$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa File: b901d0b0-12e7-3431-9cd8-0764317e0506.roa (raw, json) Hash identifier: 9HlW2vG2Wh3Dwxuzv35Y/72Vz7j9DueWL32jFwEm3/Y= Subject key identifier: FD:09:27:97:74:89:EF:0C:5B:38:46:85:3D:BC:81:61:2D:0B:A9:F3 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F49764015DB42AF8301950880 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11090 IP address blocks: 72.35.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:40:15:db:42:af:83:01:95:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c821fe9e-e05b-48ec-bc27-58dfccef08a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:05:4c:e5:e1:f0:35:b2:9b:cf:91:3c:8e: 98:3f:2e:14:a8:70:c4:6f:1e:ed:fe:54:84:f4:9e: b5:da:22:11:dc:2e:07:f0:7e:57:76:ef:65:b4:45: 84:e1:47:f7:de:41:0a:8e:62:3a:a6:2b:a2:39:24: 87:f2:3f:29:23:d9:2f:fa:e0:6b:57:a4:d1:5e:11: ca:48:f0:6b:04:bd:55:9d:39:4c:74:9a:3e:af:4e: 56:36:b3:5f:f8:d8:d2:9b:a8:67:a8:b3:b6:60:24: 7a:87:70:d3:1f:be:30:99:a0:82:e1:46:c7:6e:97: cb:c7:24:86:a7:04:49:da:41:4d:7d:c8:d5:34:01: 49:cb:3a:e1:36:67:d7:d5:96:15:01:f3:82:6d:3b: 03:77:75:92:0a:d6:dd:8d:eb:33:50:ca:d1:33:ae: b8:5e:e5:cd:33:0e:37:f1:0f:12:d1:d7:a9:1e:2a: f8:34:8e:bb:69:d1:88:9c:ee:a8:18:4a:a9:ca:f0: b5:1c:03:2a:21:5d:10:7e:f7:c6:d6:26:06:97:1d: 45:44:ad:cf:49:5f:a3:fd:43:e7:12:48:94:b9:30: c6:41:db:67:be:34:60:b1:57:bf:fc:65:2d:e2:b5: 0a:46:5d:c9:df:38:06:a0:f3:64:ba:ed:7a:f0:f6: 73:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:09:27:97:74:89:EF:0C:5B:38:46:85:3D:BC:81:61:2D:0B:A9:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:3c:15:d3:d9:38:a2:7d:f7:cf:3c:21:2f:84:1d:c3:e4:db: c1:4c:33:3f:32:4d:6d:2b:5a:10:84:b0:94:f6:49:9b:ff:c8: 6d:98:5c:e7:2c:4c:31:5a:96:27:af:f0:91:48:3f:5d:12:c6: 51:e5:d2:21:94:6e:91:c7:bc:db:99:85:cc:df:8c:84:44:8e: 2c:10:9c:ad:9f:17:43:b0:00:79:fa:c4:d3:8c:c5:18:f3:87: 75:a7:a9:22:75:bc:d0:39:ab:0b:f8:64:ca:ba:8d:f3:20:ea: 70:dc:d1:3d:de:65:f7:12:61:2e:7a:19:89:6c:31:d4:4e:db: 69:b4:8d:a2:88:54:96:97:b7:28:21:7d:35:ca:fd:15:4a:3b: ae:65:99:f7:b6:21:56:81:03:8d:16:40:cb:11:fa:ef:b5:fb: 2f:fe:7e:e2:0f:d1:8a:20:5b:e6:23:db:4b:18:e3:27:59:67: 48:2d:9e:4b:a1:4b:3f:11:73:e7:54:8f:42:4e:8b:13:8b:d7: 12:84:d8:a8:5d:97:82:2f:22:81:7b:69:79:fd:8c:bd:e5:c4: 95:74:08:34:13:0f:f5:24:88:48:16:4f:06:a0:14:a6:61:48: 65:14:ef:64:d0:e8:35:e5:33:a0:a3:23:56:29:ee:ed:23:50: 0d:69:98:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdkAV20KvgwGVCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzgyMWZlOWUtZTA1Yi00OGVjLWJjMjctNThkZmNjZWYwOGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp04FTOXh8DWym8+RPI6YPy4UqHDEbx7t/lSE 9J612iIR3C4H8H5Xdu9ltEWE4Uf33kEKjmI6piuiOSSH8j8pI9kv+uBrV6TRXhHK SPBrBL1VnTlMdJo+r05WNrNf+NjSm6hnqLO2YCR6h3DTH74wmaCC4UbHbpfLxySG pwRJ2kFNfcjVNAFJyzrhNmfX1ZYVAfOCbTsDd3WSCtbdjeszUMrRM664XuXNMw43 8Q8S0depHir4NI67adGInO6oGEqpyvC1HAMqIV0QfvfG1iYGlx1FRK3PSV+j/UPn EkiUuTDGQdtnvjRgsVe//GUt4rUKRl3J3zgGoPNkuu168PZzoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0JJ5d0ie8MWzhGhT28gWEtC6nzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYjkwMWQwYjAtMTJlNy0z NDMxLTljZDgtMDc2NDMxN2UwNTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk8FdPZOKJ99888IS+EHcPk28FMMz8yTW0rWhCEsJT2SZv/yG2YXOcs TDFaliev8JFIP10SxlHl0iGUbpHHvNuZhczfjIREjiwQnK2fF0OwAHn6xNOMxRjz h3WnqSJ1vNA5qwv4ZMq6jfMg6nDc0T3eZfcSYS56GYlsMdRO22m0jaKIVJaXtygh fTXK/RVKO65lmfe2IVaBA40WQMsR+u+1+y/+fuIP0YogW+Yj20sY4ydZZ0gtnkuh Sz8Rc+dUj0JOixOL1xKE2Khdl4IvIoF7aXn9jL3lxJV0CDQTD/UkiEgWTwagFKZh SGUU72TQ6DXlM6CjI1Yp7u0jUA1pmE4= -----END CERTIFICATE-----Generated at Sun Oct 11 17:12:04 2026 by rpki-client