$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/c94d2c36-bb50-3fb2-8c4d-bb5897ea9e65.roa File: c94d2c36-bb50-3fb2-8c4d-bb5897ea9e65.roa (raw, json) Hash identifier: tVrgq+tvhkoAb8rj/zI24CnxODMyLj1rccPmvknoRVo= Subject key identifier: E9:88:87:2C:A1:51:FC:4C:53:F8:6D:A6:BE:D1:4C:86:D3:B3:26:4E Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F43285849C4D4B971288C942CF981A580 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/c94d2c36-bb50-3fb2-8c4d-bb5897ea9e65.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 14618 IP address blocks: 52.128.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:b9:71:28:8c:94:2c:f9:81:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=8764b621-4a2f-4e72-95f6-8af023d86764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:aa:e9:76:2a:14:11:c6:5d:ff:37:3d:84:b1: 35:e3:90:b3:0a:b4:5b:7f:95:00:da:34:e6:b6:05: 3d:3b:55:e9:21:c4:28:7b:4f:b9:39:ba:82:78:11: a2:2e:d6:43:de:e3:62:72:f3:ad:1a:35:fd:c7:bc: 28:78:94:cb:aa:51:f9:43:99:9a:dd:40:67:86:37: 1a:21:1a:5d:5d:f5:0c:9d:63:d7:4b:60:09:d0:45: eb:ea:29:88:58:74:3a:61:46:9c:71:4a:69:b9:9d: ef:7a:d6:3d:3e:10:69:6a:04:0d:ff:75:ad:8b:71: 91:2c:b9:0a:60:d1:ed:27:08:23:28:c1:3b:0c:96: ff:2e:9f:71:ec:75:54:52:79:6e:b3:16:f8:5b:c6: 37:45:74:e7:a9:24:cb:fa:3e:25:29:f8:c7:c4:ca: e1:d8:0b:20:6c:91:bc:46:67:12:c2:11:94:ad:db: 82:d2:da:d6:05:5c:33:c0:12:04:aa:4c:76:f7:ca: 38:48:10:c2:46:ae:ee:19:ce:af:19:d3:64:f9:a9: 9c:1c:fd:8a:7e:3a:50:88:27:21:94:23:3d:2c:d0: 64:96:bd:cf:cf:a0:11:4b:1b:e9:6b:47:89:4f:97: 97:70:3b:25:ee:6a:48:01:c5:23:0d:54:48:16:7e: 47:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:88:87:2C:A1:51:FC:4C:53:F8:6D:A6:BE:D1:4C:86:D3:B3:26:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/c94d2c36-bb50-3fb2-8c4d-bb5897ea9e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:cb:f5:28:a0:c1:4b:c7:ab:2a:3e:8e:c4:f5:a7:00:1c:42: 59:df:60:0b:11:e2:1b:54:a7:bf:c4:ad:e4:fb:b1:e4:67:a7: f2:4f:c0:9f:51:8b:af:65:6d:31:ce:0a:1d:69:59:88:31:cb: 51:a8:7f:b7:52:c3:d1:8b:72:31:d9:42:2f:47:28:21:31:d6: 31:7b:28:7f:af:73:89:d1:37:68:dd:a3:19:e9:ca:bf:fc:a1: a0:b3:06:f8:b4:2d:2e:63:e8:96:45:0b:53:2a:9e:64:ca:c8: 44:61:9e:98:f1:81:73:99:48:44:5d:19:4e:ef:07:ae:35:17: 03:8d:73:01:11:05:ae:d8:3f:8f:8d:77:a0:75:93:ec:1e:16: d4:8e:89:f0:4f:10:fa:70:6d:b9:9e:d5:9e:3f:07:11:96:36: 9c:cb:fd:8a:97:8c:44:0b:28:51:05:79:8c:6e:fb:77:e2:5a: 4d:bc:67:19:cc:75:e8:b2:f7:c6:5c:43:e2:ad:10:c1:63:33: 60:68:06:30:ec:d3:a9:87:e0:25:00:2d:ce:4b:be:b9:5c:aa: e6:b8:31:20:3f:50:74:34:74:b9:22:da:c2:8d:a3:62:49:c8: c1:5d:5b:63:dc:db:0a:a2:70:b8:bf:b2:17:24:8c:9a:b0:05: 8e:22:f7:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1LlxKIyULPmBpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ODc2NGI2MjEtNGEyZi00ZTcyLTk1ZjYtOGFmMDIzZDg2NzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqrpdioUEcZd/zc9hLE145CzCrRbf5UA2jTm tgU9O1XpIcQoe0+5ObqCeBGiLtZD3uNicvOtGjX9x7woeJTLqlH5Q5ma3UBnhjca IRpdXfUMnWPXS2AJ0EXr6imIWHQ6YUaccUppuZ3vetY9PhBpagQN/3Wti3GRLLkK YNHtJwgjKME7DJb/Lp9x7HVUUnlusxb4W8Y3RXTnqSTL+j4lKfjHxMrh2AsgbJG8 RmcSwhGUrduC0trWBVwzwBIEqkx298o4SBDCRq7uGc6vGdNk+amcHP2KfjpQiCch lCM9LNBklr3Pz6ARSxvpa0eJT5eXcDsl7mpIAcUjDVRIFn5HXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmIhyyhUfxMU/htpr7RTIbTsyZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvYzk0ZDJjMzYtYmI1MC0z ZmIyLThjNGQtYmI1ODk3ZWE5ZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfL9SigwUvHqyo+jsT1pwAcQlnfYAsR4htUp7/EreT7seRnp/JPwJ9R i69lbTHOCh1pWYgxy1Gof7dSw9GLcjHZQi9HKCEx1jF7KH+vc4nRN2jdoxnpyr/8 oaCzBvi0LS5j6JZFC1MqnmTKyERhnpjxgXOZSERdGU7vB641FwONcwERBa7YP4+N d6B1k+weFtSOifBPEPpwbbme1Z4/BxGWNpzL/YqXjEQLKFEFeYxu+3fiWk28ZxnM deiy98ZcQ+KtEMFjM2BoBjDs06mH4CUALc5Lvrlcqua4MSA/UHQ0dLki2sKNo2JJ yMFdW2Pc2wqicLi/shckjJqwBY4i9wU= -----END CERTIFICATE-----Generated at Sun Jun 15 09:04:27 2025 by rpki-client