$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/431d6262-5c18-3bbe-989a-e3bf39351b0f.roa File: 431d6262-5c18-3bbe-989a-e3bf39351b0f.roa (raw, json) Hash identifier: IzaBr1ywE21OMF+zjZYLD7VubgiJjpSviFZPIQtFqxo= Subject key identifier: 6F:94:79:5D:77:17:40:40:CA:6A:0C:00:73:A8:01:A3:2B:7F:66:4B Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F43285848F9269E99419F73392C703FE8 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/431d6262-5c18-3bbe-989a-e3bf39351b0f.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 399106 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:9e:99:41:9f:73:39:2c:70:3f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=8fd6b401-28a7-41d5-b978-02b2e130783e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:14:af:8c:33:c4:e8:c6:31:aa:15:72:e9:1c: 42:c1:3d:2b:dd:53:e7:a0:0a:2d:a0:b1:31:6c:cd: 62:e3:74:f1:ba:f7:5b:81:15:8e:aa:43:85:26:d4: 79:08:8a:b0:5f:4b:9c:0e:6a:c7:49:23:67:90:02: 83:31:cb:3b:86:c3:fe:ba:9f:07:76:8b:36:32:89: 40:8f:73:7f:32:66:bf:ee:54:e1:a9:c4:18:c6:00: b2:b0:da:6c:4b:92:71:a4:00:7b:df:9a:34:05:88: 50:6d:ae:7e:39:37:57:11:70:2c:c0:7d:3e:a7:8e: fd:8a:0f:89:ee:80:ae:c5:34:67:b1:1e:07:6c:02: 38:3a:5d:97:57:09:d1:08:a3:fd:e8:da:f4:44:71: b8:89:28:eb:13:20:8c:90:db:0d:87:96:9e:60:13: a1:dd:2b:dc:67:cb:f9:d5:5c:a4:24:4e:6c:93:a3: fa:4a:fb:06:28:87:fc:27:98:ab:41:ae:99:fd:30: a6:2e:22:13:b3:02:8f:24:6c:36:bc:c3:98:08:47: d5:5a:76:4b:0e:ce:a0:51:6d:e7:0f:b5:cf:e5:75: fe:c7:ac:ee:27:fd:3b:b4:8b:d2:e3:3b:8d:c9:79: 77:45:1a:f9:2d:a2:74:17:76:9e:ba:2d:94:d7:58: dc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:94:79:5D:77:17:40:40:CA:6A:0C:00:73:A8:01:A3:2B:7F:66:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/431d6262-5c18-3bbe-989a-e3bf39351b0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:7c:d0:a7:a5:da:13:c5:7d:70:8c:4f:ce:bb:9b:19:d8:73: 1c:bb:d8:ed:96:af:c3:c4:09:fe:29:7c:1f:58:f7:a2:44:23: a3:16:04:2b:79:45:1a:aa:75:1b:10:8c:e8:a6:41:19:25:a6: 37:ea:8b:11:d7:0b:74:73:c2:c2:e0:56:13:04:d2:30:dd:5d: fc:d5:2a:47:c0:e3:31:63:92:95:d1:61:02:0c:e7:be:eb:62: f6:da:dd:32:af:2c:ef:c1:cf:57:8b:c3:c8:98:a5:e9:23:95: 81:f1:43:77:df:89:de:c4:4e:bd:f8:05:cb:b5:b8:19:1a:bd: 3d:4f:21:8f:ba:b1:a6:9c:be:2e:62:f8:e4:07:65:98:dc:d6: c8:b9:b5:75:02:c6:b2:4c:da:82:0e:41:ff:b2:54:4c:45:ac: 71:5f:d6:50:52:89:37:dd:08:bc:ac:75:f0:eb:00:c3:9d:53: 73:2b:9e:ba:ff:f1:61:b3:b9:ad:a1:e0:4c:a2:a1:cf:3c:ab: 7f:19:81:55:28:82:84:ae:43:1e:c8:49:2b:04:b4:df:59:be: ec:56:f9:b0:d6:0e:2b:22:ee:a0:60:73:ec:1e:6b:76:54:6a: 0c:6c:5e:86:4d:72:fd:60:65:03:d7:0f:6f:ab:a5:d0:e7:51: 46:59:2c:dd -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEj5Jp6ZQZ9zOSxwP+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk OGZkNmI0MDEtMjhhNy00MWQ1LWI5NzgtMDJiMmUxMzA3ODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRSvjDPE6MYxqhVy6RxCwT0r3VPnoAotoLEx bM1i43TxuvdbgRWOqkOFJtR5CIqwX0ucDmrHSSNnkAKDMcs7hsP+up8Hdos2MolA j3N/Mma/7lThqcQYxgCysNpsS5JxpAB735o0BYhQba5+OTdXEXAswH0+p479ig+J 7oCuxTRnsR4HbAI4Ol2XVwnRCKP96Nr0RHG4iSjrEyCMkNsNh5aeYBOh3SvcZ8v5 1VykJE5sk6P6SvsGKIf8J5irQa6Z/TCmLiITswKPJGw2vMOYCEfVWnZLDs6gUW3n D7XP5XX+x6zuJ/07tIvS4zuNyXl3RRr5LaJ0F3aeui2U11jcqwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFG+UeV13F0BAymoMAHOoAaMrf2ZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvNDMxZDYyNjItNWMxOC0z YmJlLTk4OWEtZTNiZjM5MzUxYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJh80Kel2hPFfXCMT867mxnYcxy72O2Wr8PECf4pfB9Y96JE I6MWBCt5RRqqdRsQjOimQRklpjfqixHXC3RzwsLgVhME0jDdXfzVKkfA4zFjkpXR YQIM577rYvba3TKvLO/Bz1eLw8iYpekjlYHxQ3ffid7ETr34Bcu1uBkavT1PIY+6 saacvi5i+OQHZZjc1si5tXUCxrJM2oIOQf+yVExFrHFf1lBSiTfdCLysdfDrAMOd U3Mrnrr/8WGzua2h4Eyioc88q38ZgVUogoSuQx7ISSsEtN9ZvuxW+bDWDisi7qBg c+wea3ZUagxsXoZNcv1gZQPXD2+rpdDnUUZZLN0= -----END CERTIFICATE-----Generated at Fri Mar 14 10:26:10 2025 by rpki-client