$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/95366fd2-39e1-36cf-bf1d-12cac6b84422.roa File: 95366fd2-39e1-36cf-bf1d-12cac6b84422.roa (raw, json) Hash identifier: f5tVQgbwLYeAVdPl/SBd62ruN+qUlx/QdgoTAGlTL8A= Subject key identifier: 08:00:A8:CA:6E:17:FE:40:7D:06:93:BC:0B:B8:C3:A8:37:7C:B8:0D Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F4328584D40CA4A80E22443F75DE74480 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/95366fd2-39e1-36cf-bf1d-12cac6b84422.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 16509 IP address blocks: 52.128.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:4a:80:e2:24:43:f7:5d:e7:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=92794856-8c55-48fc-9bb7-054405fd32ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e8:3b:02:d6:43:16:49:10:5b:5f:b2:ac:95: f6:7a:cb:d0:13:dd:05:15:b8:8b:17:e4:2c:fc:62: 26:d2:f3:c7:e6:c3:27:50:b9:a8:af:f5:dd:6b:2e: d6:6c:73:8a:ed:6d:bc:2a:a8:58:49:2d:5b:0d:f0: 26:6c:55:00:ed:de:0d:f0:ff:7e:f2:ec:98:98:37: 65:05:65:69:64:b4:cd:ec:80:1b:42:73:6f:d4:3f: fb:78:37:d6:ee:4d:e9:9e:e4:37:6e:03:71:a5:52: 1e:4c:67:91:bb:9a:e0:c3:3c:c6:f8:00:bd:b1:a5: c6:52:32:31:8a:90:63:ed:ea:17:97:22:00:e2:9f: fc:68:c6:d9:bf:96:86:d6:8f:78:93:c5:41:4e:19: ce:ca:30:03:2d:be:4d:e7:21:a0:18:88:d1:d6:6d: de:09:ae:68:62:c4:6b:87:bb:0a:6f:c9:04:7e:7d: 77:c1:b8:3a:21:a6:77:74:43:5b:10:38:77:16:df: 6e:ee:c8:55:04:62:a9:a8:9b:88:eb:3e:55:65:a7: ed:11:20:de:22:68:db:26:38:2c:df:8e:26:a0:fb: f4:3b:b1:e7:fd:fb:a2:e9:86:91:d3:20:de:58:95: 30:a9:fc:2e:6f:f0:08:58:97:1d:ea:72:70:34:08: 7f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:00:A8:CA:6E:17:FE:40:7D:06:93:BC:0B:B8:C3:A8:37:7C:B8:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/95366fd2-39e1-36cf-bf1d-12cac6b84422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:ca:47:4f:d9:c2:81:9e:79:79:72:24:c0:52:8e:b2:20:d2: 38:9d:9e:ee:f0:88:7c:8a:57:e5:42:c2:11:d1:82:a6:3d:cc: dd:fa:74:2f:22:05:34:e7:fd:2f:cb:41:c7:37:2a:96:eb:8e: f8:d5:8a:72:d5:c6:38:81:dc:98:6a:d5:4d:ed:b2:8d:c9:4f: 5d:60:00:04:8d:24:cc:19:7b:8d:62:2b:ee:24:14:60:35:51: 44:68:c5:16:a9:e5:05:93:98:78:a1:94:a7:bd:5e:70:a9:04: 2e:6b:62:5a:db:0e:83:ca:75:bb:e3:2b:a2:c0:66:af:83:a6: 79:dd:ae:08:5d:63:be:9e:23:2a:ba:e1:7c:4e:29:9b:8e:61: 05:88:5f:01:c5:36:df:b4:cd:22:c5:6f:80:b9:ec:fe:c7:27: cf:0b:73:5a:ad:30:00:b9:cf:34:94:72:8f:de:3e:b9:23:fd: 9b:5c:a5:7b:7c:0d:f5:4f:84:81:e5:6b:70:38:1b:65:d5:70: c6:d2:27:ad:b3:7b:b1:1f:69:f5:0f:5c:f2:f7:a9:91:7d:23: 14:b5:38:89:a0:fa:b8:17:f4:04:c4:19:5a:83:15:d1:ee:70: 46:49:47:74:17:45:50:ee:81:99:4d:bf:a8:74:70:83:18:10: d5:da:54:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AykqA4iRD913nRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk OTI3OTQ4NTYtOGM1NS00OGZjLTliYjctMDU0NDA1ZmQzMmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+g7AtZDFkkQW1+yrJX2esvQE90FFbiLF+Qs /GIm0vPH5sMnULmor/Xday7WbHOK7W28KqhYSS1bDfAmbFUA7d4N8P9+8uyYmDdl BWVpZLTN7IAbQnNv1D/7eDfW7k3pnuQ3bgNxpVIeTGeRu5rgwzzG+AC9saXGUjIx ipBj7eoXlyIA4p/8aMbZv5aG1o94k8VBThnOyjADLb5N5yGgGIjR1m3eCa5oYsRr h7sKb8kEfn13wbg6IaZ3dENbEDh3Ft9u7shVBGKpqJuI6z5VZaftESDeImjbJjgs 344moPv0O7Hn/fui6YaR0yDeWJUwqfwub/AIWJcd6nJwNAh/NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgAqMpuF/5AfQaTvAu4w6g3fLgNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvOTUzNjZmZDItMzllMS0z NmNmLWJmMWQtMTJjYWM2Yjg0NDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIArMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnKR0/ZwoGeeXlyJMBSjrIg0jidnu7wiHyKV+VCwhHRgqY9zN36dC8i BTTn/S/LQcc3KpbrjvjVinLVxjiB3Jhq1U3tso3JT11gAASNJMwZe41iK+4kFGA1 UURoxRap5QWTmHihlKe9XnCpBC5rYlrbDoPKdbvjK6LAZq+DpnndrghdY76eIyq6 4XxOKZuOYQWIXwHFNt+0zSLFb4C57P7HJ88Lc1qtMAC5zzSUco/ePrkj/ZtcpXt8 DfVPhIHla3A4G2XVcMbSJ62ze7EfafUPXPL3qZF9IxS1OImg+rgX9ATEGVqDFdHu cEZJR3QXRVDugZlNv6h0cIMYENXaVP8= -----END CERTIFICATE-----Generated at Thu Mar 26 02:08:54 2026 by rpki-client