$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa File: 1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa (raw, json) Hash identifier: uetDcLOgeURQppVQSXH4UeWJSug+LBZAYGofo3zRAPQ= Subject key identifier: 9A:FE:8A:96:F6:36:D0:48:81:04:52:8F:EF:A2:E5:7C:88:6C:F5:3B Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F4328584B84E76B423AF3EEC9591E5780 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 52.128.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6b:42:3a:f3:ee:c9:59:1e:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=e41db504-9458-4f48-8091-e9e95b3c19d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:65:0d:42:79:99:e3:b8:f4:b7:25:58:ab:f7: 11:22:04:71:29:9c:16:e4:cc:5d:a8:61:83:f1:ce: 17:86:0f:88:f0:98:f8:81:c3:88:a9:c1:c2:91:5b: 8b:22:ec:0e:68:1b:f3:1d:c9:3b:cd:b1:e4:e0:c3: fa:78:66:a5:03:d3:ad:9c:36:da:e8:34:95:a9:c2: 09:1b:0e:e8:0b:58:25:8c:c7:a1:52:23:05:10:0b: 01:44:cf:72:7e:9a:a4:07:70:1d:f8:2b:d7:1d:03: b6:ba:e3:4d:20:af:33:da:07:d4:11:2b:0f:81:d4: d0:a9:27:3c:3c:16:b3:3b:e3:3d:16:af:61:b9:5e: e9:f9:12:56:69:15:30:15:cc:07:78:08:1e:4b:dc: bc:0a:e9:83:fb:93:6c:ef:b8:a2:07:d2:47:d4:66: cd:30:85:e2:a9:c1:67:33:24:fe:03:72:e1:77:7a: 68:f5:81:4f:51:5f:a3:42:78:01:a8:f7:b1:74:6b: b2:82:90:ed:83:2d:1f:b9:e9:b1:df:93:fb:ef:b8: 2b:4b:53:00:a5:b5:f4:84:8c:13:26:b1:83:a1:6e: e3:bc:30:c5:45:3a:01:4b:44:8d:95:b8:12:73:33: 76:d8:61:67:1e:9b:de:cd:c5:74:43:8a:b8:8c:e8: 65:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:FE:8A:96:F6:36:D0:48:81:04:52:8F:EF:A2:E5:7C:88:6C:F5:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:7d:7b:2e:d1:f9:aa:73:75:56:0d:68:cf:0f:c2:9a:f0:43: f9:8e:a9:d8:e2:12:4c:af:e6:00:5c:cc:82:a2:9c:49:e7:8b: 3c:67:ba:6c:79:a7:00:27:00:df:78:cb:25:0f:fc:2f:c6:46: 5e:87:4a:c1:93:6c:20:90:44:b9:3e:0f:73:1c:1d:5c:80:bb: 72:87:50:0e:e5:23:f5:6f:78:63:d6:a2:c9:ec:a1:03:a4:9a: fa:bf:00:dc:42:dc:96:1c:75:0d:9f:27:aa:07:bc:56:68:08: ba:a9:60:14:8a:3a:91:86:76:07:4a:1d:e7:02:07:75:04:bb: f6:3d:5a:ca:eb:e8:3d:f5:44:dc:40:e2:48:99:5b:29:fa:40: 5d:96:7e:82:ab:8f:4f:ec:96:00:48:b1:93:8c:7f:7e:95:29: 9a:07:5f:ac:c7:50:5f:93:00:b1:bb:8e:03:13:02:1d:13:65: 54:0e:4a:ab:7b:63:66:5c:68:67:f6:05:d5:a0:b8:4c:b8:b9: d6:74:54:12:18:bb:b5:47:9e:66:0b:ab:bf:88:65:45:e3:24: 75:95:c7:82:42:d4:cc:3f:0f:1e:4c:85:af:56:a1:d0:c0:f3: 07:18:04:9a:41:29:fe:0e:e1:7a:10:5d:a8:a3:fd:b2:53:e7: 77:8a:71:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE52tCOvPuyVkeV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZTQxZGI1MDQtOTQ1OC00ZjQ4LTgwOTEtZTllOTViM2MxOWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimUNQnmZ47j0tyVYq/cRIgRxKZwW5MxdqGGD 8c4Xhg+I8Jj4gcOIqcHCkVuLIuwOaBvzHck7zbHk4MP6eGalA9OtnDba6DSVqcIJ Gw7oC1gljMehUiMFEAsBRM9yfpqkB3Ad+CvXHQO2uuNNIK8z2gfUESsPgdTQqSc8 PBazO+M9Fq9huV7p+RJWaRUwFcwHeAgeS9y8CumD+5Ns77iiB9JH1GbNMIXiqcFn MyT+A3Lhd3po9YFPUV+jQngBqPexdGuygpDtgy0fuemx35P777grS1MApbX0hIwT JrGDoW7jvDDFRToBS0SNlbgSczN22GFnHpvezcV0Q4q4jOhlrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJr+ipb2NtBIgQRSj++i5XyIbPU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvMTYwOGU2NmEtNmZmMi0z YjY1LTlhOGEtZDM3MGYxZGQ2MTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIApMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB19ey7R+apzdVYNaM8PwprwQ/mOqdjiEkyv5gBczIKinEnnizxnumx5 pwAnAN94yyUP/C/GRl6HSsGTbCCQRLk+D3McHVyAu3KHUA7lI/VveGPWosnsoQOk mvq/ANxC3JYcdQ2fJ6oHvFZoCLqpYBSKOpGGdgdKHecCB3UEu/Y9Wsrr6D31RNxA 4kiZWyn6QF2WfoKrj0/slgBIsZOMf36VKZoHX6zHUF+TALG7jgMTAh0TZVQOSqt7 Y2ZcaGf2BdWguEy4udZ0VBIYu7VHnmYLq7+IZUXjJHWVx4JC1Mw/Dx5Mha9WodDA 8wcYBJpBKf4O4XoQXaij/bJT53eKcQY= -----END CERTIFICATE-----Generated at Sat Oct 18 18:06:05 2025 by rpki-client