$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/eadf60c7-3f3f-3252-bab0-1034ec94352d.roa File: eadf60c7-3f3f-3252-bab0-1034ec94352d.roa (raw, json) Hash identifier: FFFDVoUPOhUkzSo9dmmAyT9SdhFzlhoVsXlgBoMh2zg= Subject key identifier: FA:EB:CF:6F:F4:1D:28:02:8A:DD:E0:66:42:0E:EE:28:29:1C:48:C6 Certificate issuer: /CN=036d6da4-f590-4da8-a22f-55511da98ee5 Certificate serial: 010D0C9F4328584D44FA2E592E6AF27FD02A4E80 Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/eadf60c7-3f3f-3252-bab0-1034ec94352d.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16509 IP address blocks: 52.128.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:2e:59:2e:6a:f2:7f:d0:2a:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=b0dc0227-3ff0-4f94-9313-8794d437bf1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:11:b5:d9:15:f6:73:25:f8:c8:28:aa:94:f4: fa:68:12:48:d7:87:ba:c0:96:75:ae:81:e3:bd:44: b4:0b:cc:51:02:c3:59:2f:46:0c:36:ca:e9:37:63: 6b:6b:1d:94:2f:ca:57:df:11:77:46:1a:42:54:58: be:cf:10:6a:6f:4f:b6:1d:ce:8d:33:88:4c:cd:df: 5a:ef:09:32:e3:97:55:8a:03:ea:19:6f:67:6e:91: b8:ca:16:d3:52:13:8d:0b:6c:45:75:7a:70:bb:c9: 88:c2:91:fd:12:52:d2:23:26:af:b7:76:03:d9:53: 01:7f:cb:80:f1:8e:4f:a2:f6:ef:a7:73:25:1c:89: 9d:90:7a:02:4c:3f:81:b6:94:a4:a5:90:92:24:ab: 7f:b8:58:e1:6a:94:ac:13:9e:c9:09:13:2f:6f:60: 8d:4c:4b:45:21:ad:3c:bc:00:94:76:f9:eb:c0:56: 3f:3a:8d:f5:4a:fb:18:7d:7c:15:95:de:14:6f:9f: 6f:87:f4:fd:87:f3:00:7c:03:b5:9d:09:21:49:a9: 3f:94:79:2e:24:b8:c6:ef:e0:ee:93:d0:f6:1e:ca: d3:ad:67:ea:8e:bd:24:1e:33:24:29:0c:67:7a:ed: 09:5d:7b:bb:de:69:77:d5:8e:32:76:42:ad:ae:b9: a4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EB:CF:6F:F4:1D:28:02:8A:DD:E0:66:42:0E:EE:28:29:1C:48:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/eadf60c7-3f3f-3252-bab0-1034ec94352d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl X509v3 Authority Key Identifier: keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer sbgp-ipAddrBlock: critical IPv4: 52.128.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8a:c3:30:c5:34:88:ab:bd:cc:6f:d0:01:b2:c9:11:1b:1d: d8:67:82:7b:84:e5:84:9a:18:0b:0c:d4:b1:0f:c0:8b:38:08: 1d:c2:02:c4:ee:51:71:18:46:93:81:48:0f:c7:13:ff:a1:73: c3:5a:ec:60:13:6b:41:38:09:9a:a0:ae:ea:36:13:a1:5e:0d: 83:4f:79:1c:94:1a:f1:01:38:b5:68:f2:95:ca:38:9f:0b:49: 18:4c:16:bb:87:8e:39:19:da:8c:00:c6:1f:d3:84:4b:89:79: d9:22:2d:f9:1e:11:ad:ac:ce:9d:62:b5:a5:2b:bf:ea:22:a7: e0:45:0f:12:32:af:12:4d:48:25:e3:2e:56:b9:bf:4c:64:d6: 2a:62:00:6f:11:2b:4a:80:65:b8:e5:8b:d3:26:75:42:b2:a3: 55:4a:21:69:1f:fb:4e:e7:2f:90:07:94:32:7e:ab:1f:90:f6: 24:87:fd:4c:18:6a:32:bb:2b:48:28:00:9b:cb:a7:cb:1c:0e: 38:01:79:57:7d:4f:93:61:ae:26:31:0e:a3:cf:db:c7:9b:e5: 8d:fa:d6:84:6b:16:13:82:1c:9f:f0:ca:9b:10:54:2f:a8:0c: cf:90:54:0b:a3:44:4d:d4:9b:bb:fa:ce:e2:c6:d0:91:67:df: cc:9f:43:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+i5ZLmryf9AqToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM2ZDZkYTQtZjU5MC00ZGE4LWEyMmYtNTU1MTFkYTk4 ZWU1MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk YjBkYzAyMjctM2ZmMC00Zjk0LTkzMTMtODc5NGQ0MzdiZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRG12RX2cyX4yCiqlPT6aBJI14e6wJZ1roHj vUS0C8xRAsNZL0YMNsrpN2Nrax2UL8pX3xF3RhpCVFi+zxBqb0+2Hc6NM4hMzd9a 7wky45dVigPqGW9nbpG4yhbTUhONC2xFdXpwu8mIwpH9ElLSIyavt3YD2VMBf8uA 8Y5Povbvp3MlHImdkHoCTD+BtpSkpZCSJKt/uFjhapSsE57JCRMvb2CNTEtFIa08 vACUdvnrwFY/Oo31SvsYfXwVld4Ub59vh/T9h/MAfAO1nQkhSak/lHkuJLjG7+Du k9D2HsrTrWfqjr0kHjMkKQxneu0JXXu73ml31Y4ydkKtrrmklwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrrz2/0HSgCit3gZkIO7igpHEjGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZk NmRhNC1mNTkwLTRkYTgtYTIyZi01NTUxMWRhOThlZTUvZWFkZjYwYzctM2YzZi0z MjUyLWJhYjAtMTAzNGVjOTQzNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDM2ZDZkYTQtZjU5MC00ZGE4LWEy MmYtNTU1MTFkYTk4ZWU1LzAzNmQ2ZGE0LWY1OTAtNGRhOC1hMjJmLTU1NTExZGE5 OGVlNS5jcmwwHwYDVR0jBBgwFoAUacGfYD2zXxUuwYJa0qMXtxIkO2swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMzZkNmRhNC1mNTkwLTRkYTgtYTIyZi01NTUx MWRhOThlZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWKwzDFNIirvcxv0AGyyREbHdhngnuE5YSaGAsM1LEPwIs4CB3CAsTu UXEYRpOBSA/HE/+hc8Na7GATa0E4CZqgruo2E6FeDYNPeRyUGvEBOLVo8pXKOJ8L SRhMFruHjjkZ2owAxh/ThEuJedkiLfkeEa2szp1itaUrv+oip+BFDxIyrxJNSCXj Lla5v0xk1ipiAG8RK0qAZbjli9MmdUKyo1VKIWkf+07nL5AHlDJ+qx+Q9iSH/UwY ajK7K0goAJvLp8scDjgBeVd9T5NhriYxDqPP28eb5Y361oRrFhOCHJ/wypsQVC+o DM+QVAujRE3Um7v6zuLG0JFn38yfQz8= -----END CERTIFICATE-----Generated at Thu Mar 26 22:13:50 2026 by rpki-client