$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/38b33f03-0219-3173-a3b9-2bec231ab597.roa File: 38b33f03-0219-3173-a3b9-2bec231ab597.roa (raw, json) Hash identifier: DOjkCFDk7mIHHQHnF4KRgDVwNTQXhmR6bzUKaiFX3go= Subject key identifier: 11:27:DA:68:2F:F9:6E:DA:E8:C1:66:67:6F:7E:EA:AF:E1:90:C2:32 Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F4328584F4F081952C24BB7432C80BD00 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/38b33f03-0219-3173-a3b9-2bec231ab597.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 52.128.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:19:52:c2:4b:b7:43:2c:80:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=adfdbb2a-264b-42a2-aec1-93aa9153d1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4a:6e:b5:38:b3:bb:93:c6:9a:54:5e:b7:f3: a9:0f:97:6a:77:06:66:09:d2:55:e6:bd:45:80:e3: d0:5d:9c:79:9d:5f:15:74:6e:9f:f3:85:80:d5:60: 26:e5:b7:ce:9e:a3:a3:79:31:ad:35:9b:8b:f3:c3: 91:10:29:e7:d0:ea:65:ec:7c:d5:29:47:08:01:96: f2:1a:98:3f:df:dc:73:c9:42:16:35:c7:b7:a4:ff: cb:52:95:eb:fd:5e:79:49:f7:c5:93:bd:7a:db:17: fb:44:d3:4e:f4:70:c1:f6:95:c9:f0:9f:3f:78:53: 87:9d:47:21:53:2d:fe:c7:fa:cc:ee:1f:9d:d7:c1: 13:eb:c6:03:6e:20:ba:b0:9e:6f:63:79:b4:8b:e5: 2e:1d:5d:14:39:f0:d3:b1:8b:47:34:4b:f0:9d:b2: 8c:28:12:7b:71:23:da:f0:d9:af:45:f1:62:66:6a: 71:18:12:68:c8:90:7d:9f:ba:a2:ed:0f:72:01:4f: 53:df:b2:7b:c5:a6:5f:23:21:80:6e:11:fe:d8:77: b9:b7:fd:77:e3:8c:d0:22:b2:56:7c:a7:e6:58:05: af:6d:57:41:4a:4f:6a:a1:1d:8e:5c:5d:ed:6c:b4: 7c:4a:2b:b0:fa:a8:22:a6:37:91:2a:57:4c:3c:9d: 3d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:27:DA:68:2F:F9:6E:DA:E8:C1:66:67:6F:7E:EA:AF:E1:90:C2:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/38b33f03-0219-3173-a3b9-2bec231ab597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c3:49:93:e1:09:02:fe:dc:55:96:22:31:f6:d6:f3:1c:22: 00:59:cc:57:bd:c7:4e:d6:a9:aa:1a:89:6b:99:3f:92:5b:ba: fe:92:6a:d4:8a:7c:10:ca:70:86:b9:fa:7b:3a:cd:2a:6b:14: bd:83:53:54:3a:34:e4:76:ee:84:e0:65:e9:f8:92:0f:63:15: fa:28:78:9c:dc:ec:f1:35:32:3b:3b:d0:4b:0d:98:29:78:8a: a3:70:1f:85:a0:2b:a9:08:69:59:94:27:dc:0f:fa:82:16:71: 80:8a:10:da:83:e1:0d:5b:22:5d:37:9b:f5:76:6f:8f:23:df: 58:3c:13:94:da:eb:e4:34:72:cc:a6:23:1f:85:4c:ed:7a:dc: 1d:67:72:5a:ca:e9:1d:e3:7a:e9:d1:5c:85:3f:d6:2f:3f:5b: f5:05:e2:99:35:af:a4:46:fc:f3:9d:49:25:15:7f:0f:45:02: 5a:13:56:c4:b9:3c:fb:a2:d1:19:2c:0c:9e:b0:5e:e2:a4:42: 9f:88:4c:94:ba:39:8f:60:6f:aa:f0:7f:15:1f:45:10:2b:aa: 14:d7:81:5b:3e:21:d8:ba:61:3b:22:9d:5e:b7:47:79:b5:71: 32:d5:ec:2d:22:3e:12:ce:b4:39:ea:d5:09:61:fd:8a:a7:54: 52:f8:52:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBlSwku3QyyAvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk YWRmZGJiMmEtMjY0Yi00MmEyLWFlYzEtOTNhYTkxNTNkMWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUputTizu5PGmlRet/OpD5dqdwZmCdJV5r1F gOPQXZx5nV8VdG6f84WA1WAm5bfOnqOjeTGtNZuL88ORECnn0Opl7HzVKUcIAZby Gpg/39xzyUIWNce3pP/LUpXr/V55SffFk7162xf7RNNO9HDB9pXJ8J8/eFOHnUch Uy3+x/rM7h+d18ET68YDbiC6sJ5vY3m0i+UuHV0UOfDTsYtHNEvwnbKMKBJ7cSPa 8NmvRfFiZmpxGBJoyJB9n7qi7Q9yAU9T37J7xaZfIyGAbhH+2He5t/1344zQIrJW fKfmWAWvbVdBSk9qoR2OXF3tbLR8Siuw+qgipjeRKldMPJ09IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEn2mgv+W7a6MFmZ29+6q/hkMIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvMzhiMzNmMDMtMDIxOS0z MTczLWEzYjktMmJlYzIzMWFiNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIAsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArDSZPhCQL+3FWWIjH21vMcIgBZzFe9x07WqaoaiWuZP5Jbuv6SatSK fBDKcIa5+ns6zSprFL2DU1Q6NOR27oTgZen4kg9jFfooeJzc7PE1Mjs70EsNmCl4 iqNwH4WgK6kIaVmUJ9wP+oIWcYCKENqD4Q1bIl03m/V2b48j31g8E5Ta6+Q0csym Ix+FTO163B1nclrK6R3jeunRXIU/1i8/W/UF4pk1r6RG/POdSSUVfw9FAloTVsS5 PPui0RksDJ6wXuKkQp+ITJS6OY9gb6rwfxUfRRArqhTXgVs+Idi6YTsinV63R3m1 cTLV7C0iPhLOtDnq1Qlh/YqnVFL4UsI= -----END CERTIFICATE-----Generated at Sun Oct 11 19:35:36 2026 by rpki-client