$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa File: 571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa (raw, json) Hash identifier: pyMfh7y6ZR6fNYrPAhrFLvyXu9emjnXCvyUgZGH8VFs= Subject key identifier: 1D:1E:C1:6E:18:5D:B7:91:EA:94:00:44:55:10:BD:D5:26:E0:F7:A8 Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F4328584B8BE2210A1C73A1DB5E5126A0 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 36351 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:21:0a:1c:73:a1:db:5e:51:26:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=53bc60cc-3c4f-4807-b87e-1122cd19d358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c6:92:96:96:db:49:42:41:6c:a2:62:dc:66: 5b:92:3c:72:5c:17:7c:6f:9b:a7:d2:b0:33:c9:d6: 94:c1:ad:50:89:d4:16:01:30:25:41:fa:88:80:7f: 6b:07:7e:1c:2e:4b:55:da:7d:1f:aa:5f:43:cd:e9: 79:cf:3a:ae:8a:05:44:69:2f:c1:9c:56:31:7e:3d: 70:7e:5f:65:cb:66:52:09:fc:2b:37:4d:7f:30:14: 6f:31:2d:0f:a2:39:eb:95:4a:a0:d5:71:0d:84:69: 97:8c:36:d3:6d:8c:8d:e7:05:ca:43:f7:4b:d5:ca: b0:73:3f:2b:ad:70:7e:28:e1:24:79:b7:72:8b:dd: d3:c3:40:5a:ef:ba:45:8f:2f:4f:e4:f5:f4:5a:af: 2c:db:87:94:f6:19:f8:53:8c:8f:4c:52:68:d0:94: eb:41:77:51:bf:2f:80:a4:17:42:0f:e1:e2:6d:45: 4d:2b:f7:d9:e2:ee:7b:ca:13:79:0a:df:31:ec:d4: cb:f5:92:67:ac:a0:29:c9:aa:a4:91:16:fe:f9:f9: fd:63:6c:be:31:aa:9a:33:02:2d:19:17:69:cc:44: e6:20:83:0c:90:fc:d0:72:66:37:42:e0:32:fe:e4: a4:43:f2:2c:fc:af:c4:6e:06:1e:b5:2f:e5:f4:6e: 4b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1E:C1:6E:18:5D:B7:91:EA:94:00:44:55:10:BD:D5:26:E0:F7:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/571d1c0d-dea1-3d9f-9f77-b4a66ead3fd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:90:c0:5e:06:9d:33:10:a3:eb:bf:ad:d1:66:0e:47:59:be: 28:04:51:50:57:3d:a8:20:f6:0e:1f:90:98:c9:a4:77:51:39: 0b:fd:7d:bc:75:3f:32:7b:4e:10:21:8c:20:50:61:99:16:26: 8e:e2:cb:20:26:ec:ea:2b:5e:01:f6:ce:3a:71:52:5f:c8:35: 8c:51:46:d1:e0:52:14:05:78:88:f0:33:cd:c1:ca:f5:43:26: 9e:b2:e7:3f:a6:09:f1:5a:c7:00:3f:d3:10:d0:8f:f4:94:26: 77:9a:b1:79:d1:86:6b:c2:7d:51:9c:eb:2f:fe:40:4e:a9:20: ae:11:e3:99:92:0d:fb:ee:6c:ca:5f:57:35:78:03:5e:34:7a: ba:e2:36:50:85:1e:9e:ad:f5:2e:cc:61:b7:25:29:0c:1a:22: 7b:ac:20:5f:4f:9e:b5:3d:e7:b0:94:e2:25:c8:12:f8:99:11: 12:80:28:b3:3d:93:17:c0:9b:36:4b:75:6b:ce:6d:a6:56:0e: 98:05:38:06:66:27:2c:60:71:c8:1b:74:cf:bc:c1:a7:4d:66: f4:b9:ce:9a:ec:be:91:19:2e:37:bf:63:63:1f:f1:67:02:23: 12:eb:ef:6c:b0:e0:71:47:69:1c:58:27:d6:5b:29:1f:2c:4e: ae:4c:93:74 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuL4iEKHHOh215RJqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk NTNiYzYwY2MtM2M0Zi00ODA3LWI4N2UtMTEyMmNkMTlkMzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMaSlpbbSUJBbKJi3GZbkjxyXBd8b5un0rAz ydaUwa1QidQWATAlQfqIgH9rB34cLktV2n0fql9Dzel5zzquigVEaS/BnFYxfj1w fl9ly2ZSCfwrN01/MBRvMS0PojnrlUqg1XENhGmXjDbTbYyN5wXKQ/dL1cqwcz8r rXB+KOEkebdyi93Tw0Ba77pFjy9P5PX0Wq8s24eU9hn4U4yPTFJo0JTrQXdRvy+A pBdCD+HibUVNK/fZ4u57yhN5Ct8x7NTL9ZJnrKApyaqkkRb++fn9Y2y+MaqaMwIt GRdpzETmIIMMkPzQcmY3QuAy/uSkQ/Is/K/EbgYetS/l9G5LbwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFB0ewW4YXbeR6pQARFUQvdUm4PeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvNTcxZDFjMGQtZGVhMS0z ZDlmLTlmNzctYjRhNjZlYWQzZmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD6QwF4GnTMQo+u/rdFmDkdZvigEUVBXPagg9g4fkJjJpHdR OQv9fbx1PzJ7ThAhjCBQYZkWJo7iyyAm7OorXgH2zjpxUl/INYxRRtHgUhQFeIjw M83ByvVDJp6y5z+mCfFaxwA/0xDQj/SUJneasXnRhmvCfVGc6y/+QE6pIK4R45mS DfvubMpfVzV4A140erriNlCFHp6t9S7MYbclKQwaInusIF9PnrU957CU4iXIEviZ ERKAKLM9kxfAmzZLdWvObaZWDpgFOAZmJyxgccgbdM+8wadNZvS5zprsvpEZLje/ Y2Mf8WcCIxLr72yw4HFHaRxYJ9ZbKR8sTq5Mk3Q= -----END CERTIFICATE-----Generated at Mon Oct 20 13:19:20 2025 by rpki-client