$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/132c99fe-f3fc-3db5-9e61-6bc610c6609f.roa File: 132c99fe-f3fc-3db5-9e61-6bc610c6609f.roa (raw, json) Hash identifier: i7J2dESOWw1E3Z102IFfmS8UXm+pAst+b6sDgm1QAE8= Subject key identifier: 5A:D8:D3:D0:13:D3:B2:87:3E:94:01:41:C2:8B:9B:FD:DB:47:0C:9D Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F4328584AA160CB7B0671AD7DE5AF1000 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/132c99fe-f3fc-3db5-9e61-6bc610c6609f.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 14618 IP address blocks: 52.128.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:cb:7b:06:71:ad:7d:e5:af:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=86ba278f-0adf-4f67-ac3c-612a1b74d276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7a:bb:9a:95:f8:2b:8a:a6:5c:e6:4a:60:f7: ac:15:8b:13:dc:c1:5c:02:6b:d3:c1:35:a5:87:87: 71:4e:8d:2b:00:c8:00:66:3d:9d:d6:75:0e:20:c4: b1:3e:42:30:5f:d5:0c:2c:e2:a5:ae:b1:37:39:2a: 5c:37:a6:78:3b:35:a7:46:7e:0f:4f:62:ce:8c:85: ec:c5:78:42:65:34:1b:72:cc:87:5d:5f:c7:2b:1e: cb:2d:ec:2f:45:df:06:cc:3d:2e:7b:a9:38:6d:42: b6:e2:51:c1:7b:98:a9:02:c3:11:e6:d2:82:69:c0: 4c:29:7b:65:86:fe:ff:83:ee:65:15:ee:a5:ac:f0: 4a:13:72:69:7f:d3:46:97:2e:cd:1e:82:a3:5c:dc: 30:dc:7b:55:7b:af:3d:94:71:bf:70:c9:ae:49:eb: ee:49:a2:c6:19:1a:64:29:bc:8a:fe:69:e0:3c:35: a2:2a:4e:9c:cf:c0:0e:a9:f9:61:de:b5:83:37:82: d2:3e:6e:d0:be:6c:81:33:d7:83:d5:8d:98:c0:03: ab:73:e0:b4:b0:e2:9c:6c:f5:ef:a0:60:49:38:9d: eb:29:9e:d8:d3:77:90:80:02:0f:f2:99:ac:14:80: 6c:d5:7b:80:68:df:e4:70:b0:35:11:de:d7:29:af: 97:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D8:D3:D0:13:D3:B2:87:3E:94:01:41:C2:8B:9B:FD:DB:47:0C:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/132c99fe-f3fc-3db5-9e61-6bc610c6609f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a1:8e:2c:e3:7c:0a:da:3b:29:83:26:94:ad:8c:9c:25:18: dc:59:f3:47:ed:41:14:3a:19:59:fc:3b:90:97:74:6b:7b:83: fa:d0:51:b3:d1:16:41:6f:38:2f:32:78:86:f6:0b:5a:1b:4e: cf:ab:52:8d:4a:06:d1:ec:2f:4d:12:fe:f0:4b:9a:b5:42:2f: f5:1a:2a:25:2b:fc:a8:a3:09:00:49:d2:71:ff:05:fc:44:bf: 00:36:1f:e2:fc:8a:75:66:a1:eb:ed:bb:ed:ef:ce:f9:19:a8: c6:c6:b0:77:01:b5:f6:a1:5b:1a:5f:11:e2:e9:52:38:4d:78: 2f:75:be:46:c0:28:65:19:58:32:3a:16:4e:54:86:e8:57:5f: 08:ed:9d:61:8a:a1:73:30:8e:19:df:fe:b5:91:05:28:1a:e0: 00:22:ab:0b:92:a7:8a:a4:1e:94:03:a0:d0:3e:ab:e3:13:c1: 19:ee:de:46:c2:81:c4:dd:80:0d:06:0d:c9:96:57:1a:9e:bd: 3c:d3:8a:04:90:db:38:3c:a8:91:23:a8:d5:e0:79:8d:75:14: 76:ca:4f:31:39:6d:f9:52:6e:ba:06:7a:33:bf:0c:84:b9:6f: e4:af:83:b6:68:1e:6c:6f:f8:dd:6f:19:74:bc:db:fb:0b:95: d3:ae:b2:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYMt7BnGtfeWvEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk ODZiYTI3OGYtMGFkZi00ZjY3LWFjM2MtNjEyYTFiNzRkMjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHq7mpX4K4qmXOZKYPesFYsT3MFcAmvTwTWl h4dxTo0rAMgAZj2d1nUOIMSxPkIwX9UMLOKlrrE3OSpcN6Z4OzWnRn4PT2LOjIXs xXhCZTQbcsyHXV/HKx7LLewvRd8GzD0ue6k4bUK24lHBe5ipAsMR5tKCacBMKXtl hv7/g+5lFe6lrPBKE3Jpf9NGly7NHoKjXNww3HtVe689lHG/cMmuSevuSaLGGRpk KbyK/mngPDWiKk6cz8AOqflh3rWDN4LSPm7QvmyBM9eD1Y2YwAOrc+C0sOKcbPXv oGBJOJ3rKZ7Y03eQgAIP8pmsFIBs1XuAaN/kcLA1Ed7XKa+XfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrY09AT07KHPpQBQcKLm/3bRwydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvMTMyYzk5ZmUtZjNmYy0z ZGI1LTllNjEtNmJjNjEwYzY2MDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIArMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFahjizjfAraOymDJpStjJwlGNxZ80ftQRQ6GVn8O5CXdGt7g/rQUbPR FkFvOC8yeIb2C1obTs+rUo1KBtHsL00S/vBLmrVCL/UaKiUr/KijCQBJ0nH/BfxE vwA2H+L8inVmoevtu+3vzvkZqMbGsHcBtfahWxpfEeLpUjhNeC91vkbAKGUZWDI6 Fk5UhuhXXwjtnWGKoXMwjhnf/rWRBSga4AAiqwuSp4qkHpQDoNA+q+MTwRnu3kbC gcTdgA0GDcmWVxqevTzTigSQ2zg8qJEjqNXgeY11FHbKTzE5bflSbroGejO/DIS5 b+Svg7ZoHmxv+N1vGXS82/sLldOusk4= -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:17 2025 by rpki-client