$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa File: 666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa (raw, json) Hash identifier: ENpJb+/kCBZl3cW6HeoGFUSwbWcesUgi15MXb1O+yyc= Subject key identifier: D9:F2:AA:E9:CB:0E:8E:58:92:29:CC:D5:22:48:C2:F0:D5:8A:ED:FE Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D1B1A14B7F18D92E88B264680 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 11090 IP address blocks: 72.35.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:14:b7:f1:8d:92:e8:8b:26:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=bb549047-a8ae-49e5-aa15-d28640edc152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7a:f2:15:cc:4a:d6:d8:c0:e3:1b:b2:4b:5c: 24:c1:ee:b6:b6:9c:eb:ca:7a:33:73:87:17:00:b0: 55:49:05:92:1a:29:c9:e3:3a:93:59:07:a1:16:76: bf:ef:8d:8f:0c:5f:4a:04:46:20:62:b5:bc:b4:2f: 8a:a9:1d:d1:eb:ca:1f:bd:c3:fd:02:41:65:fb:85: 8b:7d:53:56:22:7e:4d:8c:9f:1c:35:ee:ac:6d:1d: a1:62:fb:ea:66:33:a4:d2:40:23:92:e9:da:0c:80: bd:07:23:59:57:24:ef:5a:30:02:be:76:43:3b:8e: 92:01:d6:fb:e4:33:34:ca:f0:22:00:ce:91:58:b7: b7:a9:d9:77:91:0a:14:91:55:6a:08:86:86:a8:b3: 55:b0:4a:3f:fc:c3:97:4c:c7:ca:ee:94:d8:fd:e9: 02:02:1c:84:c7:24:0a:b5:bd:a4:c2:b2:d8:7e:f4: ad:ec:57:03:b0:63:f6:c4:08:be:07:8b:f6:7b:0e: 1d:f1:df:bd:a3:cd:3b:c6:23:ba:cc:77:11:47:55: 1d:42:b2:0f:e2:6f:2b:fe:04:73:c2:52:e7:76:a4: 27:74:e6:8b:87:a0:08:08:8b:50:9f:02:6d:c2:ed: cf:88:b2:93:9b:43:cc:e5:1f:dd:a0:2b:4e:75:0b: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F2:AA:E9:CB:0E:8E:58:92:29:CC:D5:22:48:C2:F0:D5:8A:ED:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:92:0b:6b:2b:cf:5f:6b:d5:b9:87:09:56:b8:6b:a9:3c:dc: 40:1d:9e:d7:98:32:0f:a1:14:de:6f:73:a4:b6:98:91:c8:84: 85:91:9d:a1:36:47:f4:32:23:a4:47:a6:a3:08:79:55:5e:1a: 1c:08:bf:bb:12:68:d5:05:db:a3:94:3b:0b:20:a3:cf:44:e1: 36:3a:1a:70:99:bd:4c:f6:88:93:42:30:25:df:00:b5:da:8c: f5:15:b8:d1:9c:6f:ed:65:85:71:b7:1a:8f:83:b1:9c:c5:63: 81:b4:71:3c:88:c2:5d:e4:70:02:c3:5c:f1:6c:88:ed:05:e8: 90:3b:5a:fe:46:d2:64:99:8e:cd:bc:c7:3e:8e:f7:ea:82:5b: 8c:a1:ef:7a:69:86:0f:0d:1e:5d:62:f0:a4:48:0e:72:20:23: a2:2e:a0:24:ba:aa:52:72:fb:8c:ba:00:41:b6:4e:0d:e0:12: fd:7c:3d:83:93:7d:fb:86:07:ad:4d:cd:aa:b3:16:22:dd:83: 85:9c:3f:72:e3:7b:02:82:8e:b8:91:64:3e:66:19:e4:f5:e3: 68:6e:bf:79:c7:f8:bd:31:8b:11:34:11:c4:a0:44:28:cd:0e: c5:c2:14:87:06:a0:9d:56:28:8a:c9:71:5c:20:ce:d6:b0:e3: c4:88:f0:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhS38Y2S6IsmRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YmI1NDkwNDctYThhZS00OWU1LWFhMTUtZDI4NjQwZWRjMTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3ryFcxK1tjA4xuyS1wkwe62tpzrynozc4cX ALBVSQWSGinJ4zqTWQehFna/742PDF9KBEYgYrW8tC+KqR3R68ofvcP9AkFl+4WL fVNWIn5NjJ8cNe6sbR2hYvvqZjOk0kAjkunaDIC9ByNZVyTvWjACvnZDO46SAdb7 5DM0yvAiAM6RWLe3qdl3kQoUkVVqCIaGqLNVsEo//MOXTMfK7pTY/ekCAhyExyQK tb2kwrLYfvSt7FcDsGP2xAi+B4v2ew4d8d+9o807xiO6zHcRR1UdQrIP4m8r/gRz wlLndqQndOaLh6AICItQnwJtwu3PiLKTm0PM5R/doCtOdQsekwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnyqunLDo5YkinM1SJIwvDViu3+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNjY2ZjVkZDctNWE2ZC0z YWM0LTk1NzEtYjdlMDZiYzlkMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeSC2srz19r1bmHCVa4a6k83EAdnteYMg+hFN5vc6S2mJHIhIWRnaE2 R/QyI6RHpqMIeVVeGhwIv7sSaNUF26OUOwsgo89E4TY6GnCZvUz2iJNCMCXfALXa jPUVuNGcb+1lhXG3Go+DsZzFY4G0cTyIwl3kcALDXPFsiO0F6JA7Wv5G0mSZjs28 xz6O9+qCW4yh73pphg8NHl1i8KRIDnIgI6IuoCS6qlJy+4y6AEG2Tg3gEv18PYOT ffuGB61NzaqzFiLdg4WcP3LjewKCjriRZD5mGeT142huv3nH+L0xixE0EcSgRCjN DsXCFIcGoJ1WKIrJcVwgztaw48SI8Jo= -----END CERTIFICATE-----Generated at Fri Mar 13 10:55:43 2026 by rpki-client