$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/007f1617-e313-3e2f-97b8-0dcc7c385c83.roa File: 007f1617-e313-3e2f-97b8-0dcc7c385c83.roa (raw, json) Hash identifier: fP7l7PJwoQ/eJvgjt8yhFTnASclJwzJ5LB33aPUvngI= Subject key identifier: F3:07:FD:D7:A0:C8:F7:C3:F5:41:58:7E:99:C1:51:49:D1:E8:FB:85 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F49763F40CC74BD1FD8CC77C0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/007f1617-e313-3e2f-97b8-0dcc7c385c83.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11090 IP address blocks: 72.35.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:3f:40:cc:74:bd:1f:d8:cc:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2a66424c-155e-4c29-b6fa-c8c8275092d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:18:9a:14:37:e9:d7:3b:44:de:2e:09:2c: d4:32:89:92:2d:64:8f:3d:2b:25:63:db:c6:9e:f3: 58:7d:bc:14:06:8b:c3:f8:17:6e:e2:cf:a1:15:39: f0:99:da:af:66:0e:a7:f1:11:86:72:59:c2:cf:58: 20:4f:ca:e7:6a:ae:6a:7b:12:73:8d:1e:24:fe:40: fe:01:20:0f:77:f9:07:ed:c1:34:5f:98:38:e4:b2: 75:12:3d:68:1e:da:f4:8e:76:88:33:58:6b:8c:a4: cd:d6:4b:eb:f8:ef:d0:9d:2d:fa:ff:1b:6d:fe:48: 05:63:82:6d:03:2f:20:7b:78:b0:f0:52:bc:f6:07: a0:96:cf:91:d0:ca:8d:0e:6a:9f:8c:83:9d:5c:2c: fa:ad:0e:6e:fd:ee:f8:b7:4b:b7:d5:d9:75:e2:2e: e3:54:15:fd:dc:95:35:31:fd:0e:67:c8:20:24:49: 83:e9:df:88:76:ae:da:0b:43:75:cb:13:ef:dc:2c: 8b:0b:68:80:08:9a:42:b5:15:c3:85:c7:10:5a:1f: 3f:f7:38:20:de:b5:6a:c6:9c:ab:43:b0:91:e1:72: 4e:be:9e:5a:98:c1:d5:c8:1c:22:a7:46:98:b2:13: 61:8b:42:50:35:c9:42:e8:29:46:84:ec:2b:2d:66: d5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:07:FD:D7:A0:C8:F7:C3:F5:41:58:7E:99:C1:51:49:D1:E8:FB:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/007f1617-e313-3e2f-97b8-0dcc7c385c83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:f2:42:ac:81:a0:ab:10:70:65:32:eb:ed:c5:76:18:db:41: 18:39:5b:b7:9f:cd:5f:88:04:dd:15:df:ee:cd:90:33:0b:52: 4e:30:70:8d:de:13:db:0a:f2:ab:78:5e:c9:7a:86:19:1a:b2: e8:c5:38:2e:fa:bd:be:31:f8:7c:80:14:5e:41:a6:52:c2:f9: 40:91:52:7d:0d:3f:37:22:25:35:dc:8d:84:9d:25:9e:30:36: ab:da:a4:ab:ef:3f:09:f1:74:2e:b7:dc:2c:1c:a1:75:7c:21: 6c:0c:16:39:b5:ba:80:96:ca:2e:6b:27:c2:66:cc:07:62:9a: 5d:6f:69:34:48:7a:e1:6d:c4:0a:12:af:01:f9:50:fe:dd:f9: 38:55:41:cd:25:09:f1:50:1d:0e:67:df:be:a4:ce:60:2e:80: ca:0e:81:ce:d5:7a:24:8f:3a:49:d4:06:69:ae:f3:cb:51:a2: ad:39:03:1a:3e:e4:5c:6a:c3:9e:3c:f2:54:85:76:8f:68:8a: e4:cb:78:d8:28:ac:d9:f7:83:ce:90:88:0d:b6:10:73:23:e1: 1c:27:2b:79:4f:80:ba:14:21:35:68:40:19:70:3a:07:e0:ca: 23:25:57:4b:28:f8:cf:ce:14:8d:d1:23:49:83:e8:28:f6:0b: e3:ae:70:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdj9AzHS9H9jMd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmE2NjQyNGMtMTU1ZS00YzI5LWI2ZmEtYzhjODI3NTA5MmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlgYmhQ36dc7RN4uCSzUMomSLWSPPSslY9vG nvNYfbwUBovD+Bdu4s+hFTnwmdqvZg6n8RGGclnCz1ggT8rnaq5qexJzjR4k/kD+ ASAPd/kH7cE0X5g45LJ1Ej1oHtr0jnaIM1hrjKTN1kvr+O/QnS36/xtt/kgFY4Jt Ay8ge3iw8FK89gegls+R0MqNDmqfjIOdXCz6rQ5u/e74t0u31dl14i7jVBX93JU1 Mf0OZ8ggJEmD6d+Idq7aC0N1yxPv3CyLC2iACJpCtRXDhccQWh8/9zgg3rVqxpyr Q7CR4XJOvp5amMHVyBwip0aYshNhi0JQNclC6ClGhOwrLWbV4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMH/degyPfD9UFYfpnBUUnR6PuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMDA3ZjE2MTctZTMxMy0z ZTJmLTk3YjgtMGRjYzdjMzg1YzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXyQqyBoKsQcGUy6+3FdhjbQRg5W7efzV+IBN0V3+7NkDMLUk4wcI3e E9sK8qt4Xsl6hhkasujFOC76vb4x+HyAFF5BplLC+UCRUn0NPzciJTXcjYSdJZ4w NqvapKvvPwnxdC633CwcoXV8IWwMFjm1uoCWyi5rJ8JmzAdiml1vaTRIeuFtxAoS rwH5UP7d+ThVQc0lCfFQHQ5n376kzmAugMoOgc7VeiSPOknUBmmu88tRoq05Axo+ 5Fxqw5488lSFdo9oiuTLeNgorNn3g86QiA22EHMj4RwnK3lPgLoUITVoQBlwOgfg yiMlV0so+M/OFI3RI0mD6Cj2C+OucEs= -----END CERTIFICATE-----Generated at Sun Oct 11 18:58:49 2026 by rpki-client