$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9859d862-4d98-35a1-89c4-8fbd5124fac9.roa File: 9859d862-4d98-35a1-89c4-8fbd5124fac9.roa (raw, json) Hash identifier: PNy2dnkjJerqzmqZpKYcnki2CrE73qjKZwDMqtm+qjE= Subject key identifier: BC:7D:6D:AA:68:06:EF:9F:27:A4:B8:F4:C5:D0:0F:CE:EE:8B:94:9C Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D1B1A14F0DF4431B70F875780 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9859d862-4d98-35a1-89c4-8fbd5124fac9.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 11090 IP address blocks: 72.35.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:14:f0:df:44:31:b7:0f:87:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=b9291bd0-63a4-4df0-b420-5ba732cadb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:34:fb:ac:c1:57:1c:f6:29:07:d5:df:b7:57: d6:df:30:97:83:50:33:04:25:bd:b5:55:04:83:c6: 36:7a:e1:a0:e3:65:d4:eb:cf:3c:0f:fb:2e:18:7c: c8:63:5e:e7:0a:ea:dd:d8:23:07:6b:cf:63:30:dc: 99:7a:b2:36:54:a2:58:20:7e:a0:04:ea:71:79:2e: 2e:07:9d:be:ec:3e:95:0d:69:9e:68:70:73:e7:53: fb:11:30:cf:1d:78:cc:8a:ff:1c:49:be:e1:1f:59: ac:75:3f:a8:09:2b:91:47:ac:69:35:eb:b7:c7:da: 56:71:0d:71:0b:0f:cb:12:3a:97:e1:f9:6d:93:fb: e0:c0:7d:cb:bb:77:68:8e:fc:be:08:66:84:f9:c4: a3:bc:06:3a:0e:c0:94:c2:a0:06:25:4c:b2:2c:e5: 6a:4e:a1:9d:0b:db:f2:49:cd:ef:8c:d7:b3:fc:c2: ed:e0:b1:be:27:96:38:ec:5f:89:14:11:31:af:f5: c1:c7:b0:27:d9:94:71:25:18:8b:21:0e:f9:c7:2a: af:9a:35:32:a5:e0:06:4e:2c:be:d3:65:38:0c:16: 16:d5:2e:5d:b6:e6:02:ea:7d:ca:48:f4:34:1e:e6: 7c:22:57:11:4a:6c:23:72:53:33:cf:89:8b:c5:c9: 82:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7D:6D:AA:68:06:EF:9F:27:A4:B8:F4:C5:D0:0F:CE:EE:8B:94:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9859d862-4d98-35a1-89c4-8fbd5124fac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:02:9f:e5:38:53:10:06:7e:a5:af:33:89:07:66:2a:f3:55: 72:49:03:cd:b4:34:28:d0:55:74:2c:a0:15:1d:fe:72:9b:a8: 90:45:e2:2a:ff:05:a4:8c:ee:1a:06:17:e3:0e:7d:d7:7a:33: 1b:1f:46:2b:59:97:d9:61:85:df:1b:14:51:80:b3:d7:44:eb: b9:0b:8a:f0:b6:9d:51:5d:eb:1e:38:7c:55:c6:89:a8:b1:48: 26:95:2b:90:64:08:41:19:b2:56:93:59:28:2f:60:68:21:d1: 5a:b9:cd:91:91:1d:de:0d:3e:97:b3:90:26:5e:18:8a:cc:ef: 7b:e7:e4:7c:67:74:3a:72:cc:24:9e:f7:d9:0d:7f:e9:ff:3a: 72:fd:48:7a:5e:6a:5a:2b:00:cc:33:76:c5:39:4e:eb:f8:e2: 62:08:30:31:c1:9d:22:cb:f0:e8:20:b8:db:3c:fd:eb:2e:d5: ca:a8:c4:80:5a:9d:6f:aa:c4:65:ec:21:5f:a4:5c:47:bb:58: d9:79:52:05:be:30:fc:83:c2:0f:d1:30:70:41:9c:1d:0e:ab: d5:3a:61:17:36:a4:84:68:94:13:87:34:6f:38:1c:63:7d:ad: c5:ef:2e:5d:59:29:e6:a1:87:04:81:f1:20:8e:1c:89:47:90: 49:bb:4e:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhTw30Qxtw+HV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YjkyOTFiZDAtNjNhNC00ZGYwLWI0MjAtNWJhNzMyY2FkYjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TT7rMFXHPYpB9Xft1fW3zCXg1AzBCW9tVUE g8Y2euGg42XU6888D/suGHzIY17nCurd2CMHa89jMNyZerI2VKJYIH6gBOpxeS4u B52+7D6VDWmeaHBz51P7ETDPHXjMiv8cSb7hH1msdT+oCSuRR6xpNeu3x9pWcQ1x Cw/LEjqX4fltk/vgwH3Lu3dojvy+CGaE+cSjvAY6DsCUwqAGJUyyLOVqTqGdC9vy Sc3vjNez/MLt4LG+J5Y47F+JFBExr/XBx7An2ZRxJRiLIQ75xyqvmjUypeAGTiy+ 02U4DBYW1S5dtuYC6n3KSPQ0HuZ8IlcRSmwjclMzz4mLxcmCbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLx9bapoBu+fJ6S49MXQD87ui5ScMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvOTg1OWQ4NjItNGQ5OC0z NWExLTg5YzQtOGZiZDUxMjRmYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHACn+U4UxAGfqWvM4kHZirzVXJJA820NCjQVXQsoBUd/nKbqJBF4ir/ BaSM7hoGF+MOfdd6MxsfRitZl9lhhd8bFFGAs9dE67kLivC2nVFd6x44fFXGiaix SCaVK5BkCEEZslaTWSgvYGgh0Vq5zZGRHd4NPpezkCZeGIrM73vn5HxndDpyzCSe 99kNf+n/OnL9SHpealorAMwzdsU5Tuv44mIIMDHBnSLL8OgguNs8/esu1cqoxIBa nW+qxGXsIV+kXEe7WNl5UgW+MPyDwg/RMHBBnB0Oq9U6YRc2pIRolBOHNG84HGN9 rcXvLl1ZKeahhwSB8SCOHIlHkEm7TkQ= -----END CERTIFICATE-----Generated at Fri Mar 13 10:56:37 2026 by rpki-client