$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/38b33f03-0219-3173-a3b9-2bec231ab597.roa File: 38b33f03-0219-3173-a3b9-2bec231ab597.roa (raw, json) Hash identifier: hWQ6kDuk55Q5M/YJwT1KjhkKGFdUbpUauNFUeSeSkJQ= Subject key identifier: 5A:63:63:EF:DA:95:D6:9A:13:7B:70:98:A4:CA:69:EB:63:21:6A:4D Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F4328584B6A61F10E98FC886C2B733500 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/38b33f03-0219-3173-a3b9-2bec231ab597.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 16509 IP address blocks: 52.128.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:f1:0e:98:fc:88:6c:2b:73:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=5d5881b8-6a14-4c27-bdde-85afe9e36a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:1f:fb:85:ef:3f:60:ab:fa:56:99:f9:72: b4:a7:fa:22:41:ef:13:7a:57:67:e9:67:84:c1:25: 79:e5:3c:71:4f:5b:07:eb:9a:05:ed:ac:bf:da:e8: 63:35:1b:08:7e:66:fd:10:04:d4:68:33:41:e8:62: 15:d7:3f:bc:b4:19:b7:29:39:74:21:c6:43:30:a9: b2:82:b2:9a:fa:b8:4c:a2:64:92:4f:43:8c:67:6f: 45:86:14:33:57:7a:8e:ec:34:45:bd:9a:70:fc:1a: b8:35:fa:b6:59:58:58:62:79:bb:e4:90:61:97:ac: ce:7a:76:5a:9c:7d:16:5c:77:33:e2:a0:56:13:d5: 10:32:db:09:1f:b3:46:55:29:2e:d4:20:2f:6c:77: 55:09:a0:28:0d:0d:5a:d2:1b:4c:eb:b1:04:78:5c: 79:b3:95:cd:19:f8:a9:33:80:9f:ac:c8:69:b8:2d: 5c:00:ea:7d:02:7a:1e:1b:23:ba:f3:fa:f7:f7:81: 67:45:07:ee:1e:88:4c:e6:0b:39:a6:ac:c5:02:fe: 1c:91:0b:a3:2c:ba:28:5f:36:95:bc:9a:63:a0:6d: f0:77:7d:55:9e:ba:8b:48:09:44:cb:7f:76:f2:df: ab:7f:79:5e:f5:33:a3:18:f9:a3:70:29:32:e5:94: 89:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:63:63:EF:DA:95:D6:9A:13:7B:70:98:A4:CA:69:EB:63:21:6A:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/38b33f03-0219-3173-a3b9-2bec231ab597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:7e:78:e4:28:d2:0b:14:a2:93:4f:13:d8:82:04:36:e4:38: 63:7b:62:45:e0:db:ec:16:f2:30:59:19:b2:64:79:9a:39:a4: 70:32:ab:9c:c5:e2:ca:41:5f:43:a7:8c:84:d4:96:5e:a9:06: 61:5a:e4:7c:d3:08:fd:fc:4b:f2:ce:0d:ad:3a:22:0b:f4:a5: 5d:03:98:8b:c4:01:1b:10:35:12:e6:16:74:82:ae:12:4a:bf: 9c:28:67:e4:a4:af:0a:26:60:93:18:89:89:f2:9a:57:91:8a: c8:c5:4a:d3:f5:83:e7:cb:d4:97:ac:f6:67:28:b1:5d:d9:9c: 88:7d:7f:11:55:56:3b:65:11:bf:22:6d:d2:d8:9d:49:a2:bc: 0b:75:5e:32:ad:e4:f3:05:9d:b4:6d:11:8a:0a:3c:33:7c:f7: 34:2d:39:33:cd:1c:9e:ce:60:2b:63:33:d3:a1:99:60:23:ad: 7f:64:1a:33:92:6a:22:b5:40:e5:b4:62:08:dd:0a:16:b5:49: 23:74:c1:bc:2b:0b:f8:cf:26:0b:72:dd:3b:cd:6f:34:e3:14: f3:cc:44:d1:6d:1f:05:a4:0e:38:21:87:8f:10:44:29:50:34: 52:de:af:fc:1c:c4:f2:a3:10:b5:19:27:a0:44:ab:84:87:f5: 5d:61:40:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYfEOmPyIbCtzNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NWQ1ODgxYjgtNmExNC00YzI3LWJkZGUtODVhZmU5ZTM2YTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUAf+4XvP2Cr+laZ+XK0p/oiQe8Teldn6WeE wSV55TxxT1sH65oF7ay/2uhjNRsIfmb9EATUaDNB6GIV1z+8tBm3KTl0IcZDMKmy grKa+rhMomSST0OMZ29FhhQzV3qO7DRFvZpw/Bq4Nfq2WVhYYnm75JBhl6zOenZa nH0WXHcz4qBWE9UQMtsJH7NGVSku1CAvbHdVCaAoDQ1a0htM67EEeFx5s5XNGfip M4CfrMhpuC1cAOp9AnoeGyO68/r394FnRQfuHohM5gs5pqzFAv4ckQujLLooXzaV vJpjoG3wd31VnrqLSAlEy3928t+rf3le9TOjGPmjcCky5ZSJ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpjY+/aldaaE3twmKTKaetjIWpNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvMzhiMzNmMDMtMDIxOS0z MTczLWEzYjktMmJlYzIzMWFiNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIAsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAV+eOQo0gsUopNPE9iCBDbkOGN7YkXg2+wW8jBZGbJkeZo5pHAyq5zF 4spBX0OnjITUll6pBmFa5HzTCP38S/LODa06Igv0pV0DmIvEARsQNRLmFnSCrhJK v5woZ+SkrwomYJMYiYnymleRisjFStP1g+fL1Jes9mcosV3ZnIh9fxFVVjtlEb8i bdLYnUmivAt1XjKt5PMFnbRtEYoKPDN89zQtOTPNHJ7OYCtjM9OhmWAjrX9kGjOS aiK1QOW0YgjdCha1SSN0wbwrC/jPJgty3TvNbzTjFPPMRNFtHwWkDjghh48QRClQ NFLer/wcxPKjELUZJ6BEq4SH9V1hQEE= -----END CERTIFICATE-----Generated at Mon Oct 20 20:44:03 2025 by rpki-client