$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa File: 7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa (raw, json) Hash identifier: VtgibXnicqVNiOvwj3xXqmUB0Nz7Q1j17iyJmhjNu/A= Subject key identifier: 71:BD:73:D7:E2:9B:A2:C1:AA:61:B4:A3:81:E1:59:F8:3A:16:FC:AC Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D1B1A15233E7EBD78A6A40CC0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 11090 IP address blocks: 72.35.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:15:23:3e:7e:bd:78:a6:a4:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=4a898a7c-3ba9-4c2c-b674-699ccdfe86dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:15:dc:a0:b0:ad:2d:36:91:64:52:6c:c1:75: 85:31:be:e4:37:e4:44:77:8c:05:47:53:66:9e:40: 5d:d9:ec:3b:7d:05:42:72:49:c4:02:db:aa:b7:d8: e9:e3:77:19:4a:dc:94:00:58:3a:bf:3e:e2:f0:6c: 51:53:93:50:5b:38:9c:14:f8:19:c3:8a:87:bb:7a: 1a:de:49:00:ac:f3:4d:a7:95:82:7c:e6:8a:a2:b9: 68:e2:3b:38:0e:42:35:b2:b5:1f:4e:0b:80:72:56: dd:a1:13:50:95:16:90:5b:af:f0:1b:3e:86:62:9d: d3:a5:61:97:b2:fa:de:48:86:42:60:c7:0b:ef:ce: 64:62:8e:2a:cb:49:fd:70:43:d8:75:83:ad:34:ee: 7a:21:46:cc:9d:32:c4:9e:3f:6d:50:7c:f2:6b:a6: 59:21:ac:0b:1d:c6:88:0e:5e:06:7f:97:8d:96:39: 29:e5:e6:bd:bb:60:2d:95:1a:c3:0b:75:53:cc:0d: cd:11:e5:53:ad:a5:39:d8:21:74:59:3d:e2:c3:62: 86:b2:7b:ff:55:2a:02:4c:d0:e0:49:bd:ba:c9:a1: 62:a4:36:50:e7:07:bc:d4:0d:52:16:65:b1:9d:84: 5d:a5:a0:c3:23:34:c4:d9:1a:75:e7:2e:3b:7a:80: 1a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BD:73:D7:E2:9B:A2:C1:AA:61:B4:A3:81:E1:59:F8:3A:16:FC:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c9:a2:aa:ee:90:9f:72:a3:94:47:2f:02:9d:76:68:28:b8: 54:7f:c5:a7:65:dd:93:b9:d2:82:fe:0d:2f:2c:cc:19:ab:52: 75:c7:c3:dd:3c:a5:0f:e8:f3:b9:6f:87:b4:0a:3d:2c:89:98: fe:4c:79:b0:2c:c1:09:e4:e2:12:78:b2:6d:33:b8:14:3c:a7: 55:84:da:03:4d:85:76:89:64:e1:57:7e:03:a3:c5:18:a6:b3: 3b:f5:c3:c1:72:4a:9f:5d:48:47:1d:26:6b:a3:41:c9:e4:a3: 3e:02:04:5f:63:47:ee:d6:d8:73:88:03:f7:0b:37:a4:6f:18: b3:87:f8:2a:17:fe:c8:74:f8:a0:0c:cc:5e:4d:13:7c:70:8b: b1:c4:a2:27:d0:c4:5e:27:42:df:23:d0:5d:73:9f:89:a4:27: 7f:35:86:65:56:13:48:e7:09:e7:67:ea:b2:34:52:f7:e8:0b: 45:73:ba:18:69:66:b6:6d:d2:e8:89:e8:3b:b7:63:0c:cc:ed: 5b:56:ec:af:e9:3c:37:18:63:74:aa:84:1c:52:66:64:95:36: 03:34:20:7d:7e:dc:a0:69:51:4d:8a:35:12:4c:d3:a0:f5:34: b4:bf:f8:78:56:35:1c:a0:23:e7:de:ca:28:ab:0b:65:e2:ae: 78:f5:a0:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhUjPn69eKakDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NGE4OThhN2MtM2JhOS00YzJjLWI2NzQtNjk5Y2NkZmU4NmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBXcoLCtLTaRZFJswXWFMb7kN+REd4wFR1Nm nkBd2ew7fQVCcknEAtuqt9jp43cZStyUAFg6vz7i8GxRU5NQWzicFPgZw4qHu3oa 3kkArPNNp5WCfOaKorlo4js4DkI1srUfTguAclbdoRNQlRaQW6/wGz6GYp3TpWGX svreSIZCYMcL785kYo4qy0n9cEPYdYOtNO56IUbMnTLEnj9tUHzya6ZZIawLHcaI Dl4Gf5eNljkp5ea9u2AtlRrDC3VTzA3NEeVTraU52CF0WT3iw2KGsnv/VSoCTNDg Sb26yaFipDZQ5we81A1SFmWxnYRdpaDDIzTE2Rp15y47eoAazwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHG9c9fim6LBqmG0o4HhWfg6FvysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvN2UyN2QwM2EtYWFmMC0z MjViLWIxNTAtMzAwYzFhMDFiN2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSCNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzJoqrukJ9yo5RHLwKddmgouFR/xadl3ZO50oL+DS8szBmrUnXHw908 pQ/o87lvh7QKPSyJmP5MebAswQnk4hJ4sm0zuBQ8p1WE2gNNhXaJZOFXfgOjxRim szv1w8FySp9dSEcdJmujQcnkoz4CBF9jR+7W2HOIA/cLN6RvGLOH+CoX/sh0+KAM zF5NE3xwi7HEoifQxF4nQt8j0F1zn4mkJ381hmVWE0jnCedn6rI0UvfoC0Vzuhhp ZrZt0uiJ6Du3YwzM7VtW7K/pPDcYY3SqhBxSZmSVNgM0IH1+3KBpUU2KNRJM06D1 NLS/+HhWNRygI+feyiirC2Xirnj1oMY= -----END CERTIFICATE-----Generated at Fri Mar 13 10:53:49 2026 by rpki-client