$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/eadf60c7-3f3f-3252-bab0-1034ec94352d.roa File: eadf60c7-3f3f-3252-bab0-1034ec94352d.roa (raw, json) Hash identifier: hSz/FZhyURDDE010KnoHf8yf+hlbFto3GmRgH75jYow= Subject key identifier: 2C:83:91:AA:E1:A2:2E:EE:F9:04:36:A0:57:EA:72:42:58:FD:5B:7E Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F43285849C4D4B1C6B9D3C08CD0C6B8C0 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/eadf60c7-3f3f-3252-bab0-1034ec94352d.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 16509 IP address blocks: 52.128.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:b1:c6:b9:d3:c0:8c:d0:c6:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=ec845582-3d20-43b8-a470-11d61b2e830d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:21:fe:8e:84:00:38:96:37:64:2e:e8:00:bb: 35:3d:99:a1:0b:f3:5f:7f:06:db:f0:bb:06:d7:f3: f9:94:f9:ab:4d:ec:e3:f2:24:e1:67:82:46:41:e0: 6a:68:c8:fd:62:4d:73:2d:46:b1:c6:57:e3:b3:b7: 54:44:d7:69:c0:82:9f:19:fc:ed:f4:df:20:44:34: 87:94:c9:06:75:92:1d:b9:85:2a:40:40:87:7f:ae: 18:a7:c4:75:b0:cb:1e:0f:fc:5e:b9:c7:74:92:d4: 06:5a:ab:a1:8c:e4:bc:6c:73:7f:47:91:05:69:c0: d5:01:e9:14:70:85:0e:f0:56:77:59:d1:74:cc:a8: 09:fa:fe:4e:8d:32:39:bf:87:ce:07:9f:9c:8f:de: bc:e9:fd:b7:c0:12:76:aa:b5:c8:3c:47:eb:5b:64: 43:96:ee:11:07:4f:a0:e4:a4:5b:50:57:90:3f:64: 4a:cd:92:ca:e9:67:f5:c0:0d:8a:7f:34:b3:99:c0: fd:b5:16:4c:cc:4e:ad:57:15:27:59:6d:70:24:80: 95:31:b1:03:8f:a6:62:04:32:94:3f:3b:06:df:5b: 33:ca:d1:85:8a:06:7d:d8:25:a3:03:66:fa:ff:67: 7b:30:6f:e3:fe:7e:06:7a:0a:0c:64:34:c5:9b:04: c1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:83:91:AA:E1:A2:2E:EE:F9:04:36:A0:57:EA:72:42:58:FD:5B:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/eadf60c7-3f3f-3252-bab0-1034ec94352d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ca:a2:49:5a:61:ca:82:1f:c8:91:9f:8e:41:44:1a:b9:23: fe:75:21:5d:39:06:98:f6:f4:f5:78:13:49:5d:7d:27:25:3d: b9:b0:eb:18:64:43:de:3e:5a:35:3b:bf:42:93:52:fc:61:d4: 42:6f:7a:88:87:2f:a2:e1:61:da:11:58:84:3a:3b:24:02:41: 73:33:cd:c9:a5:74:26:ad:98:ac:31:c6:46:1d:c9:ed:80:ca: 9c:5f:8b:7c:89:76:5d:34:c9:6d:ee:39:27:9e:d0:c0:3b:d3: b0:52:8e:35:1d:d9:ae:de:63:01:d2:63:d3:86:a3:86:1e:a6: 71:4f:17:f5:a5:13:79:48:d8:d6:1f:7a:7b:65:4b:f6:a5:9a: f8:22:4e:9c:70:3b:bf:b9:36:17:5f:2e:c0:3d:b7:6c:c3:c9: c4:54:27:74:da:15:c1:45:cb:2e:a0:29:4c:52:4d:22:14:e3: 79:d2:b4:2f:c0:61:c2:d9:7c:e9:b7:aa:4e:1d:e1:d8:30:b4: 1f:71:26:1d:6e:3c:3b:55:db:a5:f0:04:b6:23:df:1a:b1:c2: b9:91:f6:0d:1d:c5:ca:05:eb:eb:1a:03:bd:df:b6:95:ee:a7: a2:90:5f:47:45:2f:f9:bf:fd:87:d8:b1:a6:8a:16:0c:f1:9a: ae:74:f9:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1LHGudPAjNDGuMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk ZWM4NDU1ODItM2QyMC00M2I4LWE0NzAtMTFkNjFiMmU4MzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiH+joQAOJY3ZC7oALs1PZmhC/Nffwbb8LsG 1/P5lPmrTezj8iThZ4JGQeBqaMj9Yk1zLUaxxlfjs7dURNdpwIKfGfzt9N8gRDSH lMkGdZIduYUqQECHf64Yp8R1sMseD/xeucd0ktQGWquhjOS8bHN/R5EFacDVAekU cIUO8FZ3WdF0zKgJ+v5OjTI5v4fOB5+cj9686f23wBJ2qrXIPEfrW2RDlu4RB0+g 5KRbUFeQP2RKzZLK6Wf1wA2KfzSzmcD9tRZMzE6tVxUnWW1wJICVMbEDj6ZiBDKU PzsG31szytGFigZ92CWjA2b6/2d7MG/j/n4GegoMZDTFmwTBgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyDkarhoi7u+QQ2oFfqckJY/Vt+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvZWFkZjYwYzctM2YzZi0z MjUyLWJhYjAtMTAzNGVjOTQzNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELKoklaYcqCH8iRn45BRBq5I/51IV05Bpj29PV4E0ldfSclPbmw6xhk Q94+WjU7v0KTUvxh1EJveoiHL6LhYdoRWIQ6OyQCQXMzzcmldCatmKwxxkYdye2A ypxfi3yJdl00yW3uOSee0MA707BSjjUd2a7eYwHSY9OGo4YepnFPF/WlE3lI2NYf entlS/almvgiTpxwO7+5NhdfLsA9t2zDycRUJ3TaFcFFyy6gKUxSTSIU43nStC/A YcLZfOm3qk4d4dgwtB9xJh1uPDtV26XwBLYj3xqxwrmR9g0dxcoF6+saA73ftpXu p6KQX0dFL/m//YfYsaaKFgzxmq50+TM= -----END CERTIFICATE-----Generated at Sat Jun 14 06:27:13 2025 by rpki-client