$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa File: c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa (raw, json) Hash identifier: 9yYBCTMQ5EZ2sSoPYylSIy9IZC718ewpl2XidaW/hhc= Subject key identifier: 8E:17:D2:35:C6:A8:D9:33:10:8F:5D:36:17:BD:57:8C:7B:5D:F4:64 Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F4328584B8BE214FF393005F15F929600 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:14:ff:39:30:05:f1:5f:92:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=67c6fab9-4abf-4869-8d24-7fd131af4673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d4:e9:06:31:44:93:4b:38:b4:a1:14:70:99: b4:81:9e:9b:3c:2c:74:6a:ed:af:f2:fd:e0:83:7e: 82:cf:8a:1e:72:66:dc:1f:35:89:71:a2:67:e7:39: a5:32:13:b9:19:cf:49:01:f3:44:b6:fa:ca:27:d0: ac:8f:c1:14:7c:04:7b:cf:42:5c:04:b3:39:5b:60: f6:4a:c0:26:34:c7:27:fd:81:9c:ed:ab:13:da:d5: b6:11:45:ce:a0:74:26:cb:ff:c2:b4:24:52:87:ad: 04:b0:ff:dc:4a:b8:0f:8f:48:f5:73:49:f3:de:e9: 65:c5:1d:5d:16:6f:2a:99:86:d1:84:1e:52:a1:1b: a0:a7:61:fd:05:da:a6:99:87:02:8d:14:2b:89:cf: b6:62:17:07:32:0d:0c:9a:d0:c8:4e:aa:b6:8e:50: 70:ad:0d:28:37:00:09:7d:0b:58:fd:49:d2:1a:e5: 96:aa:a9:8e:5f:03:7f:f2:c6:16:a7:69:6f:54:94: 98:65:19:21:96:0b:0b:48:ab:14:00:6e:51:e2:c0: 95:dd:69:b0:eb:7a:53:ba:4c:c6:03:68:ef:4b:bc: 8e:d4:42:3a:ad:71:26:38:e7:82:1d:b6:56:06:61: 0d:39:d3:85:8f:30:d8:39:ee:70:f1:6d:53:13:83: b5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:17:D2:35:C6:A8:D9:33:10:8F:5D:36:17:BD:57:8C:7B:5D:F4:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b2:80:c6:d5:c8:ce:a1:9c:56:0b:b5:48:f1:3f:16:fb:38: 03:18:95:b3:6e:ef:6e:05:be:24:02:f1:7d:be:04:ab:65:3a: c5:93:15:0a:4d:22:7b:40:88:59:d9:e4:d2:44:60:81:ce:6f: 3f:20:c1:75:d4:99:44:ed:dc:80:e6:dd:0c:ee:c5:15:07:4f: 37:80:1f:53:7b:be:4b:4f:9c:64:53:fe:ad:c6:03:07:00:8c: 64:46:cf:98:3f:0d:d8:0c:07:0e:08:cc:33:81:68:18:5b:c5: ac:85:30:93:e8:c3:3f:96:df:a0:39:33:85:99:cf:14:bd:aa: 12:ce:51:2c:05:b9:12:83:20:41:32:85:77:53:f4:77:08:0c: 48:cf:c9:56:08:24:eb:6e:40:40:d6:71:9f:3f:26:4f:2b:2d: cc:b7:91:97:2a:f6:c5:6d:97:de:3e:95:a1:95:38:66:80:bd: b4:ac:24:f6:5c:03:12:26:76:f3:ee:ca:0c:6b:57:46:fd:25: 9d:09:44:de:78:da:cd:8f:de:31:31:a2:a2:2b:06:53:b9:d5: 67:ff:30:0a:ac:6f:6e:dc:6e:c9:c8:c1:b4:3f:99:4e:da:e7: 67:db:70:55:af:5b:2f:8d:ef:23:ff:e6:20:53:c9:d9:31:34: 3e:e6:7d:98 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuL4hT/OTAF8V+SlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk NjdjNmZhYjktNGFiZi00ODY5LThkMjQtN2ZkMTMxYWY0NjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNTpBjFEk0s4tKEUcJm0gZ6bPCx0au2v8v3g g36Cz4oecmbcHzWJcaJn5zmlMhO5Gc9JAfNEtvrKJ9Csj8EUfAR7z0JcBLM5W2D2 SsAmNMcn/YGc7asT2tW2EUXOoHQmy//CtCRSh60EsP/cSrgPj0j1c0nz3ullxR1d Fm8qmYbRhB5SoRugp2H9BdqmmYcCjRQric+2YhcHMg0MmtDITqq2jlBwrQ0oNwAJ fQtY/UnSGuWWqqmOXwN/8sYWp2lvVJSYZRkhlgsLSKsUAG5R4sCV3Wmw63pTukzG A2jvS7yO1EI6rXEmOOeCHbZWBmENOdOFjzDYOe5w8W1TE4O1bwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFI4X0jXGqNkzEI9dNhe9V4x7XfRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvYzk3ZDc2YTctZTljYS0z ODEyLTkxM2MtNTlmM2FkOGM5ZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABOygMbVyM6hnFYLtUjxPxb7OAMYlbNu724FviQC8X2+BKtl OsWTFQpNIntAiFnZ5NJEYIHObz8gwXXUmUTt3IDm3QzuxRUHTzeAH1N7vktPnGRT /q3GAwcAjGRGz5g/DdgMBw4IzDOBaBhbxayFMJPowz+W36A5M4WZzxS9qhLOUSwF uRKDIEEyhXdT9HcIDEjPyVYIJOtuQEDWcZ8/Jk8rLcy3kZcq9sVtl94+laGVOGaA vbSsJPZcAxImdvPuygxrV0b9JZ0JRN542s2P3jExoqIrBlO51Wf/MAqsb27cbsnI wbQ/mU7a52fbcFWvWy+N7yP/5iBTydkxND7mfZg= -----END CERTIFICATE-----Generated at Mon Oct 20 15:36:53 2025 by rpki-client