$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/59c0257e-698d-3c0f-975d-93c1e910c93c.roa File: 59c0257e-698d-3c0f-975d-93c1e910c93c.roa (raw, json) Hash identifier: 2wWldI4tIWCCcIXbI3eo9fxWTPR52VxQqpGU1p1ahek= Subject key identifier: 85:5F:9E:67:64:2B:61:BC:D5:BC:73:3A:BE:0C:9C:ED:78:95:2C:8E Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F4328584EC371BFCDE40B149A5AA01F80 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/59c0257e-698d-3c0f-975d-93c1e910c93c.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 16509 IP address blocks: 52.128.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:bf:cd:e4:0b:14:9a:5a:a0:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=1ec9205d-254b-4258-a4d5-fbaa8e5d771a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8b:76:10:4b:18:23:a4:c3:5a:90:da:09:eb: 06:12:c4:8f:a3:6e:36:fc:94:23:b1:82:af:54:46: c5:40:61:80:86:59:06:c5:17:fa:e4:a1:ed:d3:66: 5b:c5:02:3f:69:d5:e5:bc:45:23:b5:cf:e5:c3:64: d5:bd:0a:47:78:e3:be:47:44:5f:fa:95:ab:96:89: 6d:1c:6c:d6:5b:02:12:34:e7:ee:3a:7a:9e:39:41: 80:67:de:1b:38:ed:ed:4a:84:7c:a1:7b:54:97:97: 9e:43:68:fc:a0:7a:db:49:5c:f8:d7:a1:7e:19:61: 67:83:fe:74:a6:75:b5:98:32:e6:c9:91:88:f5:d5: 10:45:40:f3:20:1b:c0:16:29:5c:9c:5f:29:54:cd: 7b:17:c3:9e:32:7d:7b:c9:81:94:13:7b:8a:69:3b: 30:ce:7a:07:88:f5:dc:b4:3f:da:67:dc:c9:2d:5c: 55:a1:51:dd:2b:d9:c6:a4:3e:f5:6b:f8:a7:7e:76: b1:c6:0a:ec:92:27:c9:d9:38:4d:a2:f8:65:0f:e9: 78:db:c9:75:05:17:7f:02:fd:e1:df:9b:3a:9d:f2: 75:b1:6b:29:0c:1e:ff:ec:9e:f3:2b:b4:10:33:ec: 23:4a:a8:59:63:26:71:c5:6a:01:0d:11:1f:85:17: a7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5F:9E:67:64:2B:61:BC:D5:BC:73:3A:BE:0C:9C:ED:78:95:2C:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/59c0257e-698d-3c0f-975d-93c1e910c93c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ac:d2:b0:07:ca:9b:c8:6f:0a:5e:46:e0:17:70:ce:9d:70: 2d:6e:56:e7:d4:f6:53:c4:c4:2e:10:d6:e8:20:ce:6c:b6:e2: e2:85:25:5d:06:c8:60:b0:b8:f8:b5:64:e4:ef:22:13:31:3a: d7:6c:07:fb:87:0c:1c:45:95:c6:ce:f5:a0:ce:c8:80:ad:53: 14:6e:2a:93:52:e5:06:a1:a3:15:37:c3:a3:62:95:ec:80:ec: c8:4f:12:f2:73:cd:f2:d7:3f:42:b4:fe:e5:d4:fe:ab:69:b3: 25:81:a2:89:aa:9b:d9:00:7a:ff:f5:d0:a3:5f:ae:00:50:7e: 8c:ae:ad:9f:b2:4c:02:ea:6b:48:f3:a4:e9:3b:a1:7b:c4:d9: 0d:99:df:94:02:93:c4:65:81:3a:7a:6c:1b:d8:ea:47:42:fa: e0:fe:36:5d:53:77:90:a9:3e:56:d2:ef:37:2d:6b:ef:a1:91: 1f:0a:19:b1:e8:2b:86:e4:c4:9c:5a:bf:9e:cd:88:f3:52:12: 43:cd:f7:b1:1a:06:ce:11:02:91:4b:20:d8:10:ab:5b:75:c2: fd:57:a6:3a:1e:43:37:9f:4d:ec:db:d7:46:2e:ba:28:4e:30: 6a:6a:41:ad:f5:03:89:8d:55:51:e0:03:eb:3f:0c:d1:18:01: 62:df:f3:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Dcb/N5AsUmlqgH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk MWVjOTIwNWQtMjU0Yi00MjU4LWE0ZDUtZmJhYThlNWQ3NzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYt2EEsYI6TDWpDaCesGEsSPo242/JQjsYKv VEbFQGGAhlkGxRf65KHt02ZbxQI/adXlvEUjtc/lw2TVvQpHeOO+R0Rf+pWrlolt HGzWWwISNOfuOnqeOUGAZ94bOO3tSoR8oXtUl5eeQ2j8oHrbSVz416F+GWFng/50 pnW1mDLmyZGI9dUQRUDzIBvAFilcnF8pVM17F8OeMn17yYGUE3uKaTswznoHiPXc tD/aZ9zJLVxVoVHdK9nGpD71a/infnaxxgrskifJ2ThNovhlD+l428l1BRd/Av3h 35s6nfJ1sWspDB7/7J7zK7QQM+wjSqhZYyZxxWoBDREfhRenQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVfnmdkK2G81bxzOr4MnO14lSyOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvNTljMDI1N2UtNjk4ZC0z YzBmLTk3NWQtOTNjMWU5MTBjOTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIAqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAis0rAHypvIbwpeRuAXcM6dcC1uVufU9lPExC4Q1uggzmy24uKFJV0G yGCwuPi1ZOTvIhMxOtdsB/uHDBxFlcbO9aDOyICtUxRuKpNS5QahoxU3w6NileyA 7MhPEvJzzfLXP0K0/uXU/qtpsyWBoomqm9kAev/10KNfrgBQfoyurZ+yTALqa0jz pOk7oXvE2Q2Z35QCk8RlgTp6bBvY6kdC+uD+Nl1Td5CpPlbS7zcta++hkR8KGbHo K4bkxJxav57NiPNSEkPN97EaBs4RApFLINgQq1t1wv1XpjoeQzefTezb10YuuihO MGpqQa31A4mNVVHgA+s/DNEYAWLf83E= -----END CERTIFICATE-----Generated at Thu Aug 20 23:40:11 2026 by rpki-client