$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa File: d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa (raw, json) Hash identifier: x2FYOAUkHDTSnFjIlkyjA1d9uB5P2w3PMwCc13XPAd8= Subject key identifier: F6:B1:31:41:72:7F:15:F1:F3:F2:F9:1C:7A:B4:B2:4B:ED:BE:59:20 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F497640635BB7D3E4A8011FA0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11090 IP address blocks: 72.35.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:40:63:5b:b7:d3:e4:a8:01:1f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=36f45dfc-b68e-4fb2-8c40-92b0e209ba38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d2:5c:4b:82:17:d3:10:4a:90:ed:95:02:80: db:39:ee:9a:8b:7e:82:ad:3a:a7:90:a7:ab:03:66: 98:7f:ca:49:bc:a1:8c:9c:02:0b:3b:ff:04:77:33: 6b:bc:36:bb:4b:41:fc:40:19:22:45:5f:88:8d:1d: 4e:e9:c7:71:c7:d0:df:c0:8a:58:49:f8:2b:98:06: 79:d6:a5:6a:e8:38:44:8e:7b:6f:f7:41:64:bd:a6: df:fe:57:b5:fe:f7:7b:ca:37:b2:a9:77:e4:7c:98: 3d:3b:02:71:ce:9f:f6:a9:ff:b0:cc:16:67:15:7b: f6:a6:58:6e:bd:82:aa:b8:9d:71:dc:2d:65:43:06: cc:fc:b7:b9:bd:18:f1:5e:a8:eb:2e:76:3a:f7:07: 98:a7:06:48:f2:c6:1e:ee:0a:6a:ae:d6:d1:18:db: 03:f9:99:62:a6:f8:c8:70:13:b8:6b:ba:d6:ff:30: 4e:92:c9:52:e0:4d:fb:bc:d8:0a:04:16:c0:ba:18: c9:6e:a7:3f:06:fa:e3:9e:d3:62:86:01:a1:c9:24: b1:67:6f:6b:8e:08:d0:91:80:cc:79:66:61:a2:8d: da:6a:a0:03:b1:79:37:f7:bb:b1:ec:37:62:2c:8c: 9f:9f:59:90:97:95:05:65:f6:7e:ef:33:a5:3d:fa: fb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B1:31:41:72:7F:15:F1:F3:F2:F9:1C:7A:B4:B2:4B:ED:BE:59:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:c6:e2:33:96:f7:15:2e:b3:14:c0:30:bc:f7:aa:4d:4d:fb: 75:d8:21:e4:06:b8:25:00:de:c8:c5:d3:4b:85:06:c3:2e:59: ad:b8:4b:27:b6:41:2b:c8:be:18:e4:55:28:b5:29:7a:ea:56: b5:5f:43:23:9e:8b:7f:e2:fe:56:72:2d:46:6b:15:67:70:e6: fc:29:33:6c:fc:d3:99:93:2d:6f:bc:a5:6e:87:97:45:5c:e1: 58:76:0f:c3:27:2c:96:d9:24:bb:43:73:52:fe:6f:fe:30:18: 2e:be:97:8b:78:fc:cf:fd:77:c8:ee:9c:54:fb:80:5a:6e:11: 68:be:e3:f5:e1:39:7f:b4:2e:d1:2a:03:4c:d2:52:2e:ac:59: a2:2d:04:16:99:24:60:eb:aa:bc:ec:8e:b0:d5:6d:a0:91:7c: 48:82:4a:9c:f7:68:83:8e:97:65:dc:01:75:3d:e3:6e:12:0f: d5:71:60:db:cc:32:e2:c1:03:4e:0d:b3:fa:4b:31:51:69:91: fb:d8:f8:0b:a1:69:47:fc:74:55:a6:4c:95:ba:2f:69:81:66: 61:b0:3f:44:08:23:9a:d6:45:fa:d1:5d:1c:f6:cd:33:71:bc: 86:f4:e7:a0:b7:de:e7:11:cf:9e:ea:fe:ad:a4:ba:6a:25:aa: b8:d3:0e:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdkBjW7fT5KgBH6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzZmNDVkZmMtYjY4ZS00ZmIyLThjNDAtOTJiMGUyMDliYTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNJcS4IX0xBKkO2VAoDbOe6ai36CrTqnkKer A2aYf8pJvKGMnAILO/8EdzNrvDa7S0H8QBkiRV+IjR1O6cdxx9DfwIpYSfgrmAZ5 1qVq6DhEjntv90Fkvabf/le1/vd7yjeyqXfkfJg9OwJxzp/2qf+wzBZnFXv2plhu vYKquJ1x3C1lQwbM/Le5vRjxXqjrLnY69weYpwZI8sYe7gpqrtbRGNsD+ZlipvjI cBO4a7rW/zBOkslS4E37vNgKBBbAuhjJbqc/BvrjntNihgGhySSxZ29rjgjQkYDM eWZhoo3aaqADsXk397ux7DdiLIyfn1mQl5UFZfZ+7zOlPfr7AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaxMUFyfxXx8/L5HHq0skvtvlkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZDFhMmMxMGQtY2NhMC0z ZmEzLTg3MTItZTY5MjczYjQ2YjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnG4jOW9xUusxTAMLz3qk1N+3XYIeQGuCUA3sjF00uFBsMuWa24Sye2 QSvIvhjkVSi1KXrqVrVfQyOei3/i/lZyLUZrFWdw5vwpM2z805mTLW+8pW6Hl0Vc 4Vh2D8MnLJbZJLtDc1L+b/4wGC6+l4t4/M/9d8junFT7gFpuEWi+4/XhOX+0LtEq A0zSUi6sWaItBBaZJGDrqrzsjrDVbaCRfEiCSpz3aIOOl2XcAXU9424SD9VxYNvM MuLBA04Ns/pLMVFpkfvY+AuhaUf8dFWmTJW6L2mBZmGwP0QII5rWRfrRXRz2zTNx vIb056C33ucRz57q/q2kumolqrjTDvo= -----END CERTIFICATE-----Generated at Sun Oct 11 18:58:31 2026 by rpki-client