$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/38b33f03-0219-3173-a3b9-2bec231ab597.roa File: 38b33f03-0219-3173-a3b9-2bec231ab597.roa (raw, json) Hash identifier: eIdgNwZukjBTo2Z1Turcixsi6YvO9OQPtmvG/Tb4A6c= Subject key identifier: E6:B5:ED:A8:6E:43:C0:EF:1F:61:7F:80:1D:FF:9B:C8:90:F6:78:3C Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F4328584D2A74EDA173D397358863D300 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/38b33f03-0219-3173-a3b9-2bec231ab597.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 52.128.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:ed:a1:73:d3:97:35:88:63:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=d6d7954f-f741-4391-8240-0591db909691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7b:40:d9:02:9d:2e:82:89:24:5a:dd:40:9b: 26:be:e1:ff:23:36:c7:97:c5:26:55:e4:7b:a1:69: 30:ce:83:38:9b:bc:1d:08:4f:62:ba:dd:1a:49:0b: 9a:79:f1:f2:0e:6e:35:c1:83:3e:84:81:1d:4f:3d: b7:c9:f7:22:07:7e:f8:72:6f:85:3b:38:89:5d:3e: cf:9a:cb:9e:1d:06:55:ca:20:c8:8e:f2:29:49:0c: a7:99:c7:6b:b7:88:2f:dc:33:e0:e7:08:3e:08:0f: 49:8a:c3:1f:63:9f:3e:33:0c:d0:48:14:4a:3b:a4: be:15:e3:8b:b9:ca:40:5a:68:b0:c0:fe:a5:19:ee: 67:65:01:ae:d2:23:7c:11:3c:58:21:a1:a4:80:33: 91:86:23:de:32:b9:c3:03:b1:9d:8a:bc:41:ed:ec: 7f:07:39:b6:ba:b3:a4:d4:ad:95:27:2a:ac:e1:8b: b4:67:8f:ef:bf:fe:ee:17:58:ee:ef:8b:57:ca:da: 79:ea:20:4b:a7:ec:49:c1:c8:e5:2f:ae:f5:74:69: 97:07:f1:ce:99:1c:f9:af:5b:09:5b:9d:b4:de:01: c2:cc:01:e6:39:be:ba:ca:f1:dd:8b:84:ec:d4:24: d5:aa:8f:28:8c:b6:0c:83:25:2f:cb:b1:d9:43:53: ac:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B5:ED:A8:6E:43:C0:EF:1F:61:7F:80:1D:FF:9B:C8:90:F6:78:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/38b33f03-0219-3173-a3b9-2bec231ab597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:55:d1:6b:4c:85:1b:36:e2:2e:3d:14:8b:bd:8e:54:45:1f: 2d:e5:b5:4e:52:0a:2e:6d:64:d4:11:82:0f:18:76:66:52:ea: 3f:2a:e0:17:65:4f:8d:d2:72:00:30:15:57:88:dc:9d:8b:b9: d9:64:71:2d:d5:4c:7e:95:f5:5d:98:2f:90:4b:3e:c6:16:ce: ba:6c:4c:a7:38:93:c7:04:82:75:f0:b7:0b:25:f6:28:b8:8c: 3d:e9:c1:7a:52:a5:6c:f2:d1:b9:85:86:21:fc:4f:00:51:eb: a0:81:91:75:df:12:c5:8d:5e:3c:25:28:64:71:49:59:40:24: 80:50:d6:c6:04:11:34:d7:6c:c2:d9:55:51:92:58:6b:89:2d: 8a:56:d8:5c:ff:d1:be:3e:17:9a:87:ed:21:b6:a8:63:df:50: d8:48:b1:84:1e:14:df:9c:a0:7a:7b:6d:a5:61:cc:da:82:8f: 14:5e:21:92:8f:67:ae:bf:11:30:07:e9:17:3c:f1:69:24:02: 62:ae:7d:b8:e6:fa:71:ba:1f:26:26:c7:57:90:c6:58:e8:a7: b6:3b:8d:28:44:37:de:9f:0d:f5:be:6d:6d:5e:d2:0e:2b:94: 1a:c4:5c:37:41:e3:bb:ce:3a:3a:66:eb:1e:42:21:86:d7:82: 6d:c8:03:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdO2hc9OXNYhj0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZDZkNzk1NGYtZjc0MS00MzkxLTgyNDAtMDU5MWRiOTA5NjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHtA2QKdLoKJJFrdQJsmvuH/IzbHl8UmVeR7 oWkwzoM4m7wdCE9iut0aSQuaefHyDm41wYM+hIEdTz23yfciB374cm+FOziJXT7P msueHQZVyiDIjvIpSQynmcdrt4gv3DPg5wg+CA9JisMfY58+MwzQSBRKO6S+FeOL ucpAWmiwwP6lGe5nZQGu0iN8ETxYIaGkgDORhiPeMrnDA7GdirxB7ex/Bzm2urOk 1K2VJyqs4Yu0Z4/vv/7uF1ju74tXytp56iBLp+xJwcjlL671dGmXB/HOmRz5r1sJ W5203gHCzAHmOb66yvHdi4Ts1CTVqo8ojLYMgyUvy7HZQ1OsOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOa17ahuQ8DvH2F/gB3/m8iQ9ng8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvMzhiMzNmMDMtMDIxOS0z MTczLWEzYjktMmJlYzIzMWFiNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIAsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALZV0WtMhRs24i49FIu9jlRFHy3ltU5SCi5tZNQRgg8YdmZS6j8q4Bdl T43ScgAwFVeI3J2LudlkcS3VTH6V9V2YL5BLPsYWzrpsTKc4k8cEgnXwtwsl9ii4 jD3pwXpSpWzy0bmFhiH8TwBR66CBkXXfEsWNXjwlKGRxSVlAJIBQ1sYEETTXbMLZ VVGSWGuJLYpW2Fz/0b4+F5qH7SG2qGPfUNhIsYQeFN+coHp7baVhzNqCjxReIZKP Z66/ETAH6Rc88WkkAmKufbjm+nG6HyYmx1eQxljop7Y7jShEN96fDfW+bW1e0g4r lBrEXDdB47vOOjpm6x5CIYbXgm3IA3U= -----END CERTIFICATE-----Generated at Thu Mar 26 02:12:03 2026 by rpki-client