$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/38b33f03-0219-3173-a3b9-2bec231ab597.roa File: 38b33f03-0219-3173-a3b9-2bec231ab597.roa (raw, json) Hash identifier: 7lQPpAOLNSQh1ATyuFN+2q1Ip5l0KpATCM/16If5cLw= Subject key identifier: 6C:D6:79:6D:2B:D3:30:60:4F:CA:DE:F6:2B:A3:DC:79:C0:20:3F:DB Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F4328584EAD1C55B58BF569CC90223C60 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/38b33f03-0219-3173-a3b9-2bec231ab597.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 16509 IP address blocks: 52.128.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:55:b5:8b:f5:69:cc:90:22:3c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=f929da4d-798c-40af-8e6e-ff11d6aa157e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:27:e3:47:53:c5:72:14:c8:cc:3a:19:cb:95: d1:7b:a9:a9:65:82:d5:f1:b1:ad:9e:a4:17:0f:8f: 56:e9:12:96:78:9e:ae:47:24:3d:d1:ea:bb:13:c4: 18:4b:91:c5:96:d0:60:e2:51:dc:ab:0e:28:6a:90: be:08:73:de:1e:05:0f:6f:20:76:c9:65:ed:86:fa: 8a:e8:65:57:3d:46:b3:46:e1:3d:6e:64:36:e9:03: 4f:73:30:a8:cf:97:01:f2:69:8c:87:a3:92:fb:f7: 6b:e5:39:e3:c0:a7:b9:21:d5:ab:cb:94:a8:14:3c: d2:3f:f1:4d:80:d5:30:16:52:0d:a3:5a:5e:c0:56: 7b:bf:2a:28:ac:0f:37:ab:a2:82:8d:68:1f:8d:aa: 6f:2c:18:62:04:14:21:6a:93:a1:8e:37:b2:4a:a2: 8e:2c:d6:84:4c:1d:27:aa:fc:08:18:bf:2c:ea:13: 18:49:18:98:d5:f8:6c:7c:35:58:1c:c4:8a:25:58: af:1c:ca:83:41:38:b1:fe:a8:b4:8d:03:79:7b:e6: 01:f7:4d:aa:17:30:a4:ea:0b:1d:0a:f6:eb:b1:fc: e2:1c:02:51:c2:6c:72:f2:44:45:3c:df:26:ca:5e: 14:fd:61:8a:61:d6:ed:f3:87:7a:06:21:4d:72:27: b5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D6:79:6D:2B:D3:30:60:4F:CA:DE:F6:2B:A3:DC:79:C0:20:3F:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/38b33f03-0219-3173-a3b9-2bec231ab597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:1a:1d:da:35:f9:09:49:86:1f:02:48:29:e2:49:d6:00:b6: 03:e3:55:4d:eb:34:fc:4b:19:62:f7:a5:f1:b6:cd:fa:65:c9: 42:a8:7b:c8:31:84:f7:eb:fe:6d:3b:55:41:27:eb:41:e3:ed: e5:d7:20:86:ae:1d:9f:6d:7f:d0:05:01:49:cb:50:33:bc:c3: 6d:62:c0:18:15:1d:7b:7e:a8:7b:43:3b:aa:a7:91:83:f2:dc: 8a:3a:e8:c5:5b:2d:7e:79:4e:eb:b3:5f:f7:8e:a8:dc:68:8b: 6c:cb:a5:22:02:7c:c5:51:19:1c:26:06:8e:1a:85:7a:89:df: 68:e1:43:cd:da:be:13:2d:90:43:c7:ec:9d:e3:b5:3b:70:f2: 82:14:ba:c8:a2:9f:17:60:5a:45:21:87:fb:40:7e:2b:2c:41: ff:c8:67:b1:a2:e9:b1:75:a8:35:d8:9a:1d:48:cf:c5:79:74: 9e:5d:d0:cf:68:7d:4e:80:af:78:a8:3d:86:a9:f9:6a:53:73: eb:14:6f:73:47:7a:07:a8:c3:d7:e3:3e:b0:3d:4c:cc:80:77: 62:d0:9f:83:a8:54:2e:40:f7:2b:10:b4:cb:41:27:11:71:dc: 5d:2b:ef:11:57:c7:23:bf:9e:c6:15:37:6c:45:ec:76:02:36: 06:9f:2d:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHFW1i/VpzJAiPGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk ZjkyOWRhNGQtNzk4Yy00MGFmLThlNmUtZmYxMWQ2YWExNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArifjR1PFchTIzDoZy5XRe6mpZYLV8bGtnqQX D49W6RKWeJ6uRyQ90eq7E8QYS5HFltBg4lHcqw4oapC+CHPeHgUPbyB2yWXthvqK 6GVXPUazRuE9bmQ26QNPczCoz5cB8mmMh6OS+/dr5TnjwKe5IdWry5SoFDzSP/FN gNUwFlINo1pewFZ7vyoorA83q6KCjWgfjapvLBhiBBQhapOhjjeySqKOLNaETB0n qvwIGL8s6hMYSRiY1fhsfDVYHMSKJVivHMqDQTix/qi0jQN5e+YB902qFzCk6gsd CvbrsfziHAJRwmxy8kRFPN8myl4U/WGKYdbt84d6BiFNcie1UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzWeW0r0zBgT8re9iuj3HnAID/bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvMzhiMzNmMDMtMDIxOS0z MTczLWEzYjktMmJlYzIzMWFiNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIAsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQaHdo1+QlJhh8CSCniSdYAtgPjVU3rNPxLGWL3pfG2zfplyUKoe8gx hPfr/m07VUEn60Hj7eXXIIauHZ9tf9AFAUnLUDO8w21iwBgVHXt+qHtDO6qnkYPy 3Io66MVbLX55TuuzX/eOqNxoi2zLpSICfMVRGRwmBo4ahXqJ32jhQ83avhMtkEPH 7J3jtTtw8oIUusiinxdgWkUhh/tAfissQf/IZ7Gi6bF1qDXYmh1Iz8V5dJ5d0M9o fU6Ar3ioPYap+WpTc+sUb3NHegeow9fjPrA9TMyAd2LQn4OoVC5A9ysQtMtBJxFx 3F0r7xFXxyO/nsYVN2xF7HYCNgafLQE= -----END CERTIFICATE-----Generated at Thu Aug 20 23:40:49 2026 by rpki-client