$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/c94d2c36-bb50-3fb2-8c4d-bb5897ea9e65.roa File: c94d2c36-bb50-3fb2-8c4d-bb5897ea9e65.roa (raw, json) Hash identifier: l56OZ1z8p9QIO17C/i5KH5zBSD1vzy8ik1WpddnOhRY= Subject key identifier: 09:12:CC:C4:3B:A7:9B:32:8C:E5:08:C2:83:70:83:77:B6:91:95:80 Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F4328584D44FA3573F3E880BD143C6300 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/c94d2c36-bb50-3fb2-8c4d-bb5897ea9e65.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 52.128.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:35:73:f3:e8:80:bd:14:3c:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=e4c7eb2a-f4c5-4011-a39d-76dab2613aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f9:2c:a1:17:87:07:0b:54:66:d9:06:a1:51: 29:39:4d:0f:29:3b:17:30:c0:e5:bb:59:0a:d8:cd: 92:a3:d3:8f:23:3c:84:1e:d2:0b:9d:05:e1:6e:63: 86:46:fd:bd:12:b4:79:21:54:06:45:4e:b1:8f:34: 6f:de:d7:dc:d3:b6:c0:2e:bc:88:6a:b8:40:20:64: 79:d7:2f:a6:19:95:41:a3:cc:6a:f6:61:03:61:0d: f5:ac:41:c2:15:65:9e:a8:5e:ba:f4:a4:cc:d6:2d: 1c:46:49:56:85:c0:72:c3:99:0b:29:a4:df:af:9d: ce:d2:b1:83:71:9c:d6:a5:56:32:e9:e4:26:cf:48: 5f:eb:4b:39:44:63:e7:6b:37:54:01:df:03:56:3f: 56:e6:e7:5d:cf:d7:b4:14:36:7b:b6:45:bb:70:e7: 1d:1c:6e:73:cc:89:8a:26:0f:5d:00:9e:41:9d:0a: c7:22:02:c6:f9:49:55:e5:bd:87:50:10:6b:3b:ef: 13:5b:7c:a5:c2:a2:7b:6c:bb:18:b1:2d:86:cc:b5: 20:8d:83:cd:18:ac:42:91:1a:1a:1d:39:e7:0f:61: 2b:10:0a:63:41:0e:69:e7:02:77:fa:70:64:c1:71: f6:7c:06:e6:e7:12:51:d4:c3:79:e9:a7:ad:d0:d2: 6d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:12:CC:C4:3B:A7:9B:32:8C:E5:08:C2:83:70:83:77:B6:91:95:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/c94d2c36-bb50-3fb2-8c4d-bb5897ea9e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a7:39:1b:45:21:da:42:d3:a9:3b:f0:4b:9e:2c:f1:3e:03: 53:fc:55:ff:aa:6e:1e:32:39:fd:7e:8b:01:30:66:1d:50:51: ab:85:66:69:26:5a:6e:90:f5:89:9c:67:ba:8a:35:cd:83:bf: 8a:1d:be:a4:28:14:b3:72:04:94:b8:b3:6b:6d:2b:f0:5d:cc: d4:98:78:8a:d2:dd:a0:58:c0:fe:2b:d2:7a:62:c4:11:33:40: 5f:19:4d:28:8a:aa:e8:ca:69:c2:0e:6b:ef:ea:ff:fa:5c:72: 33:cf:46:43:50:20:bd:3c:1e:21:8f:b4:2b:c3:34:17:02:28: d6:51:92:d4:1d:0c:d5:f4:de:e5:d7:0d:7d:37:e2:e2:19:a0: 2e:29:08:90:28:00:b5:e3:23:5a:bf:e0:d7:27:c5:53:d6:d5: 6b:b7:4e:9f:e8:a9:31:e8:d9:bf:67:67:c7:df:53:13:9d:04: 60:fc:93:61:03:82:d0:c6:4a:c2:ea:68:e1:32:db:e3:4d:56: 72:70:97:69:57:77:8c:70:7d:2c:8c:aa:f8:a7:41:93:9d:47: c0:e9:64:07:17:7c:3c:d0:e2:9b:44:98:c7:86:1f:66:30:38: 20:2d:30:fc:a7:79:c8:77:57:5f:48:fb:18:a4:35:55:95:6a: 12:2f:0e:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+jVz8+iAvRQ8YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZTRjN2ViMmEtZjRjNS00MDExLWEzOWQtNzZkYWIyNjEzYWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPksoReHBwtUZtkGoVEpOU0PKTsXMMDlu1kK 2M2So9OPIzyEHtILnQXhbmOGRv29ErR5IVQGRU6xjzRv3tfc07bALryIarhAIGR5 1y+mGZVBo8xq9mEDYQ31rEHCFWWeqF669KTM1i0cRklWhcByw5kLKaTfr53O0rGD cZzWpVYy6eQmz0hf60s5RGPnazdUAd8DVj9W5uddz9e0FDZ7tkW7cOcdHG5zzImK Jg9dAJ5BnQrHIgLG+UlV5b2HUBBrO+8TW3ylwqJ7bLsYsS2GzLUgjYPNGKxCkRoa HTnnD2ErEApjQQ5p5wJ3+nBkwXH2fAbm5xJR1MN56aet0NJtZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkSzMQ7p5syjOUIwoNwg3e2kZWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvYzk0ZDJjMzYtYmI1MC0z ZmIyLThjNGQtYmI1ODk3ZWE5ZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2nORtFIdpC06k78EueLPE+A1P8Vf+qbh4yOf1+iwEwZh1QUauFZmkm Wm6Q9YmcZ7qKNc2Dv4odvqQoFLNyBJS4s2ttK/BdzNSYeIrS3aBYwP4r0npixBEz QF8ZTSiKqujKacIOa+/q//pccjPPRkNQIL08HiGPtCvDNBcCKNZRktQdDNX03uXX DX034uIZoC4pCJAoALXjI1q/4NcnxVPW1Wu3Tp/oqTHo2b9nZ8ffUxOdBGD8k2ED gtDGSsLqaOEy2+NNVnJwl2lXd4xwfSyMqvinQZOdR8DpZAcXfDzQ4ptEmMeGH2Yw OCAtMPynech3V19I+xikNVWVahIvDio= -----END CERTIFICATE-----Generated at Thu Mar 26 05:58:52 2026 by rpki-client