$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/baf38e6a-d9fe-37b3-823c-aa7f115af507.roa File: baf38e6a-d9fe-37b3-823c-aa7f115af507.roa (raw, json) Hash identifier: dCpagqWFCZW2Z2AHqoqRru34f3MBL487Y7ciUzZCJLw= Subject key identifier: 32:7A:78:8E:0F:8E:F6:27:73:7B:63:18:51:BA:A5:E1:17:7C:37:24 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D1B1A15349824CE8CC92E69D0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/baf38e6a-d9fe-37b3-823c-aa7f115af507.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 11090 IP address blocks: 72.35.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:15:34:98:24:ce:8c:c9:2e:69:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=91d07cd3-ebf1-4f58-9fee-daee0dcb4fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9c:1c:83:59:e3:05:06:35:d6:c4:dd:10:f0: 02:43:ae:ce:23:df:bc:5d:46:e8:0e:c6:22:d1:43: ab:94:da:3d:b4:61:57:2c:82:79:f4:e5:00:92:84: d9:d5:c6:34:bc:88:df:fd:7a:1c:56:b1:41:a8:68: 1e:0d:72:1a:31:02:e5:92:00:eb:77:97:b5:75:5f: 95:2d:4f:0f:4a:98:80:c8:ca:9c:9a:2a:99:60:4c: 6d:0a:be:5f:64:a6:74:73:bc:ee:5c:d9:2c:5c:52: 84:f9:f3:d6:ce:84:a1:60:fb:36:9c:eb:4a:4e:4a: 5c:1e:30:ed:07:eb:62:02:66:1c:e1:b2:9d:d9:e7: c7:b7:8e:dc:bc:0d:b0:53:92:ca:35:0e:e6:2e:04: d8:64:ea:da:ca:b0:57:e4:1b:99:37:1b:71:f2:39: 6a:13:cc:aa:9c:9a:5d:fe:9c:04:45:5d:8e:22:fe: 46:fc:24:cb:2f:a3:08:2c:60:39:ab:a8:d4:e4:2b: c5:47:32:75:b6:91:70:64:c0:44:d4:19:a9:c1:1d: 58:f2:fc:1c:0d:87:19:fb:e9:cd:db:fb:32:6b:37: 5f:49:9d:b9:ff:52:e3:21:c9:12:9c:14:38:c4:18: 42:8b:18:c5:81:36:92:4d:83:ea:5a:ff:bd:36:30: 0a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7A:78:8E:0F:8E:F6:27:73:7B:63:18:51:BA:A5:E1:17:7C:37:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/baf38e6a-d9fe-37b3-823c-aa7f115af507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:17:2e:ef:9c:e6:21:73:e7:68:a2:17:d3:bf:7a:4d:4f:da: 35:61:97:7f:5f:c7:9d:40:1c:80:66:56:a8:24:97:97:d2:f5: 58:64:d9:fc:36:ff:aa:67:c6:49:18:18:26:02:6c:e7:8d:35: e5:3f:08:72:75:f0:5f:04:d0:62:d4:44:1a:d4:81:b3:1a:b4: 7e:ce:c0:b2:5e:ce:64:50:2f:db:9a:75:4f:7c:ee:66:e9:5b: c9:66:54:8e:f5:7e:91:e1:da:0e:d9:57:b9:d4:9a:06:64:72: ae:a6:ee:c4:38:71:36:31:09:a4:b2:c6:e2:7e:39:e1:3a:1d: a1:3d:6f:c3:1f:4f:a4:a9:8c:98:a7:7d:3c:67:01:60:fa:5b: 55:ba:63:28:7d:4d:3c:46:2a:5d:63:e6:a6:60:fd:4f:68:aa: 09:13:48:37:05:68:f7:bb:9f:11:3b:37:59:cb:e9:8a:16:0e: 89:78:1c:15:90:27:98:e9:91:36:1c:7b:5a:8c:86:16:b9:98: 16:8e:43:2d:54:5d:25:a9:1f:a0:92:ed:c0:fa:eb:c0:b6:e0: 8a:6c:95:d7:13:82:49:4f:03:11:db:07:10:59:5c:2d:27:d9: 23:2b:bb:3d:8a:7b:27:cb:cb:86:32:db:ca:2c:71:7b:16:50: e6:fc:fb:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhU0mCTOjMkuadAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk OTFkMDdjZDMtZWJmMS00ZjU4LTlmZWUtZGFlZTBkY2I0ZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5wcg1njBQY11sTdEPACQ67OI9+8XUboDsYi 0UOrlNo9tGFXLIJ59OUAkoTZ1cY0vIjf/XocVrFBqGgeDXIaMQLlkgDrd5e1dV+V LU8PSpiAyMqcmiqZYExtCr5fZKZ0c7zuXNksXFKE+fPWzoShYPs2nOtKTkpcHjDt B+tiAmYc4bKd2efHt47cvA2wU5LKNQ7mLgTYZOrayrBX5BuZNxtx8jlqE8yqnJpd /pwERV2OIv5G/CTLL6MILGA5q6jU5CvFRzJ1tpFwZMBE1BmpwR1Y8vwcDYcZ++nN 2/syazdfSZ25/1LjIckSnBQ4xBhCixjFgTaSTYPqWv+9NjAKSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJ6eI4PjvYnc3tjGFG6peEXfDckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYmFmMzhlNmEtZDlmZS0z N2IzLTgyM2MtYWE3ZjExNWFmNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwXLu+c5iFz52iiF9O/ek1P2jVhl39fx51AHIBmVqgkl5fS9Vhk2fw2 /6pnxkkYGCYCbOeNNeU/CHJ18F8E0GLURBrUgbMatH7OwLJezmRQL9uadU987mbp W8lmVI71fpHh2g7ZV7nUmgZkcq6m7sQ4cTYxCaSyxuJ+OeE6HaE9b8MfT6SpjJin fTxnAWD6W1W6Yyh9TTxGKl1j5qZg/U9oqgkTSDcFaPe7nxE7N1nL6YoWDol4HBWQ J5jpkTYce1qMhha5mBaOQy1UXSWpH6CS7cD668C24IpsldcTgklPAxHbBxBZXC0n 2SMruz2KeyfLy4Yy28oscXsWUOb8+2s= -----END CERTIFICATE-----Generated at Fri Mar 13 10:53:10 2026 by rpki-client