$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/7bf450b2-ed0e-334b-8f5a-f0c05206e657.roa File: 7bf450b2-ed0e-334b-8f5a-f0c05206e657.roa (raw, json) Hash identifier: 3s5pDo9fLnomU2lV5iW45APKNlDvJoALtD3OvInyaWY= Subject key identifier: 7F:E3:E2:15:20:23:65:E3:FA:5C:18:30:2F:F3:A1:97:50:2F:B2:3E Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F4328584B84E77262ECC7B2EE7BAD5B80 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/7bf450b2-ed0e-334b-8f5a-f0c05206e657.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 14618 IP address blocks: 52.128.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:72:62:ec:c7:b2:ee:7b:ad:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=ccedb6af-583f-4d27-b84b-800b11ac5ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:74:b4:5d:84:bc:cc:0f:d0:86:4a:78:63:32: af:2e:0a:04:1b:1b:ab:9e:d9:af:a6:1f:f2:34:bf: 4a:33:7b:8b:d6:43:c1:45:d9:fd:8c:b2:9f:96:da: 85:2c:fc:20:6f:c6:5c:16:63:46:1d:3f:93:93:91: 05:fc:c7:b7:8f:fc:4f:f7:0b:be:a4:bc:71:0e:1b: d8:77:ae:80:00:94:8c:ed:c2:ec:1b:59:2a:7f:0d: 10:9a:00:d2:ce:75:9d:61:ab:60:68:e2:f2:0b:04: 72:ad:e3:8d:46:d1:12:dc:68:bd:5f:fc:6c:00:b5: 7c:65:46:91:2a:fb:22:e6:1f:a2:92:9b:67:59:4a: fc:99:3e:96:02:22:f1:55:67:cf:53:e6:1d:07:a5: 8b:81:63:9f:5b:ff:35:6a:06:6c:d1:23:95:48:ec: b6:ce:3f:d8:c5:e5:17:6e:c6:1e:1f:44:4e:66:3a: 3e:2e:16:51:2a:bb:15:e1:1b:f6:e1:76:50:b3:70: 63:b3:97:b9:4f:4b:da:97:90:76:0d:83:ba:e6:b9: e1:85:0f:65:f5:af:fd:59:f2:5a:ea:88:88:56:05: 30:a8:29:a2:d5:9b:85:b8:c4:f0:54:e8:bd:d4:be: b7:db:0e:98:cf:a9:53:63:60:3e:d9:87:77:dc:97: d3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E3:E2:15:20:23:65:E3:FA:5C:18:30:2F:F3:A1:97:50:2F:B2:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/7bf450b2-ed0e-334b-8f5a-f0c05206e657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:af:cd:fb:cb:a2:6c:70:28:9b:b0:38:70:fd:80:4d:65:16: 65:f4:fe:f7:2e:50:5b:8c:ec:8e:65:49:3b:b9:5d:66:82:4b: 9f:e7:05:ba:eb:7d:f8:0c:b6:8e:67:4d:8c:21:23:4b:11:f3: 72:62:5c:11:30:a9:36:47:34:04:ad:83:84:52:bc:ac:a5:a9: 40:79:ce:c9:1b:76:52:03:5b:5f:b9:3d:7c:b9:13:24:f7:7b: df:b2:1f:bf:54:5e:be:d8:ec:96:b6:6f:c9:58:5f:1e:8c:9f: c9:11:8f:23:8e:76:93:90:d4:6e:0d:a7:7a:e3:8e:5a:4e:b0: 2f:b0:19:14:9d:83:1f:e9:4a:9c:49:e7:0b:0d:a5:a9:b2:01: bc:00:2e:80:1c:e9:fc:de:9b:84:28:0a:41:1c:0f:72:d6:b7: 1c:b6:81:7a:8b:b0:1f:46:3b:43:38:2e:21:21:4a:b7:27:f0: 08:7b:1f:05:4e:b2:96:59:72:de:ab:6e:2c:a3:c0:03:f7:6c: f2:e3:94:f5:e4:bf:fa:f9:65:dc:38:b5:1a:33:15:1f:4a:2c: e9:7d:74:4b:a3:a2:b8:10:1b:2e:da:4f:73:d0:b9:53:89:e9: 1c:88:91:5a:36:89:25:66:42:30:af:96:c1:e2:ea:30:a3:42: ed:ee:06:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53Ji7Mey7nutW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk Y2NlZGI2YWYtNTgzZi00ZDI3LWI4NGItODAwYjExYWM1ZWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnS0XYS8zA/Qhkp4YzKvLgoEGxurntmvph/y NL9KM3uL1kPBRdn9jLKfltqFLPwgb8ZcFmNGHT+Tk5EF/Me3j/xP9wu+pLxxDhvY d66AAJSM7cLsG1kqfw0QmgDSznWdYatgaOLyCwRyreONRtES3Gi9X/xsALV8ZUaR Kvsi5h+ikptnWUr8mT6WAiLxVWfPU+YdB6WLgWOfW/81agZs0SOVSOy2zj/YxeUX bsYeH0ROZjo+LhZRKrsV4Rv24XZQs3Bjs5e5T0val5B2DYO65rnhhQ9l9a/9WfJa 6oiIVgUwqCmi1ZuFuMTwVOi91L632w6Yz6lTY2A+2Yd33JfTTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/j4hUgI2Xj+lwYMC/zoZdQL7I+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvN2JmNDUwYjItZWQwZS0z MzRiLThmNWEtZjBjMDUyMDZlNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIApMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKavzfvLomxwKJuwOHD9gE1lFmX0/vcuUFuM7I5lSTu5XWaCS5/nBbrr ffgMto5nTYwhI0sR83JiXBEwqTZHNAStg4RSvKylqUB5zskbdlIDW1+5PXy5EyT3 e9+yH79UXr7Y7Ja2b8lYXx6Mn8kRjyOOdpOQ1G4Np3rjjlpOsC+wGRSdgx/pSpxJ 5wsNpamyAbwALoAc6fzem4QoCkEcD3LWtxy2gXqLsB9GO0M4LiEhSrcn8Ah7HwVO spZZct6rbiyjwAP3bPLjlPXkv/r5Zdw4tRozFR9KLOl9dEujorgQGy7aT3PQuVOJ 6RyIkVo2iSVmQjCvlsHi6jCjQu3uBuA= -----END CERTIFICATE-----Generated at Sat Oct 18 01:42:08 2025 by rpki-client