$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/213b928d-a0ca-3a2a-b210-23856b353e9d.roa File: 213b928d-a0ca-3a2a-b210-23856b353e9d.roa (raw, json) Hash identifier: XoE7By+viyi8SH/DNZ5aBSR31mKdVMs3L+v3ZNsnIZA= Subject key identifier: E7:15:EA:59:4F:91:9A:81:C5:69:92:3B:5B:19:01:A9:E4:C9:6D:31 Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F4328584B970CD82E2C144EB7AAA78500 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/213b928d-a0ca-3a2a-b210-23856b353e9d.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 54825 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d8:2e:2c:14:4e:b7:aa:a7:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=a78c237b-e03c-4dec-bec1-3306fc27b6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:74:b2:2b:75:50:9f:de:ff:02:7b:c3:ef:b4: 47:c2:a7:aa:bc:9d:12:9a:16:17:f5:a2:2c:c4:e9: de:a8:a9:ac:49:f5:1c:17:cb:9c:87:79:7e:35:54: 05:2e:b6:f8:67:d7:ee:88:2c:ed:af:98:6c:a5:2b: 45:c4:b5:5e:d6:f7:e1:e8:53:7e:cc:80:0d:46:bb: 4e:60:d3:b3:e9:a7:46:8b:e8:f0:77:34:09:c2:51: 95:ce:21:e0:c4:90:38:d4:10:46:8c:bf:69:10:f4: 77:9d:9a:6d:8c:68:e4:ac:be:68:a2:40:f0:dc:80: ca:ce:6f:d8:2b:d0:fb:c6:24:b6:c3:a6:c4:19:ef: 02:ac:06:20:83:88:4b:75:42:90:a1:b0:64:c2:bb: 90:ed:ab:17:19:d6:af:83:07:1c:9d:13:fb:fc:45: 40:b7:7a:5b:63:5e:7a:10:be:97:ca:f2:65:7a:31: 10:4e:43:04:a4:08:d5:40:30:dd:77:c1:69:f4:13: 35:98:e6:eb:79:07:ab:57:01:02:d7:8e:14:1e:e4: 60:ee:b9:1a:dd:09:86:3a:20:a4:6a:c3:52:91:fd: 26:84:59:cf:5d:73:b2:5d:c5:4e:0f:2b:50:77:a8: 66:68:60:3d:fd:c4:12:9c:b6:45:a8:28:27:63:5b: e3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:15:EA:59:4F:91:9A:81:C5:69:92:3B:5B:19:01:A9:E4:C9:6D:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/213b928d-a0ca-3a2a-b210-23856b353e9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:3a:87:47:d0:e8:e0:b6:89:44:1c:15:dd:44:2e:ec:a3:58: 41:4a:8f:8c:0a:79:fa:2c:2e:2e:7d:70:a1:72:ce:1c:ae:55: a5:f9:08:4e:6e:a1:76:35:ef:96:b6:b7:1c:28:bf:80:e3:96: 71:d2:b4:37:98:91:c5:1c:33:d5:43:91:6a:01:67:9a:ce:68: 96:2b:a2:7b:69:9a:f2:50:4b:e6:b6:01:80:fe:d3:ea:e8:b5: de:88:ba:bc:63:95:27:bc:18:99:40:f1:5a:62:0d:6e:b6:4b: 05:e2:66:fe:bf:31:fa:69:fc:84:5b:85:b8:30:01:36:85:dc: 30:d9:e7:ea:3e:0c:2c:8b:71:9c:c5:ef:d6:b1:f3:67:c7:69: 59:f7:18:bb:31:a0:51:49:0b:33:67:b0:8a:93:43:2b:d3:c2: a9:21:d8:78:66:0f:53:2b:48:75:5b:55:fe:aa:52:f6:f6:7b: 4f:3c:71:99:67:6c:97:f5:15:68:eb:00:77:6c:f6:f7:0f:bd: 4f:63:a2:ba:4e:61:5a:53:28:b2:e7:31:56:52:02:20:f9:79: 0b:cb:dc:19:6b:fb:d9:d0:f5:8f:ea:9a:14:9a:13:d7:f7:ab: d9:b5:28:6d:d6:97:3a:0f:f5:e4:d7:a3:de:45:67:35:aa:81: 91:ff:34:47 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuXDNguLBROt6qnhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YTc4YzIzN2ItZTAzYy00ZGVjLWJlYzEtMzMwNmZjMjdiNmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHSyK3VQn97/AnvD77RHwqeqvJ0SmhYX9aIs xOneqKmsSfUcF8uch3l+NVQFLrb4Z9fuiCztr5hspStFxLVe1vfh6FN+zIANRrtO YNOz6adGi+jwdzQJwlGVziHgxJA41BBGjL9pEPR3nZptjGjkrL5ookDw3IDKzm/Y K9D7xiS2w6bEGe8CrAYgg4hLdUKQobBkwruQ7asXGdavgwccnRP7/EVAt3pbY156 EL6XyvJlejEQTkMEpAjVQDDdd8Fp9BM1mObreQerVwEC144UHuRg7rka3QmGOiCk asNSkf0mhFnPXXOyXcVODytQd6hmaGA9/cQSnLZFqCgnY1vjdQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOcV6llPkZqBxWmSO1sZAankyW0xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvMjEzYjkyOGQtYTBjYS0z YTJhLWIyMTAtMjM4NTZiMzUzZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG86h0fQ6OC2iUQcFd1ELuyjWEFKj4wKefosLi59cKFyzhyu VaX5CE5uoXY175a2txwov4DjlnHStDeYkcUcM9VDkWoBZ5rOaJYrontpmvJQS+a2 AYD+0+rotd6IurxjlSe8GJlA8VpiDW62SwXiZv6/Mfpp/IRbhbgwATaF3DDZ5+o+ DCyLcZzF79ax82fHaVn3GLsxoFFJCzNnsIqTQyvTwqkh2HhmD1MrSHVbVf6qUvb2 e088cZlnbJf1FWjrAHds9vcPvU9jorpOYVpTKLLnMVZSAiD5eQvL3Blr+9nQ9Y/q mhSaE9f3q9m1KG3WlzoP9eTXo95FZzWqgZH/NEc= -----END CERTIFICATE-----Generated at Wed Oct 22 20:12:31 2025 by rpki-client