$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/59c0257e-698d-3c0f-975d-93c1e910c93c.roa File: 59c0257e-698d-3c0f-975d-93c1e910c93c.roa (raw, json) Hash identifier: vXCOyuahfC8xdDPUfvogNwFDr0ZQa5cfFxuV6wxZCAY= Subject key identifier: E8:69:EB:71:1E:48:E1:34:F3:57:31:31:67:29:94:B8:5A:D0:AC:FB Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F4328584AA160D2C3D4879A9CD3D043A0 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/59c0257e-698d-3c0f-975d-93c1e910c93c.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 16509 IP address blocks: 52.128.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:d2:c3:d4:87:9a:9c:d3:d0:43:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=acef706a-b6ea-4867-90c6-0cae3682b647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4a:73:f1:ef:e8:f4:f5:dc:0c:25:5d:23:8d: 4b:48:eb:82:27:9e:4b:e1:8d:a5:ca:2d:93:9c:61: ce:59:10:aa:f5:75:16:65:f7:33:43:07:30:80:8d: 09:86:8e:ec:f8:02:41:d7:b5:a1:24:18:03:39:07: d1:50:02:32:58:f4:8c:5d:55:a5:06:1d:3e:e1:af: 4c:25:c7:60:a2:13:da:23:42:60:63:20:7a:8b:24: 25:ea:93:9f:ce:62:09:7e:a5:56:4a:19:3b:37:96: a7:de:b6:35:87:17:85:14:1b:48:f2:af:70:fd:a3: 60:a6:34:30:53:3e:3f:28:52:ce:b3:1c:0a:a6:1b: 6e:05:f0:86:b2:97:3b:55:35:c4:ce:24:c8:cc:61: 3d:08:f3:37:1e:11:14:03:09:d2:3c:14:f4:f4:34: 5c:28:e8:32:0c:07:4b:db:e6:a0:a9:f5:80:fd:02: 92:a8:c1:38:28:a8:4f:a4:d5:bf:93:10:1a:1d:3f: fb:15:86:5c:ac:d3:5a:bb:a9:b2:c0:80:7d:67:9a: ab:dc:5c:57:40:47:59:70:e9:17:9c:03:f2:e4:62: 2f:94:8f:b4:d4:ba:39:fd:46:1d:b5:e6:d4:df:48: 6a:6d:52:49:87:86:55:dc:9e:51:8f:75:98:32:02: 53:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:69:EB:71:1E:48:E1:34:F3:57:31:31:67:29:94:B8:5A:D0:AC:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/59c0257e-698d-3c0f-975d-93c1e910c93c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:5a:d0:9c:fe:6a:f8:47:96:51:06:30:00:ac:f6:ee:4f:fc: e2:0a:90:99:48:fa:ba:b5:34:3b:a7:de:4f:ec:4f:e4:5c:11: d6:d3:40:fe:88:70:1a:63:ed:9d:35:2e:62:a6:a9:9f:33:a3: 93:0f:a1:9d:92:1d:4e:59:67:e8:3f:da:ae:bf:d5:0f:0b:27: 48:e2:83:8f:1f:39:b7:2f:bd:4f:47:3c:12:09:90:f5:ad:8c: 1a:eb:76:c7:4d:c5:59:74:2b:94:5a:2c:7e:79:b5:5b:cd:74: f9:00:cd:fd:82:9a:f8:c1:09:9c:47:42:26:2c:c6:6b:44:7f: 6d:e5:82:c3:0a:2d:b4:b0:8a:d3:48:7c:35:02:c1:c8:de:42: 94:d2:c3:be:5a:84:bd:d9:0a:36:14:3b:ee:cd:0c:aa:9a:ca: 03:22:2c:5f:7a:7e:f1:a4:ea:53:b3:46:f2:96:19:d2:df:e8: 44:14:5d:5c:b5:90:4d:31:c9:d6:30:69:be:f4:be:76:77:e1: 05:a8:77:8e:35:69:13:b4:56:ef:55:5b:34:e6:ea:f9:4d:a9: e3:62:cf:7d:23:5b:d9:97:6e:b1:1d:11:c8:b6:b4:53:d5:19: 9f:b8:3b:fe:db:91:63:08:45:0d:f3:67:f8:62:87:c6:fe:b4: ca:73:42:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNLD1IeanNPQQ6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk YWNlZjcwNmEtYjZlYS00ODY3LTkwYzYtMGNhZTM2ODJiNjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0pz8e/o9PXcDCVdI41LSOuCJ55L4Y2lyi2T nGHOWRCq9XUWZfczQwcwgI0Jho7s+AJB17WhJBgDOQfRUAIyWPSMXVWlBh0+4a9M JcdgohPaI0JgYyB6iyQl6pOfzmIJfqVWShk7N5an3rY1hxeFFBtI8q9w/aNgpjQw Uz4/KFLOsxwKphtuBfCGspc7VTXEziTIzGE9CPM3HhEUAwnSPBT09DRcKOgyDAdL 2+agqfWA/QKSqME4KKhPpNW/kxAaHT/7FYZcrNNau6mywIB9Z5qr3FxXQEdZcOkX nAPy5GIvlI+01Lo5/UYdtebU30hqbVJJh4ZV3J5Rj3WYMgJT9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhp63EeSOE081cxMWcplLha0Kz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvNTljMDI1N2UtNjk4ZC0z YzBmLTk3NWQtOTNjMWU5MTBjOTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIAqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFa0Jz+avhHllEGMACs9u5P/OIKkJlI+rq1NDun3k/sT+RcEdbTQP6I cBpj7Z01LmKmqZ8zo5MPoZ2SHU5ZZ+g/2q6/1Q8LJ0jig48fObcvvU9HPBIJkPWt jBrrdsdNxVl0K5RaLH55tVvNdPkAzf2CmvjBCZxHQiYsxmtEf23lgsMKLbSwitNI fDUCwcjeQpTSw75ahL3ZCjYUO+7NDKqaygMiLF96fvGk6lOzRvKWGdLf6EQUXVy1 kE0xydYwab70vnZ34QWod441aRO0Vu9VWzTm6vlNqeNiz30jW9mXbrEdEci2tFPV GZ+4O/7bkWMIRQ3zZ/hih8b+tMpzQiY= -----END CERTIFICATE-----Generated at Mon Aug 4 22:14:16 2025 by rpki-client