$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa File: b901d0b0-12e7-3431-9cd8-0764317e0506.roa (raw, json) Hash identifier: b3cawt7T3nwo4/grcFnDJiEGGQWsxRBRs9q91Z2qWAA= Subject key identifier: 7B:30:85:C7:B0:23:C6:81:33:B4:84:54:58:CC:A3:91:58:05:2F:2C Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D1B1A14DCCF31D0391F5B6D00 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 11090 IP address blocks: 72.35.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:14:dc:cf:31:d0:39:1f:5b:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=4aa1c1da-7359-4a47-adf7-af85204645ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:11:93:f0:9d:74:74:7e:e3:1c:53:60:ec:ca: 28:bf:0f:2c:d8:f8:d0:22:73:de:b3:91:4a:60:bc: b1:90:ee:e9:5c:08:c3:5e:3f:c3:68:84:4c:66:27: 87:3c:1a:d7:d9:33:17:0e:4d:c0:53:f4:cf:74:bc: b7:79:0f:f0:d5:76:f7:f6:a3:de:60:ba:b7:f8:53: 64:66:59:a2:43:7c:75:78:ba:80:3e:b0:63:7b:5c: 68:14:bc:d6:84:db:22:d6:68:73:94:b4:bb:ab:5d: c9:dc:ef:6d:e6:d0:88:e6:8e:62:e6:23:43:b0:20: df:50:72:b6:54:99:87:37:d8:37:d5:5d:95:dc:83: 26:b4:af:47:aa:1e:2b:ac:da:36:e5:ae:6d:ab:fe: 9f:47:e3:4d:b1:d8:12:b4:f2:16:0e:42:6d:00:02: 1b:a3:49:ba:0d:84:9d:c3:d0:be:66:7c:c1:8a:98: 26:5c:22:ee:a2:51:bf:06:2f:53:33:66:58:6b:62: d9:2f:ec:57:f5:2f:a4:f9:5c:f4:b0:f6:10:3d:b5: f0:50:6e:65:3b:c8:de:76:f8:d9:db:e7:49:17:d3: fd:34:b9:ad:93:81:89:f9:2f:73:67:15:ef:1a:e6: 85:2c:0f:e6:ae:dd:40:1f:83:dc:4e:6c:56:62:35: 4b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:30:85:C7:B0:23:C6:81:33:B4:84:54:58:CC:A3:91:58:05:2F:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ed:62:b7:8c:93:32:fe:67:14:87:ca:41:88:b6:93:d0:62: b1:da:82:5a:a5:6f:d3:a1:76:c8:12:9e:7f:75:64:f8:b9:5a: 95:21:cb:06:64:7e:55:00:71:97:19:55:61:4e:76:78:bb:3a: ec:56:5b:87:a7:e9:c3:4d:39:59:82:5d:b9:a1:b0:34:e9:37: 82:e8:27:e8:49:5c:96:9d:53:2e:39:84:93:65:69:80:fb:b4: 6b:41:70:df:9b:39:d0:4d:46:29:91:b9:78:a5:db:43:4b:95: e5:fe:bc:dd:6a:4f:06:c6:2a:a6:07:10:76:05:38:c3:9d:a9: 82:c4:2c:45:b7:13:0c:ec:6e:db:88:ea:12:6f:1f:af:5c:93: 06:ca:12:a8:cd:1c:71:97:a7:07:c0:e1:60:bd:22:e2:4f:76: bb:5b:7d:f4:18:54:c6:8c:7b:0f:88:03:fc:7a:b9:bf:83:93: d1:ec:08:ff:33:f5:45:17:94:e4:af:0d:a1:41:ad:6c:ca:82: e8:c3:e3:c4:b9:94:78:8d:2f:d9:94:4e:75:7e:ba:bc:53:e9: 69:e7:f2:c0:b1:a9:70:9a:65:15:3a:2b:7d:f4:18:3c:43:0c: e9:a4:c0:17:0c:82:90:34:4b:1f:ae:81:c4:bf:1c:3b:16:f0: ad:2e:1c:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhTczzHQOR9bbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NGFhMWMxZGEtNzM1OS00YTQ3LWFkZjctYWY4NTIwNDY0NWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hGT8J10dH7jHFNg7Moovw8s2PjQInPes5FK YLyxkO7pXAjDXj/DaIRMZieHPBrX2TMXDk3AU/TPdLy3eQ/w1Xb39qPeYLq3+FNk ZlmiQ3x1eLqAPrBje1xoFLzWhNsi1mhzlLS7q13J3O9t5tCI5o5i5iNDsCDfUHK2 VJmHN9g31V2V3IMmtK9Hqh4rrNo25a5tq/6fR+NNsdgStPIWDkJtAAIbo0m6DYSd w9C+ZnzBipgmXCLuolG/Bi9TM2ZYa2LZL+xX9S+k+Vz0sPYQPbXwUG5lO8jedvjZ 2+dJF9P9NLmtk4GJ+S9zZxXvGuaFLA/mrt1AH4PcTmxWYjVLrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHswhcewI8aBM7SEVFjMo5FYBS8sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYjkwMWQwYjAtMTJlNy0z NDMxLTljZDgtMDc2NDMxN2UwNTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIztYreMkzL+ZxSHykGItpPQYrHaglqlb9OhdsgSnn91ZPi5WpUhywZk flUAcZcZVWFOdni7OuxWW4en6cNNOVmCXbmhsDTpN4LoJ+hJXJadUy45hJNlaYD7 tGtBcN+bOdBNRimRuXil20NLleX+vN1qTwbGKqYHEHYFOMOdqYLELEW3EwzsbtuI 6hJvH69ckwbKEqjNHHGXpwfA4WC9IuJPdrtbffQYVMaMew+IA/x6ub+Dk9HsCP8z 9UUXlOSvDaFBrWzKgujD48S5lHiNL9mUTnV+urxT6Wnn8sCxqXCaZRU6K330GDxD DOmkwBcMgpA0Sx+ugcS/HDsW8K0uHB0= -----END CERTIFICATE-----Generated at Fri Mar 13 10:56:33 2026 by rpki-client