$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/431d6262-5c18-3bbe-989a-e3bf39351b0f.roa File: 431d6262-5c18-3bbe-989a-e3bf39351b0f.roa (raw, json) Hash identifier: iD3NTSO8PskK4/3TSs/aKzgrOzDzi+pO9w3SPyGN72A= Subject key identifier: D7:FF:58:6C:DC:A8:0A:C9:87:42:61:34:F6:77:20:1F:67:74:3E:29 Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F4328584B99D788BFDE4D5680DBDE5C00 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/431d6262-5c18-3bbe-989a-e3bf39351b0f.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 399106 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:88:bf:de:4d:56:80:db:de:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=c52e96fc-27cc-415f-9aca-4eaa86b6841a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:97:70:f3:41:bc:90:8a:e0:74:20:36:18:0a: cc:71:30:bc:55:4a:d5:20:f9:ae:16:73:a1:93:15: f7:e4:ec:cd:1d:e7:a6:9a:8b:ff:fb:6d:24:1c:6e: cb:39:7f:5e:70:d8:7b:ca:44:89:64:56:88:e2:6c: 02:a4:51:08:ff:9a:12:a0:d6:a5:3a:89:3b:1d:b3: 7e:c7:f4:91:51:f2:b3:48:a6:57:0e:1a:55:06:85: 0a:9e:8a:69:e8:91:37:70:c0:e4:23:5c:50:c9:a9: 31:07:52:5e:ca:81:32:b2:12:cb:63:89:56:b5:53: 2c:47:df:5a:3d:f0:94:16:82:f8:d0:29:95:a2:50: 45:50:93:1f:66:d9:d4:5e:d6:48:39:5f:64:1b:ce: 57:5c:fe:76:d8:a6:c6:7c:17:c3:eb:62:c5:13:af: 3a:b1:d4:39:89:a0:ec:8a:f8:60:2e:33:22:e3:c7: d2:ac:2b:b2:2d:de:2e:bb:0e:8b:1c:29:e1:e9:78: a1:8e:2f:a5:59:43:dc:9e:fe:37:32:58:15:43:53: b9:8c:5f:1e:93:60:58:6e:97:8f:1f:34:51:91:b6: 2b:d5:38:ce:de:6c:4d:62:45:c3:cb:67:39:aa:50: 30:f7:0a:d8:9e:fc:a8:2a:da:43:37:ed:55:46:ec: 9a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FF:58:6C:DC:A8:0A:C9:87:42:61:34:F6:77:20:1F:67:74:3E:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/431d6262-5c18-3bbe-989a-e3bf39351b0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:cb:65:33:ba:54:29:22:53:f0:21:d1:c1:a4:2a:2a:d6:b1: 40:f0:63:53:3c:57:a1:58:b4:68:65:27:d9:3a:4e:5b:63:e9: d7:e5:40:8c:4f:f0:e5:ef:89:8b:f7:4b:9f:9e:36:a1:78:09: 66:ed:6d:c2:a0:b3:aa:7b:79:47:35:e6:58:d0:c9:09:4b:0d: be:e5:0c:a6:7b:50:24:29:37:f7:75:84:f0:06:3e:c1:94:9f: 76:e5:e0:c4:a1:f6:e5:1d:58:17:66:e6:2c:f9:a3:b4:91:f9: d5:c7:7e:55:7d:b8:8b:7e:e3:86:7c:1c:70:e6:3e:11:c7:56: e8:21:22:19:2d:79:bd:cd:29:35:a2:e5:d1:79:50:9c:21:8c: 26:1f:f2:64:ec:e7:35:d9:59:98:f9:98:6f:d2:4e:9a:59:37: f2:e2:69:cc:49:4c:3b:8c:44:75:04:91:c3:11:62:e6:d6:89: 7c:02:9c:06:9a:28:e8:a7:28:b6:5b:96:33:ab:34:e9:66:21: 13:6e:ec:df:30:a4:62:8c:9c:7d:a1:6b:fb:ec:6b:d1:96:c9: 6b:6a:04:e1:25:d7:9b:b1:9e:79:6b:2b:d2:07:45:47:ec:4a: 2a:f6:b3:fa:9d:da:81:d5:d9:cb:fa:ee:59:f9:ad:1d:02:40: 57:c0:01:25 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuZ14i/3k1WgNveXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YzUyZTk2ZmMtMjdjYy00MTVmLTlhY2EtNGVhYTg2YjY4NDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppdw80G8kIrgdCA2GArMcTC8VUrVIPmuFnOh kxX35OzNHeemmov/+20kHG7LOX9ecNh7ykSJZFaI4mwCpFEI/5oSoNalOok7HbN+ x/SRUfKzSKZXDhpVBoUKnopp6JE3cMDkI1xQyakxB1JeyoEyshLLY4lWtVMsR99a PfCUFoL40CmVolBFUJMfZtnUXtZIOV9kG85XXP522KbGfBfD62LFE686sdQ5iaDs ivhgLjMi48fSrCuyLd4uuw6LHCnh6Xihji+lWUPcnv43MlgVQ1O5jF8ek2BYbpeP HzRRkbYr1TjO3mxNYkXDy2c5qlAw9wrYnvyoKtpDN+1VRuyaPQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNf/WGzcqArJh0JhNPZ3IB9ndD4pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvNDMxZDYyNjItNWMxOC0z YmJlLTk4OWEtZTNiZjM5MzUxYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGLLZTO6VCkiU/Ah0cGkKirWsUDwY1M8V6FYtGhlJ9k6Tltj 6dflQIxP8OXviYv3S5+eNqF4CWbtbcKgs6p7eUc15ljQyQlLDb7lDKZ7UCQpN/d1 hPAGPsGUn3bl4MSh9uUdWBdm5iz5o7SR+dXHflV9uIt+44Z8HHDmPhHHVughIhkt eb3NKTWi5dF5UJwhjCYf8mTs5zXZWZj5mG/STppZN/LiacxJTDuMRHUEkcMRYubW iXwCnAaaKOinKLZbljOrNOlmIRNu7N8wpGKMnH2ha/vsa9GWyWtqBOEl15uxnnlr K9IHRUfsSir2s/qd2oHV2cv67ln5rR0CQFfAASU= -----END CERTIFICATE-----Generated at Thu Oct 23 01:47:28 2025 by rpki-client