$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa File: 35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa (raw, json) Hash identifier: yj2SE6hU4GklzQZEVTdvTb0LZg9e17jy+n+F2fgQGfA= Subject key identifier: 53:37:C6:9A:9E:2E:1D:56:4A:A5:78:42:74:F7:41:83:AC:EE:BD:B0 Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F4328584B6A61F0FD42D3671A3E1B2800 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 14618 IP address blocks: 52.128.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:f0:fd:42:d3:67:1a:3e:1b:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=d817c902-a84a-4326-8b89-58acaee14268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:66:0b:8d:09:a2:30:4f:56:e6:21:16:60:eb: 81:44:fa:b7:83:13:e1:71:82:1b:4c:8f:db:c5:f8: cf:69:71:12:b1:c7:bc:4a:61:91:39:c3:f9:41:78: 13:56:7e:66:96:40:8c:c0:ca:c1:5e:24:4f:74:02: be:7d:b5:ed:00:80:54:ee:00:77:68:e7:a6:42:10: 3d:f5:11:66:14:d0:ca:81:ce:7f:c9:e5:c3:25:94: 50:dc:f8:88:c9:d5:ae:fe:09:f2:50:a4:9c:84:9f: 77:48:64:2e:fe:59:77:c8:17:be:55:e5:2d:9f:b1: ef:02:15:55:4b:1a:8f:39:75:76:7c:21:67:8b:b6: 2c:61:38:b3:e1:1a:ea:7d:d5:1e:db:f7:92:e2:a1: c3:08:23:62:37:fb:2d:17:92:5c:5a:e6:1d:10:53: 5d:3e:2f:46:47:65:de:3a:47:90:58:33:ec:ec:69: c3:56:dd:b5:ab:57:15:41:8a:b8:86:f0:a2:e1:84: a1:80:ec:43:88:c8:09:99:9c:05:d7:40:87:7c:c1: e5:f5:d4:ed:78:ba:21:6d:fc:b6:ec:2b:14:9a:e2: e6:a7:d9:03:6b:f5:87:25:b5:1d:10:95:41:98:9d: 6a:98:84:01:9c:e3:f2:a4:0b:43:1d:2f:a1:35:cf: 5c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:37:C6:9A:9E:2E:1D:56:4A:A5:78:42:74:F7:41:83:AC:EE:BD:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/35eb9cfb-ee49-3018-8d88-729ca7bc9091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:d9:3b:5c:42:a8:a6:11:86:03:34:2c:57:03:5e:37:fb:f9: 61:44:6d:b7:89:9f:50:ef:52:f4:e4:43:78:89:11:1e:76:1c: f0:43:2c:bf:1d:70:f5:78:88:0f:5f:b5:5a:32:36:7f:d2:c9: 64:69:76:86:53:ac:08:5e:97:67:4d:a1:a6:cc:50:bf:42:54: 06:e7:83:8c:f9:73:9a:11:cc:2a:85:c6:5e:4a:60:c7:6b:b5: 87:e1:c0:32:6f:bf:6f:f5:43:87:6b:bb:cf:45:33:d4:16:38: f3:4c:04:79:dd:2c:b8:da:f6:da:ff:07:ee:ef:86:f8:5d:1c: ca:dc:ea:25:25:08:6a:52:5f:2f:06:5e:a7:7b:d2:30:a6:94: a3:e3:2f:0d:68:d8:39:9f:29:9e:69:33:90:2d:b7:fd:b0:fd: c3:9e:8d:fc:9b:cb:86:86:cd:9e:10:4c:e5:0e:6e:62:73:b6: af:f1:f8:fb:2e:83:60:83:ee:42:e0:8d:1c:1c:8c:fd:0e:d7: ed:ef:ee:95:a9:80:dc:6e:55:9c:25:a2:9e:45:01:e1:1f:d2: 6b:26:ed:14:64:e2:d5:a5:c3:ad:9d:cb:91:99:ea:a0:2e:9b: 33:31:75:42:e8:65:24:ca:ef:91:0e:12:79:2a:91:7c:60:8e: 51:4b:04:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYfD9QtNnGj4bKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZDgxN2M5MDItYTg0YS00MzI2LThiODktNThhY2FlZTE0MjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmYLjQmiME9W5iEWYOuBRPq3gxPhcYIbTI/b xfjPaXESsce8SmGROcP5QXgTVn5mlkCMwMrBXiRPdAK+fbXtAIBU7gB3aOemQhA9 9RFmFNDKgc5/yeXDJZRQ3PiIydWu/gnyUKSchJ93SGQu/ll3yBe+VeUtn7HvAhVV SxqPOXV2fCFni7YsYTiz4RrqfdUe2/eS4qHDCCNiN/stF5JcWuYdEFNdPi9GR2Xe OkeQWDPs7GnDVt21q1cVQYq4hvCi4YShgOxDiMgJmZwF10CHfMHl9dTteLohbfy2 7CsUmuLmp9kDa/WHJbUdEJVBmJ1qmIQBnOPypAtDHS+hNc9cQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFM3xpqeLh1WSqV4QnT3QYOs7r2wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvMzVlYjljZmItZWU0OS0z MDE4LThkODgtNzI5Y2E3YmM5MDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIAsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3ZO1xCqKYRhgM0LFcDXjf7+WFEbbeJn1DvUvTkQ3iJER52HPBDLL8d cPV4iA9ftVoyNn/SyWRpdoZTrAhel2dNoabMUL9CVAbng4z5c5oRzCqFxl5KYMdr tYfhwDJvv2/1Q4dru89FM9QWOPNMBHndLLja9tr/B+7vhvhdHMrc6iUlCGpSXy8G Xqd70jCmlKPjLw1o2DmfKZ5pM5Att/2w/cOejfyby4aGzZ4QTOUObmJztq/x+Psu g2CD7kLgjRwcjP0O1+3v7pWpgNxuVZwlop5FAeEf0msm7RRk4tWlw62dy5GZ6qAu mzMxdULoZSTK75EOEnkqkXxgjlFLBGA= -----END CERTIFICATE-----Generated at Sat Oct 18 18:05:35 2025 by rpki-client