$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa File: 1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa (raw, json) Hash identifier: NrZD+PXkuZ0dXLn+8L0cUDAE7r8fXM8q5q2MZTLRL+A= Subject key identifier: F9:49:97:1E:21:82:CB:A4:93:39:57:17:D6:55:58:B3:7F:5F:68:5C Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F4328584D44FA2CF9555AACF9032F9F54 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16509 IP address blocks: 52.128.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:2c:f9:55:5a:ac:f9:03:2f:9f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=ea3eceb5-43e7-42b4-8691-52d4f7b02edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0d:4a:da:cc:9b:a8:e7:72:0c:77:2f:f0:b0: 98:5e:7c:31:39:3e:4a:6e:6a:fa:68:ca:bc:b1:2c: e0:97:04:9a:8e:7f:b7:9c:63:75:74:85:3f:8d:36: 9e:b7:05:9d:28:50:57:10:0b:d6:3c:36:c4:1c:51: f1:3d:6a:22:1c:67:cd:67:e7:13:8b:75:ca:5c:55: e6:3e:e5:44:48:0e:98:bc:db:99:36:d9:f0:82:9b: 39:f0:56:3c:06:9c:e2:bc:4f:1e:2d:78:b8:19:de: 24:58:eb:b0:68:35:4f:90:87:65:38:cb:d7:0f:68: c7:fa:d8:90:4e:2d:dd:d0:26:8e:1f:ca:58:a0:60: d0:2c:73:5d:d2:f8:8b:fc:6a:c9:11:c6:76:84:75: 89:f1:80:e0:3d:a1:d4:eb:b3:d9:f8:95:9a:0f:0a: f6:d6:2a:eb:b0:19:8d:84:4b:d9:4c:8d:78:10:a6: 5e:2a:0f:f0:91:ec:4c:92:54:78:eb:fc:20:20:0f: 22:c0:4c:3e:3e:7a:84:95:5f:e5:f9:53:f4:0f:31: 12:fe:e4:1c:e6:5a:c3:88:91:62:5e:9d:82:01:9c: b9:17:6f:d0:06:29:f9:1e:f7:df:fc:bd:a2:03:dd: cb:5e:59:04:00:7b:62:98:79:48:17:eb:51:17:ed: 84:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:49:97:1E:21:82:CB:A4:93:39:57:17:D6:55:58:B3:7F:5F:68:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/1608e66a-6ff2-3b65-9a8a-d370f1dd6135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:53:93:b0:e6:f2:01:b7:27:43:49:cf:a4:6c:d5:0e:7b:86: c5:f7:71:b7:8d:64:74:2c:74:a6:de:5e:3a:c7:fb:e8:3f:15: ef:e0:f1:31:02:ce:f2:86:59:55:cc:28:c4:e7:17:6a:8c:4b: 08:57:d7:16:1a:cf:b7:81:2b:d0:74:fa:d0:12:bd:c1:49:9a: 68:08:e1:d8:2c:5b:65:93:29:a8:05:2a:4b:f9:9a:78:b2:13: 87:dd:b4:61:1b:ca:1d:69:be:c5:ed:a4:3f:30:00:05:e3:b0: 1a:08:5a:39:d9:73:e1:28:81:70:1d:9d:c1:71:b4:77:74:c6: 82:0a:d8:b6:84:cd:75:3d:4d:3c:22:7f:0f:b9:f9:fd:9c:5e: 79:f2:bf:ad:77:55:5b:eb:c2:28:da:d1:b8:78:42:f8:71:12: a7:09:91:c1:16:2e:e2:f8:65:59:af:ae:76:ed:b8:c8:f4:06: e6:14:e7:4f:61:91:bc:a8:9e:eb:c3:26:91:b0:b7:82:d1:da: 6a:80:b5:ab:2b:82:ab:2a:25:23:e0:14:24:4d:bf:2c:98:ce: e6:50:93:98:84:84:91:25:ad:36:e5:4a:0f:eb:d1:89:52:37: 15:8b:26:f6:ee:c7:bc:c4:5c:96:9d:0c:a0:8f:de:b8:1a:22: 97:96:78:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+iz5VVqs+QMvn1QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZWEzZWNlYjUtNDNlNy00MmI0LTg2OTEtNTJkNGY3YjAyZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ1K2sybqOdyDHcv8LCYXnwxOT5Kbmr6aMq8 sSzglwSajn+3nGN1dIU/jTaetwWdKFBXEAvWPDbEHFHxPWoiHGfNZ+cTi3XKXFXm PuVESA6YvNuZNtnwgps58FY8BpzivE8eLXi4Gd4kWOuwaDVPkIdlOMvXD2jH+tiQ Ti3d0CaOH8pYoGDQLHNd0viL/GrJEcZ2hHWJ8YDgPaHU67PZ+JWaDwr21irrsBmN hEvZTI14EKZeKg/wkexMklR46/wgIA8iwEw+PnqElV/l+VP0DzES/uQc5lrDiJFi Xp2CAZy5F2/QBin5Hvff/L2iA93LXlkEAHtimHlIF+tRF+2EwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlJlx4hgsukkzlXF9ZVWLN/X2hcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvMTYwOGU2NmEtNmZmMi0z YjY1LTlhOGEtZDM3MGYxZGQ2MTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIApMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhTk7Dm8gG3J0NJz6Rs1Q57hsX3cbeNZHQsdKbeXjrH++g/Fe/g8TEC zvKGWVXMKMTnF2qMSwhX1xYaz7eBK9B0+tASvcFJmmgI4dgsW2WTKagFKkv5mniy E4fdtGEbyh1pvsXtpD8wAAXjsBoIWjnZc+EogXAdncFxtHd0xoIK2LaEzXU9TTwi fw+5+f2cXnnyv613VVvrwija0bh4QvhxEqcJkcEWLuL4ZVmvrnbtuMj0BuYU509h kbyonuvDJpGwt4LR2mqAtasrgqsqJSPgFCRNvyyYzuZQk5iEhJElrTblSg/r0YlS NxWLJvbux7zEXJadDKCP3rgaIpeWeK0= -----END CERTIFICATE-----Generated at Thu Mar 26 02:09:31 2026 by rpki-client