$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa File: 66a219b1-9a85-3816-b306-827ed97596c0.roa (raw, json) Hash identifier: isQWPHaZcfwO7ut54nunHQG9dIcGqIgiBDxpMWtJFQY= Subject key identifier: 6B:C5:E9:EA:E9:3B:B6:02:18:6F:38:08:A9:B2:8C:F3:A2:B0:C5:81 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584EA798E36337A400D097C8B7C0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 11090 IP address blocks: 72.35.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:e3:63:37:a4:00:d0:97:c8:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d305558a-ab46-4dca-bf00-c1d20a557f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:fd:d0:44:b8:6e:ff:21:08:60:d7:1a:0f: 7a:c7:c6:74:15:78:f0:83:eb:f4:13:23:77:23:d3: 54:5d:4e:54:6f:93:ce:93:50:18:67:74:7c:7c:61: ad:54:76:3e:6b:9d:bc:4b:e7:30:9f:01:cd:4d:56: 78:24:f2:f7:9f:04:2b:f0:d7:83:ba:d9:0a:e5:de: 0c:4b:2d:01:a4:4d:c0:ed:eb:d3:25:4a:24:bb:df: 7b:31:95:c0:ea:11:4c:23:f6:33:ae:da:41:90:e8: 78:2e:f0:24:5b:68:1b:3d:1b:67:a2:f7:37:51:c7: 02:3e:a9:52:0b:40:7f:c6:bb:77:b5:a3:1a:81:90: 98:09:62:64:a6:fc:87:05:10:f7:9d:fc:dc:00:13: a5:1e:e1:29:0d:fc:41:a6:ed:a2:48:06:c4:12:f9: 1d:37:73:a2:33:dc:69:6a:27:74:e9:69:4a:6a:ea: a8:88:5c:5e:c6:fa:a2:ec:9c:64:35:b3:a5:75:3e: c0:c7:0a:cd:fb:25:ea:c3:1a:7b:dc:90:90:d1:1e: 78:35:84:56:7d:bd:aa:fb:09:57:33:c3:1e:e9:09: 46:b1:1b:33:0e:a2:ea:0e:99:30:12:1e:62:ac:bc: fc:bc:11:77:21:03:ed:93:b4:c8:aa:95:11:bc:fe: 60:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C5:E9:EA:E9:3B:B6:02:18:6F:38:08:A9:B2:8C:F3:A2:B0:C5:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:21:b1:31:61:34:02:70:b8:80:49:34:85:3d:ad:a2:e7:90: 17:d9:5e:60:f8:26:1d:b3:f6:bb:0f:2c:16:1b:9d:2b:fa:20: 0b:83:e7:07:6d:f2:b0:b4:62:1a:b1:20:f7:4f:54:b1:c8:05: 1b:b8:52:8e:90:01:93:6f:b4:0b:bf:86:99:7d:c6:8f:1b:e9: 66:29:71:ff:ce:16:ef:18:d1:7c:27:83:2e:a2:d4:df:10:6e: 2d:f9:5d:f1:db:02:a5:df:7f:de:2d:3a:f0:c9:26:0f:19:4e: 58:a5:76:a9:09:3a:1a:82:34:5f:9c:74:15:ca:46:75:73:68: f9:b8:6c:1c:f4:e9:d2:fc:2d:16:bc:91:b5:6b:52:63:26:87: 84:94:a8:99:8a:9b:13:f9:a4:8c:23:b2:26:b6:29:6f:80:8f: a9:5e:75:e0:62:5f:49:a6:30:0f:b1:a2:19:ab:62:fd:42:53: 58:59:6e:3b:3a:7b:f7:d9:7f:9b:aa:c0:14:30:7d:31:a6:4a: 39:d3:57:c8:a4:d7:d9:24:8d:6b:30:c8:38:4c:6d:cb:a0:8b: 32:01:73:82:64:73:77:d9:0d:eb:b6:ac:ea:a7:0e:85:06:05: da:42:56:25:6d:18:54:6c:df:38:f5:a7:39:ac:89:55:77:02: 8d:81:de:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmONjN6QA0JfIt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDMwNTU1OGEtYWI0Ni00ZGNhLWJmMDAtYzFkMjBhNTU3ZjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsX90ES4bv8hCGDXGg96x8Z0FXjwg+v0EyN3 I9NUXU5Ub5POk1AYZ3R8fGGtVHY+a528S+cwnwHNTVZ4JPL3nwQr8NeDutkK5d4M Sy0BpE3A7evTJUoku997MZXA6hFMI/YzrtpBkOh4LvAkW2gbPRtnovc3UccCPqlS C0B/xrt3taMagZCYCWJkpvyHBRD3nfzcABOlHuEpDfxBpu2iSAbEEvkdN3OiM9xp aid06WlKauqoiFxexvqi7JxkNbOldT7AxwrN+yXqwxp73JCQ0R54NYRWfb2q+wlX M8Me6QlGsRszDqLqDpkwEh5irLz8vBF3IQPtk7TIqpURvP5gfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvF6erpO7YCGG84CKmyjPOisMWBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNjZhMjE5YjEtOWE4NS0z ODE2LWIzMDYtODI3ZWQ5NzU5NmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESCNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwhsTFhNAJwuIBJNIU9raLnkBfZXmD4Jh2z9rsPLBYbnSv6IAuD5wdt 8rC0YhqxIPdPVLHIBRu4Uo6QAZNvtAu/hpl9xo8b6WYpcf/OFu8Y0Xwngy6i1N8Q bi35XfHbAqXff94tOvDJJg8ZTlildqkJOhqCNF+cdBXKRnVzaPm4bBz06dL8LRa8 kbVrUmMmh4SUqJmKmxP5pIwjsia2KW+Aj6ledeBiX0mmMA+xohmrYv1CU1hZbjs6 e/fZf5uqwBQwfTGmSjnTV8ik19kkjWswyDhMbcugizIBc4Jkc3fZDeu2rOqnDoUG BdpCViVtGFRs3zj1pzmsiVV3Ao2B3nA= -----END CERTIFICATE-----Generated at Thu Aug 13 21:58:02 2026 by rpki-client