOhGRYn3+wYV nNDrjW6adFz7kvp9RUA3UPaNw3gomtYBLTt+IurM2fNgxPz+twIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFI+QcHlKH7oAbFtmAHqpVcOHj6p1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvNTcxZDFjMGQtZGVhMS0z ZDlmLTlmNzctYjRhNjZlYWQzZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI2O/JVsYeHrKQZInxpUum5i31K6pDsYZiswT+l1pR4ZYSe5 1F1gNQXZ01gHOMzEsWsv+6dwG7FlCFkZ8rYK88ep74z3nBpczCdryAzCgg3ep2eq rVcaMZk2InKUmlSydu+g9guMCsONU+cb4hQFH109bwJ+yHIpCv7bie0cOWbWKrPN SmDVIQy/As/ex6MOrTDpHLe+kmNPnUI+tb5SXI7M7nClW1rfIS3ioWgXYKKHvs5p +MOAECu8k7oBYeFO+4XoxbvlQkG/hYhJTQf06WVQXtvruKjGCEQVnhjUikP+Ai5t Bzh/z+xOxJz9gn+tQ6QWlmRooaAgMDcZ8X3hh08= -----END CERTIFICATE-----Generated at Thu Mar 26 12:19:22 2026 by rpki-client