$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/7bf450b2-ed0e-334b-8f5a-f0c05206e657.roa File: 7bf450b2-ed0e-334b-8f5a-f0c05206e657.roa (raw, json) Hash identifier: GN9+IaGrf2qwB8AsEAECRrMfLCuIWZVKhOeRj7kQ08A= Subject key identifier: 67:C7:D5:FC:6A:E4:2C:D9:D0:E8:71:1E:C2:44:1E:9A:89:D4:FA:71 Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F4328584AA42B7B6C46382BA3654D9460 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/7bf450b2-ed0e-334b-8f5a-f0c05206e657.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 14618 IP address blocks: 52.128.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:7b:6c:46:38:2b:a3:65:4d:94:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=d84bec1c-af65-481c-adcc-6d7b2f2338df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:02:c2:aa:e6:81:39:1e:aa:b1:02:53:e8:65: be:e3:49:c8:ec:25:7d:a7:cf:91:e7:9e:36:1e:0c: 12:6f:ef:1d:2f:bb:b9:51:5d:4d:fe:ea:f7:f6:67: 5d:c1:d5:a7:b4:a2:04:7b:20:5e:07:ec:d4:12:90: 45:dd:6a:88:6d:63:90:90:bc:58:8f:d5:2a:0e:a7: 9a:a6:34:df:81:15:40:d7:1f:ac:4f:27:dc:3f:d5: 77:00:7c:f0:dd:be:86:6c:34:5a:00:cb:8e:63:cd: 7b:f5:c1:1b:90:3a:c0:47:f5:bc:74:e9:75:5e:ec: fc:fb:78:83:f3:ed:4a:77:bd:6a:61:2f:a4:a8:78: 72:8b:c4:bd:da:9f:3a:59:4c:79:c5:5f:51:6f:fa: 7b:c5:37:75:e8:18:bb:18:c5:6d:1f:78:a1:9c:e4: 64:f1:0e:11:5e:f1:11:19:7a:cc:54:e6:77:f5:fc: 40:f4:c5:72:0b:bb:ec:ae:99:be:54:00:40:c8:35: f2:01:cc:99:d4:ee:7b:d1:cb:65:69:ff:3b:fd:68: 49:ec:8b:dd:dc:7b:f2:83:0d:66:08:b0:35:fb:0f: bc:ec:a7:ad:9e:e2:2f:d5:92:5b:81:aa:f7:20:17: 24:04:8f:10:2b:9f:9b:37:9a:b3:0f:1c:53:05:1e: 91:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C7:D5:FC:6A:E4:2C:D9:D0:E8:71:1E:C2:44:1E:9A:89:D4:FA:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/7bf450b2-ed0e-334b-8f5a-f0c05206e657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:18:04:b4:41:4f:2d:59:d6:34:c9:dc:c3:fa:df:a2:32:7d: c2:a5:ac:cf:5e:71:1e:5a:fc:2f:91:91:21:46:08:49:c4:c6: dd:67:de:9e:4b:8b:61:3b:7b:ec:ff:68:b1:51:db:c7:20:b0: ec:3d:8e:a5:d2:18:99:01:41:7c:99:db:c8:cb:0d:fe:ad:94: 8d:33:e5:27:b8:b4:21:d4:cf:16:68:33:f1:c4:b3:dc:d1:5b: 71:12:82:d0:26:d5:8a:88:ab:89:2f:49:83:a4:ff:b2:46:ac: 28:88:26:c1:20:78:fb:34:b0:73:df:20:f4:34:dd:26:c5:5e: ef:8e:5b:08:2a:94:e4:d5:47:14:4d:8a:25:b0:ae:d6:c7:73: 5c:73:55:4d:83:16:03:c3:7a:f1:4b:9f:23:bb:4e:e7:45:bc: 68:0a:69:b8:d7:a9:a6:29:eb:86:08:67:e6:65:be:b1:94:2b: 74:51:2b:d7:03:a3:e4:5a:a6:97:02:43:14:bd:8b:78:3a:79: de:3b:69:67:09:5f:ef:5d:99:99:54:87:6c:0e:cf:e4:4a:c6: d2:40:30:bf:6b:24:c7:9c:89:8c:d6:54:c1:2f:b4:e1:f5:16: 55:0c:df:44:93:77:a3:cb:a8:f9:28:f3:8b:84:94:6c:8b:85: d2:b3:e2:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3tsRjgro2VNlGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk ZDg0YmVjMWMtYWY2NS00ODFjLWFkY2MtNmQ3YjJmMjMzOGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnALCquaBOR6qsQJT6GW+40nI7CV9p8+R5542 HgwSb+8dL7u5UV1N/ur39mddwdWntKIEeyBeB+zUEpBF3WqIbWOQkLxYj9UqDqea pjTfgRVA1x+sTyfcP9V3AHzw3b6GbDRaAMuOY8179cEbkDrAR/W8dOl1Xuz8+3iD 8+1Kd71qYS+kqHhyi8S92p86WUx5xV9Rb/p7xTd16Bi7GMVtH3ihnORk8Q4RXvER GXrMVOZ39fxA9MVyC7vsrpm+VABAyDXyAcyZ1O570ctlaf87/WhJ7Ivd3Hvygw1m CLA1+w+87KetnuIv1ZJbgar3IBckBI8QK5+bN5qzDxxTBR6RFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfH1fxq5CzZ0OhxHsJEHpqJ1PpxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvN2JmNDUwYjItZWQwZS0z MzRiLThmNWEtZjBjMDUyMDZlNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIApMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoYBLRBTy1Z1jTJ3MP636IyfcKlrM9ecR5a/C+RkSFGCEnExt1n3p5L i2E7e+z/aLFR28cgsOw9jqXSGJkBQXyZ28jLDf6tlI0z5Se4tCHUzxZoM/HEs9zR W3ESgtAm1YqIq4kvSYOk/7JGrCiIJsEgePs0sHPfIPQ03SbFXu+OWwgqlOTVRxRN iiWwrtbHc1xzVU2DFgPDevFLnyO7TudFvGgKabjXqaYp64YIZ+ZlvrGUK3RRK9cD o+RappcCQxS9i3g6ed47aWcJX+9dmZlUh2wOz+RKxtJAML9rJMeciYzWVMEvtOH1 FlUM30STd6PLqPko84uElGyLhdKz4uY= -----END CERTIFICATE-----Generated at Mon Aug 4 16:03:54 2025 by rpki-client