$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa File: 1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa (raw, json) Hash identifier: bDHpvBGcYf1zuOfcqPZ0i0/DuAnw6U/rJddvDx6HQf0= Subject key identifier: BB:45:CD:19:C2:3B:72:0A:A7:6C:C1:A3:E9:42:18:B3:AC:7C:07:4C Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F4328584AA42B7502D3A67C5F98A40F80 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 16509 IP address blocks: 52.128.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:75:02:d3:a6:7c:5f:98:a4:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=65af722e-45db-412b-b790-cee3cd3c2d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:40:17:ed:08:32:c7:61:bf:d9:e3:a2:d0: 41:7b:3e:60:cb:bb:16:cb:ad:e5:02:86:07:be:52: bb:35:d1:72:65:c2:27:13:39:a9:1a:58:40:ca:23: a0:1a:a4:99:b7:79:95:f4:b0:7c:1a:92:9e:fb:0d: 3b:64:b3:03:19:57:52:fd:da:36:ae:75:ae:00:cf: 8b:20:50:55:a6:3e:57:ca:b6:99:a6:8a:cd:33:64: d9:ee:a6:2b:48:f3:53:9e:7a:d5:bb:d9:fb:8e:bb: a9:e3:f5:61:c9:4e:5b:3a:8f:14:c7:f4:32:87:91: d2:d4:3c:10:ee:9c:75:d7:89:ff:b4:2e:f1:53:83: 8d:b5:a8:8c:7a:e3:60:68:96:b4:1c:1a:3c:45:aa: 36:72:85:1a:fc:2f:45:f8:36:cf:33:2b:b3:26:78: d2:c4:3c:e7:c2:e7:c7:81:48:c6:a2:f5:01:d7:5a: b0:72:b0:85:f4:bb:a0:b0:41:0d:f7:99:62:dc:b3: b2:e9:e5:dd:a7:6c:4d:60:b3:de:3a:d6:c4:08:1b: 8e:ca:d0:54:28:89:24:1b:10:99:cb:4c:1e:3b:3d: e4:93:c6:3b:19:5b:10:97:6f:f3:66:30:f3:9e:1e: 83:63:8f:2d:19:e2:c8:12:7a:02:3a:aa:f1:6a:b2: a6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:45:CD:19:C2:3B:72:0A:A7:6C:C1:A3:E9:42:18:B3:AC:7C:07:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:32:e8:ae:db:f6:fd:0b:8a:7f:41:da:7a:eb:51:e4:ca:9e: 17:4e:1a:3d:c4:b1:3f:60:d5:d2:57:0c:07:df:92:23:c6:fb: 45:71:5d:3a:4b:ae:b8:83:0a:1c:11:ba:2c:db:50:b9:de:8b: 5c:59:a9:4f:68:44:9b:3d:a8:e7:13:3a:68:88:1d:d0:a9:51: bf:24:d7:1a:1f:2c:bb:b6:f6:0c:69:94:fe:42:25:a1:cb:a8: 60:11:55:3b:f3:bf:59:53:6a:ff:4d:e2:99:12:fb:2e:61:6c: 7c:21:b4:09:15:1f:70:f6:49:a1:25:7a:ea:42:01:02:1d:02: 0e:6a:c3:e1:b6:81:d7:61:9c:02:7f:c1:bd:cc:e5:ad:a9:27: c3:7f:29:6d:a9:e6:8f:d9:71:7a:92:ff:78:14:56:3e:01:5c: 4e:01:8c:0a:22:35:60:a4:2f:28:eb:ef:43:bf:88:8c:fc:57: 88:74:29:81:cc:da:6c:8a:fc:a3:dc:c1:3c:2b:73:0f:9f:61: c9:9f:4d:ad:69:24:d6:6c:df:90:5f:7e:90:26:12:c8:48:fa: 64:5e:ea:26:d0:18:7e:b6:a2:c4:16:e1:9a:f4:de:ed:4b:14: f5:56:65:03:90:88:e0:1e:a8:23:75:bd:85:7b:33:65:92:1c: db:4d:ef:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3UC06Z8X5ikD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk NjVhZjcyMmUtNDVkYi00MTJiLWI3OTAtY2VlM2NkM2MyZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0dAF+0IMsdhv9njotBBez5gy7sWy63lAoYH vlK7NdFyZcInEzmpGlhAyiOgGqSZt3mV9LB8GpKe+w07ZLMDGVdS/do2rnWuAM+L IFBVpj5XyraZporNM2TZ7qYrSPNTnnrVu9n7jrup4/VhyU5bOo8Ux/Qyh5HS1DwQ 7px114n/tC7xU4ONtaiMeuNgaJa0HBo8Rao2coUa/C9F+DbPMyuzJnjSxDznwufH gUjGovUB11qwcrCF9LugsEEN95li3LOy6eXdp2xNYLPeOtbECBuOytBUKIkkGxCZ y0weOz3kk8Y7GVsQl2/zZjDznh6DY48tGeLIEnoCOqrxarKmLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtFzRnCO3IKp2zBo+lCGLOsfAdMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvMTYwOGU2NmEtNmZmMi0z YjY1LTlhOGEtZDM3MGYxZGQ2MTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIApMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEy6K7b9v0Lin9B2nrrUeTKnhdOGj3EsT9g1dJXDAffkiPG+0VxXTpL rriDChwRuizbULnei1xZqU9oRJs9qOcTOmiIHdCpUb8k1xofLLu29gxplP5CJaHL qGARVTvzv1lTav9N4pkS+y5hbHwhtAkVH3D2SaEleupCAQIdAg5qw+G2gddhnAJ/ wb3M5a2pJ8N/KW2p5o/ZcXqS/3gUVj4BXE4BjAoiNWCkLyjr70O/iIz8V4h0KYHM 2myK/KPcwTwrcw+fYcmfTa1pJNZs35BffpAmEshI+mRe6ibQGH62osQW4Zr03u1L FPVWZQOQiOAeqCN1vYV7M2WSHNtN7+g= -----END CERTIFICATE-----Generated at Wed Aug 6 04:15:56 2025 by rpki-client